Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
File: ATx0EyWXFizbLdY3YKvZlx4wv2M.mft (raw, json)
Hash identifier: 77l8FkekuODqtouqBFPoO6XyokeUjBxR/XojGkrYdRc=
Subject key identifier: E3:0D:47:F8:AE:A2:AC:40:E3:C7:72:F1:87:C1:26:C1:66:D3:87:9C
Authority key identifier: 01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63
Certificate issuer: /CN=013c74132597162cdb2dd63760abd9971e30bf63
Certificate serial: 019A28557475A34CB592BD1F2679AD3D519D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
Manifest number: 0D7A
Signing time: Tue 28 Oct 2025 01:01:20 +0000
Manifest this update: Tue 28 Oct 2025 01:01:20 +0000
Manifest next update: Wed 29 Oct 2025 01:01:20 +0000
Files and hashes: 1: ATx0EyWXFizbLdY3YKvZlx4wv2M.crl (hash: GCtWrRu213qMy0ppflYj/mUeR49dr4Dcz/mdpOg65Zw=)
2: pUM6ACWqLcQahA0lg8mmij4I6d4.roa (hash: UbfUIFFNnl9kUqI4HdZKMmMa2NoguiRD4aW6tenaTi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:55:74:75:a3:4c:b5:92:bd:1f:26:79:ad:3d:51:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=013c74132597162cdb2dd63760abd9971e30bf63
Validity
Not Before: Oct 28 01:01:20 2025 GMT
Not After : Oct 29 01:01:20 2025 GMT
Subject: CN=e30d47f8aea2ac40e3c772f187c126c166d3879c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:51:f4:39:bf:00:5f:cb:46:20:96:29:7e:7b:
5e:77:33:70:fc:9a:e3:dc:b7:a0:e8:08:b6:dd:cb:
24:80:9f:cb:7c:4c:97:d1:38:ba:51:20:5e:89:39:
dd:3c:df:f3:a6:26:4f:79:06:5a:62:09:18:37:1c:
21:df:11:df:1b:07:7c:cb:f5:20:ad:e4:82:89:1d:
6d:db:56:3b:7d:b8:13:b8:df:09:82:08:ba:9b:13:
51:83:7a:28:d1:8d:3e:df:b4:c5:2f:d6:5c:1e:ab:
15:3d:a2:01:c9:42:f2:26:f3:08:bb:40:ce:85:2a:
66:ea:c6:7f:c6:0d:d6:d8:04:45:aa:b1:c0:82:5c:
3b:9f:a4:f6:3f:06:82:2c:75:34:08:fe:39:a5:90:
ce:78:1e:cc:07:55:03:d4:01:99:42:51:11:08:46:
fc:e7:e3:b4:9f:70:34:30:3e:28:62:5b:41:a5:18:
5e:77:5e:b3:d2:dc:ee:18:4d:99:11:9a:e6:36:24:
7d:2d:3f:d5:e4:84:39:26:29:94:9f:1b:8c:b6:c2:
6c:9e:05:19:7e:4a:c6:ba:4b:6f:33:01:90:50:61:
b5:d8:78:89:b8:b1:bf:0c:f9:98:46:d0:c2:3d:a7:
95:1c:53:cb:52:14:67:68:8b:7e:e4:cb:8a:24:30:
82:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0D:47:F8:AE:A2:AC:40:E3:C7:72:F1:87:C1:26:C1:66:D3:87:9C
X509v3 Authority Key Identifier:
keyid:01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c9:7f:67:58:44:10:f6:6c:2d:60:76:2e:f0:d9:a7:c5:08:
b0:5e:21:1b:ae:a5:64:fe:45:b5:12:3b:e8:7b:56:63:e0:0a:
e0:8e:6e:05:6b:e1:c2:2a:f4:91:0c:41:23:7a:36:e4:eb:1b:
cd:26:8c:98:88:d4:dc:5c:74:28:63:8a:8b:29:92:9d:19:4a:
95:36:5f:87:2a:1e:8e:7e:f7:0f:f7:cf:dd:ab:96:82:77:b3:
06:12:af:7c:aa:71:7a:45:df:5a:48:35:c0:0d:1a:5b:a2:09:
e0:18:fa:77:fc:b5:c2:df:ec:30:c5:28:d5:87:e7:4a:2b:19:
e5:cb:31:92:a5:d3:fc:0d:96:94:18:d4:84:a4:13:e3:9d:9c:
95:3b:7d:10:68:10:b0:1d:ac:a8:04:cb:86:38:b1:ce:07:8b:
fb:13:5c:7e:ab:39:79:62:42:46:53:90:69:0e:1e:72:08:d5:
f1:9c:3c:fb:af:84:bb:13:b3:6e:ba:28:67:2a:8b:da:b3:7c:
eb:ac:84:47:ef:bd:3f:f8:51:5f:18:f7:96:09:dc:a2:1e:3b:
88:7f:78:9b:aa:54:22:c8:44:22:65:c5:c8:ae:89:81:86:a3:
f1:4c:2f:5b:17:e4:ec:d0:5a:13:5f:df:de:48:26:08:8e:c7:
52:7c:d2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:52:41 2025 by rpki-client