Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
File: AtDoiIXvSLIMh7dv2F1C5us9cYM.mft (raw, json)
Hash identifier: n4OY7bsTw0zXlfm8rk4UCARvrsepdYbqyLpP2jxaLvw=
Subject key identifier: C3:BE:5D:D1:19:A2:85:3C:B9:07:6C:3E:96:DB:45:52:14:06:B4:FF
Authority key identifier: 02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
Certificate issuer: /CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Certificate serial: 019A1EE37C3868A4C3AB78F28DF92E87BDEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
Manifest number: 1410
Signing time: Sun 26 Oct 2025 05:00:16 +0000
Manifest this update: Sun 26 Oct 2025 05:00:16 +0000
Manifest next update: Mon 27 Oct 2025 05:00:16 +0000
Files and hashes: 1: 1-HJDRT0gD2nhMW6JUwz556mvKj8.roa (hash: JYyO1+sMj5YlHliO+us6FbC+ChQWiYGalwTjRduJQ2E=)
2: AtDoiIXvSLIMh7dv2F1C5us9cYM.crl (hash: Zy9ioWspKhKxA2cLPnqPBXDX915tv1c5dLqklfeu004=)
3: o2P4F8wGwS7Hu_Z9DavQWwnt9SU.roa (hash: vp0AJWW08FmlyogXHIG/NX7ZAqoKcGLBFnnNS6LdgqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:e3:7c:38:68:a4:c3:ab:78:f2:8d:f9:2e:87:bd:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Validity
Not Before: Oct 26 05:00:16 2025 GMT
Not After : Oct 27 05:00:16 2025 GMT
Subject: CN=c3be5dd119a2853cb9076c3e96db45521406b4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:75:89:43:4f:67:82:3c:df:8b:be:2a:95:a2:
ac:9c:48:9a:83:cb:82:a7:c2:f5:29:dd:49:c5:10:
78:8c:9c:e6:a5:af:af:c4:b2:e7:56:2d:82:cc:c6:
3a:bb:97:a5:87:b3:be:94:67:5a:bc:08:e9:82:d5:
9c:96:ed:46:cd:3c:93:9a:00:d9:67:27:f0:dd:5c:
87:4e:57:6c:02:e0:85:02:75:8d:a5:40:b8:62:dd:
c7:ff:5e:f0:93:fb:1f:77:f0:71:12:b9:2c:14:51:
6e:60:c6:a3:0b:1e:2d:d0:89:2f:4f:97:fc:3d:97:
0b:f7:92:3f:7b:a3:0d:01:b2:7d:ec:e8:39:c1:ac:
be:55:65:66:80:6d:b4:d7:68:86:40:64:83:6f:b8:
b3:da:59:45:19:a2:c6:b4:77:f6:f6:a9:79:d3:5f:
ad:14:8e:51:05:c1:7f:20:f6:d6:8e:af:a7:d0:93:
4b:17:69:c4:bf:e0:00:f8:1c:83:34:5c:25:1e:48:
7e:98:e5:4a:f2:1e:b8:f3:59:54:ee:f4:41:28:60:
01:df:aa:24:e5:70:04:93:48:02:eb:b0:ba:3f:4b:
64:05:ea:dc:3a:e4:ed:2f:f5:a3:8e:26:d0:db:4b:
75:be:e4:68:3b:5d:6d:41:6c:9f:86:a2:ff:7c:83:
2a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BE:5D:D1:19:A2:85:3C:B9:07:6C:3E:96:DB:45:52:14:06:B4:FF
X509v3 Authority Key Identifier:
keyid:02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a2:a1:ce:74:0a:b7:f7:db:51:97:ca:42:f1:e7:26:58:ff:
