Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
File: atcO8l5SLA0m6Xeh0k_3fq062hk.mft (raw, json)
Hash identifier: xYOWGTKOvWcWu72tYXrOP6jtxFihn+fwH1Fur7FmE7g=
Subject key identifier: 58:69:B4:FF:66:37:AF:00:C7:B9:85:AB:A5:29:78:2D:52:04:B6:75
Authority key identifier: 6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
Certificate issuer: /CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Certificate serial: 01984889769B4F5EF3562BD606C8933A9B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
Manifest number: 024C
Signing time: Sat 26 Jul 2025 21:00:25 +0000
Manifest this update: Sat 26 Jul 2025 21:00:25 +0000
Manifest next update: Sun 27 Jul 2025 21:00:25 +0000
Files and hashes: 1: HcN2gdm9gOEIgcHPMP-W9ZnlcUw.roa (hash: N+CqOXxB6Ih/1s1CE254m5auzMH5uFnT/go6OIZT6TM=)
2: atcO8l5SLA0m6Xeh0k_3fq062hk.crl (hash: hQFQog+kmtBkvNrpL/8Uxvddier4FjZ4H+dzL34MJdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:76:9b:4f:5e:f3:56:2b:d6:06:c8:93:3a:9b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Validity
Not Before: Jul 26 21:00:25 2025 GMT
Not After : Jul 27 21:00:25 2025 GMT
Subject: CN=5869b4ff6637af00c7b985aba529782d5204b675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e8:21:30:ae:f3:09:5e:40:a6:e4:ce:88:30:
82:1c:d1:11:dd:67:f9:0b:f0:98:44:18:6a:c7:66:
e7:d6:bd:2e:be:5b:54:88:a4:84:cb:35:bd:9d:bc:
79:64:c5:a6:35:72:78:ce:0a:88:d8:50:56:67:99:
88:d8:a1:0c:35:ea:b0:55:2c:4d:4a:81:43:b0:76:
e1:d9:b1:a5:3e:f7:8f:c3:41:b9:54:72:09:5b:77:
20:4e:49:cd:d6:4d:0c:a1:57:a3:56:78:48:88:25:
64:0e:45:1d:88:e6:d0:27:2f:73:42:0c:a4:00:e1:
21:1b:24:c2:22:ee:8c:bd:44:94:c7:43:13:f9:1f:
20:19:f2:b1:27:67:ae:0f:37:66:e4:72:6f:40:f6:
dc:5f:79:4d:7a:16:19:80:c3:3f:5c:dc:7e:0e:26:
25:ec:cd:99:f7:f2:e5:8c:5a:07:53:3d:47:6d:bb:
4f:a7:a1:2f:c8:e9:f8:af:7f:5b:3e:60:54:63:46:
85:57:11:b0:30:20:29:ed:96:b9:d2:10:51:20:31:
04:39:18:ae:41:31:75:43:5f:0a:92:b5:fc:c5:4f:
76:bb:3d:25:b7:10:c7:b1:4f:74:de:59:9d:19:43:
ea:82:ca:49:20:e7:26:67:73:06:56:c4:10:2f:b0:
1e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:69:B4:FF:66:37:AF:00:C7:B9:85:AB:A5:29:78:2D:52:04:B6:75
X509v3 Authority Key Identifier:
keyid:6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c3:0f:02:0a:52:d4:62:39:c3:5c:3f:98:5d:2f:d7:21:57:
70:59:5b:3c:b3:fb:50:4f:5c:88:da:8c:ce:47:70:b3:6c:2b:
