Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
File: atcO8l5SLA0m6Xeh0k_3fq062hk.mft (raw, json)
Hash identifier: JP7TZ7+tXNF76093c6jOn/7Rm+CHncowhql0/0aTojI=
Subject key identifier: B5:F2:14:35:5F:17:20:6A:31:54:47:3A:ED:A8:94:97:77:BD:29:D2
Authority key identifier: 6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
Certificate issuer: /CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Certificate serial: 019A7113732E4B7D758A46E3A66CCD57C814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
Manifest number: 036E
Signing time: Tue 11 Nov 2025 04:01:31 +0000
Manifest this update: Tue 11 Nov 2025 04:01:31 +0000
Manifest next update: Wed 12 Nov 2025 04:01:31 +0000
Files and hashes: 1: 0ZwVYpJfrbJyYn_YtY3RuMq5lcg.roa (hash: gf6HtAdxN0GhhrFPeZ2e6ZRLEIlkoJtABmVeq8td+ik=)
2: atcO8l5SLA0m6Xeh0k_3fq062hk.crl (hash: QvN8PQMioMdf6ZBK+xt0mK2jrncvCF6hxPwb++BJUaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:73:2e:4b:7d:75:8a:46:e3:a6:6c:cd:57:c8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Validity
Not Before: Nov 11 04:01:31 2025 GMT
Not After : Nov 12 04:01:31 2025 GMT
Subject: CN=b5f214355f17206a3154473aeda8949777bd29d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:04:6e:a1:04:26:e3:63:ea:54:1a:a5:15:9a:
ac:e3:1e:12:b0:38:a7:f2:7d:43:59:31:96:ac:0f:
cd:e0:96:28:0b:e7:be:ab:6b:6a:21:72:a6:38:1c:
b5:c5:9f:43:47:ad:0b:d1:d1:aa:d0:ae:d6:57:2d:
3d:57:e8:61:27:77:c9:1b:f6:a4:f8:bb:9d:21:59:
a9:e8:5d:83:0e:57:8c:41:1e:e6:fa:1a:6a:08:5d:
82:18:15:f9:79:85:c2:35:62:cb:6e:e9:6d:1c:40:
df:94:41:2e:dc:99:20:df:8a:34:15:26:b6:eb:3e:
c8:52:f9:84:5b:0d:29:af:01:98:37:13:a5:ac:a0:
95:c1:17:61:ba:d9:5b:f1:d0:6e:62:a8:e0:bd:fd:
fd:b6:ea:b0:bc:c2:28:01:43:67:2c:2f:fb:73:9b:
2f:7d:74:45:69:f4:bc:cd:c2:6a:1b:b4:d0:08:59:
03:ec:a5:7a:73:d5:d8:05:08:32:4d:5e:bf:d9:24:
90:8b:c9:ed:02:20:f0:d2:b6:97:18:ad:a4:62:c4:
af:83:35:23:c6:05:46:7b:3e:63:5f:cd:2b:dd:b1:
8a:af:b6:5c:36:3b:9f:63:19:ad:d8:3c:77:3c:a8:
7d:76:15:25:39:c8:0a:4a:b6:a1:58:6f:15:17:e7:
d4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F2:14:35:5F:17:20:6A:31:54:47:3A:ED:A8:94:97:77:BD:29:D2
X509v3 Authority Key Identifier:
keyid:6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:7f:8d:2d:26:77:53:ca:bf:dc:0f:32:ed:6b:92:bd:87:f5:
b7:6a:21:58:f0:4b:a2:cb:2f:05:41:1d:4a:39:54:dd:e7:98:
1b:bd:d5:bb:39:eb:d4:da:80:8c:0e:ae:20:c1:83:83:2f:d7:
84:51:a2:53:55:c7:84:3e:f2:9b:aa:90:a2:ce:03:99:62:5e:
a2:16:7d:1d:8e:88:1e:55:3b:2e:46:bb:86:3d:fd:87:6c:03:
86:34:79:37:6e:3c:d3:1a:a9:1e:53:0b:e6:f3:b0:65:fd:c7:
bf:68:7a:6b:35:a9:11:08:77:87:d4:b9:cb:a5:04:16:c9:ae:
46:eb:19:45:e8:0a:73:26:de:e0:29:99:be:79:0a:27:80:0e:
53:96:62:59:c2:e6:c3:37:bc:e8:e7:f7:c2:1b:38:15:a3:5b:
a3:ac:66:7a:15:1b:62:f6:55:d5:43:a9:4d:2d:56:d7:b0:21:
09:95:57:f0:37:79:7d:5b:ba:7e:46:ce:a4:bd:c5:b4:c3:5e:
00:1d:ff:3d:44:91:77:49:00:a8:cb:53:0d:4d:98:0b:f2:b5:
d3:ab:47:36:d2:30:cd:3b:69:e5:64:3e:cd:ab:60:27:ff:06:
11:a9:6e:00:b9:10:2f:bc:55:8b:7a:38:37:2a:68:ed:66:5f:
db:4b:7f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:33 2025 by rpki-client