40:0d:47:59:93:7f:ff:66:b5:32:58:da:bd:e6:e6:87:b0:9e:
c3:ce:c8:6e:c8:d7:28:36:77:b2:4e:3b:e0:82:b6:45:d8:41:
68:75:e5:53:81:34:af:b3:91:b9:f7:82:96:a5:0a:3d:c2:bd:
c4:46:58:f1:4f:2b:f3:c6:8d:0f:17:24:09:03:3d:3f:c3:19:
c8:49:df:90:af:8a:96:1f:8e:62:41:1d:51:c4:7c:83:32:95:
df:fd:40:d6:d3:38:4d:fd:95:b2:c5:90:a9:97:3f:fe:6d:07:
7e:87:a7:37:1e:91:32:24:73:45:e2:43:86:cb:0f:7e:ee:8a:
91:52:06:c4:6e:de:a8:19:1c:92:13:6a:7a:1f:05:2e:a4:77:
db:5d:e0:77:57:01:59:eb:27:e7:ae:26:30:00:af:ff:2f:6b:
44:98:4a:16:74:8f:f0:ad:84:a8:43:cb:01:be:87:81:b8:64:
a2:71:09:a5:19:72:71:ac:a0:99:d4:3e:d9:55:37:1f:18:1d:
1b:ef:f7:d7:70:64:05:7c:30:c7:7f:ae:b1:35:39:a4:e5:71:
eb:cf:7d:78:50:01:e5:39:aa:11:00:9e:76:96:9d:3a:a6:72:
c0:55:96:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoe43w4aKTDq3jyjfkuh73sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZDBlODg4ODVlZjQ4YjIwYzg3Yjc2ZmQ4NWQ0MmU2ZWIz
ZDcxODMwHhcNMjUxMDI2MDUwMDE2WhcNMjUxMDI3MDUwMDE2WjAzMTEwLwYDVQQD
EyhjM2JlNWRkMTE5YTI4NTNjYjkwNzZjM2U5NmRiNDU1MjE0MDZiNGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XWJQ09ngjzfi74qlaKsnEiag8uC
p8L1Kd1JxRB4jJzmpa+vxLLnVi2CzMY6u5elh7O+lGdavAjpgtWclu1GzTyTmgDZ
Zyfw3VyHTldsAuCFAnWNpUC4Yt3H/17wk/sfd/BxErksFFFuYMajCx4t0IkvT5f8
PZcL95I/e6MNAbJ97Og5way+VWVmgG2012iGQGSDb7iz2llFGaLGtHf29ql501+t
FI5RBcF/IPbWjq+n0JNLF2nEv+AA+ByDNFwlHkh+mOVK8h6481lU7vRBKGAB36ok
5XAEk0gC67C6P0tkBercOuTtL/WjjibQ20t1vuRoO11tQWyfhqL/fIMqRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMO+XdEZooU8uQdsPpbbRVIUBrT/MB8GA1UdIwQY
MBaAFALQ6IiF70iyDIe3b9hdQubrPXGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81ZjRlYjYtNjAyNi00MDk4LTg4ZDct
OTUzYzY4NTA2ZDVjLzEvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS81ZjRlYjYtNjAyNi00MDk4LTg4ZDctOTUzYzY4NTA2ZDVj
LzEvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALKKhznQK
t/fbUZfKQvHnJlj/QA1HWZN//2a1Mljavebmh7Cew87IbsjXKDZ3sk474IK2RdhB
aHXlU4E0r7ORufeClqUKPcK9xEZY8U8r88aNDxckCQM9P8MZyEnfkK+Klh+OYkEd
UcR8gzKV3/1A1tM4Tf2VssWQqZc//m0HfoenNx6RMiRzReJDhssPfu6KkVIGxG7e
qBkckhNqeh8FLqR3213gd1cBWesn564mMACv/y9rRJhKFnSP8K2EqEPLAb6Hgbhk
onEJpRlycaygmdQ+2VU3HxgdG+/313BkBXwwx3+usTU5pOVx6899eFAB5TmqEQCe
dpadOqZywFWWTw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 10:49:04 2025 by rpki-client