c1:09:3b:c6:81:9d:da:33:ad:8d:ad:88:e0:ec:c7:8a:47:27:
29:d6:da:36:74:7e:79:af:6a:d1:de:5b:ce:fd:e4:fe:a5:c6:
17:63:d2:70:4d:86:28:21:22:5e:19:da:89:88:fb:2e:39:cc:
69:26:f7:3b:66:ba:ff:2f:91:47:e5:e2:b0:9b:76:f2:24:92:
fd:6d:71:de:cb:81:f1:f8:70:b5:7c:65:b5:df:30:5d:b4:3d:
f3:ca:75:10:5b:0e:25:44:28:56:f4:83:a2:77:bc:91:94:49:
1e:8d:e7:23:5f:ea:8b:e8:07:7b:e2:ae:89:71:24:46:4b:4e:
0c:f3:58:c4:1c:19:01:a7:58:b7:be:99:91:a1:e2:cb:a3:d0:
ce:f9:6a:6d:3d:83:d5:9a:d0:99:61:3f:d8:3f:ac:cb:57:19:
d7:97:16:e8:ec:81:2f:f6:09:76:a4:5d:4a:ad:d1:7a:41:84:
65:fa:16:06:50:e5:b3:3a:48:fe:e4:6f:05:ba:16:ef:fd:89:
fc:7d:ca:26:4c:68:ed:6e:f8:58:cd:96:b1:42:be:be:52:c3:
5c:58:10:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIiXabT17zVivWBsiTOptaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZDcwZWYyNWU1MjJjMGQyNmU5NzdhMWQyNGZmNzdlYWQz
YWRhMTkwHhcNMjUwNzI2MjEwMDI1WhcNMjUwNzI3MjEwMDI1WjAzMTEwLwYDVQQD
Eyg1ODY5YjRmZjY2MzdhZjAwYzdiOTg1YWJhNTI5NzgyZDUyMDRiNjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ughMK7zCV5ApuTOiDCCHNER3Wf5
C/CYRBhqx2bn1r0uvltUiKSEyzW9nbx5ZMWmNXJ4zgqI2FBWZ5mI2KEMNeqwVSxN
SoFDsHbh2bGlPvePw0G5VHIJW3cgTknN1k0MoVejVnhIiCVkDkUdiObQJy9zQgyk
AOEhGyTCIu6MvUSUx0MT+R8gGfKxJ2euDzdm5HJvQPbcX3lNehYZgMM/XNx+DiYl
7M2Z9/LljFoHUz1HbbtPp6EvyOn4r39bPmBUY0aFVxGwMCAp7Za50hBRIDEEORiu
QTF1Q18KkrX8xU92uz0ltxDHsU903lmdGUPqgspJIOcmZ3MGVsQQL7Ae1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhptP9mN68Ax7mFq6UpeC1SBLZ1MB8GA1UdIwQY
MBaAFGrXDvJeUiwNJul3odJP936tOtoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXRjTzhsNVNMQTBtNlhlaDBrXzNmcTA2MmhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8yMzk2OGEtZmEzNi00NjU0LWJmYmYt
OTQwNGUxNzcyMDBlLzEvYXRjTzhsNVNMQTBtNlhlaDBrXzNmcTA2MmhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8yMzk2OGEtZmEzNi00NjU0LWJmYmYtOTQwNGUxNzcyMDBl
LzEvYXRjTzhsNVNMQTBtNlhlaDBrXzNmcTA2MmhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmMMPAgpS
1GI5w1w/mF0v1yFXcFlbPLP7UE9ciNqMzkdws2wrwQk7xoGd2jOtja2I4OzHikcn
KdbaNnR+ea9q0d5bzv3k/qXGF2PScE2GKCEiXhnaiYj7LjnMaSb3O2a6/y+RR+Xi
sJt28iSS/W1x3suB8fhwtXxltd8wXbQ988p1EFsOJUQoVvSDone8kZRJHo3nI1/q
i+gHe+KuiXEkRktODPNYxBwZAadYt76ZkaHiy6PQzvlqbT2D1ZrQmWE/2D+sy1cZ
15cW6OyBL/YJdqRdSq3RekGEZfoWBlDlszpI/uRvBboW7/2J/H3KJkxo7W74WM2W
sUK+vlLDXFgQTg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 03:26:21 2025 by rpki-client