Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
File: atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft (raw, json)
Hash identifier: 5mnBa3E8/AhO4kdSZpG9OYmOyGiB2UiANzeQR4+05U0=
Subject key identifier: 79:73:C2:19:88:6C:53:76:D3:BB:BD:22:40:2E:AD:13:B0:3D:6E:14
Authority key identifier: 6A:D3:8B:D4:C0:D0:E9:F3:02:80:21:98:4C:D8:35:56:04:7F:63:98
Certificate issuer: /CN=6ad38bd4c0d0e9f3028021984cd83556047f6398
Certificate serial: 019A05241CBB48D337F9D7A64E8D0E1C0E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
Manifest number: 60
Signing time: Tue 21 Oct 2025 05:00:44 +0000
Manifest this update: Tue 21 Oct 2025 05:00:44 +0000
Manifest next update: Wed 22 Oct 2025 05:00:44 +0000
Files and hashes: 1: A_iHhKALil4lTEQzAUwPF3mIEBw.roa (hash: foFKLdP+k5Z9u1b7IqZhZYmzZ2C3HRJY7iqeg2B9yu0=)
2: atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl (hash: ysTTFV4cHc1BKCnSWLYhOnGQwSYbTo3ctz9rWNMafO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:24:1c:bb:48:d3:37:f9:d7:a6:4e:8d:0e:1c:0e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad38bd4c0d0e9f3028021984cd83556047f6398
Validity
Not Before: Oct 21 05:00:44 2025 GMT
Not After : Oct 22 05:00:44 2025 GMT
Subject: CN=7973c219886c5376d3bbbd22402ead13b03d6e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:45:c9:4e:2f:2c:ce:76:c2:7b:2e:36:44:
c2:89:0a:9b:b8:4a:69:50:3e:89:c4:73:d1:2f:fd:
4e:71:8c:9f:a4:ab:02:3d:78:a5:5b:57:8b:73:f2:
25:45:da:55:8f:67:83:2d:c8:e3:69:19:43:e1:e3:
7d:8f:d4:13:8e:2a:40:37:fd:48:34:98:67:d2:50:
4e:e2:a5:13:ce:17:e7:54:9e:db:63:09:15:c3:0e:
99:43:74:7e:10:05:49:3e:2e:8b:fe:9e:c0:fc:fb:
a0:8a:4b:1a:cb:2f:bb:6d:d7:c0:6a:3f:83:1f:6c:
46:67:c2:a2:41:7b:62:ee:93:d5:12:26:6e:27:04:
f5:52:2c:2b:66:9b:65:e9:82:f9:0f:61:c2:33:b3:
1b:03:06:c7:2f:4c:ef:c6:cd:59:5b:f1:4c:02:bb:
ee:1f:19:a4:9d:53:41:40:db:65:47:74:d8:a1:c9:
7f:3e:96:20:89:ec:c8:54:b1:eb:4b:1f:88:e2:eb:
b6:64:35:dc:4b:a1:22:e4:d0:9c:f3:ad:d1:06:14:
0c:7b:25:40:b1:61:ce:f8:a0:4a:cd:f9:26:28:73:
8d:ea:a2:72:63:07:a5:72:3d:9e:27:2b:67:89:66:
cb:92:b6:3e:cb:80:25:92:4a:6b:fc:b3:4a:df:92:
80:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:73:C2:19:88:6C:53:76:D3:BB:BD:22:40:2E:AD:13:B0:3D:6E:14
X509v3 Authority Key Identifier:
keyid:6A:D3:8B:D4:C0:D0:E9:F3:02:80:21:98:4C:D8:35:56:04:7F:63:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f1:f4:88:4d:98:50:7a:32:a7:2b:95:69:0d:04:e6:2b:b9:
0e:48:16:38:04:0b:b9:ce:56:92:89:bb:b0:e1:33:2a:13:62:
4a:2f:ca:26:97:ff:52:00:40:2d:0f:93:67:5e:f0:fc:4e:b3:
55:b5:c5:6d:5b:04:84:5c:57:88:e3:86:e5:ff:90:12:3c:74:
ed:a2:1f:bc:09:06:52:c0:29:5d:65:1c:9b:65:dd:b1:1d:f5:
ee:5d:9d:0d:ce:e5:36:b0:cd:49:2f:90:6b:71:31:d8:ae:9a:
3c:40:8b:07:74:70:db:96:67:da:45:bd:2a:2f:da:86:ac:08:
55:de:9b:30:d1:74:65:91:4e:8c:fd:6d:db:7f:66:fe:5c:ad:
4a:b8:5d:9a:f2:70:98:ed:bd:df:96:21:0f:1c:05:3b:90:09:
0e:d7:4d:b7:a2:d2:1a:1f:7d:fc:68:dd:6c:e0:98:22:87:59:
5e:6d:e3:a9:02:61:2b:0d:1b:0c:7e:9b:94:ef:70:5f:50:c6:
b4:80:6e:2f:69:9a:00:1f:a9:e6:06:2c:99:94:d3:97:e6:5e:
35:6c:e5:80:19:69:cc:eb:82:21:db:b2:96:cc:25:d9:f2:d6:
c4:e3:c2:82:e8:3e:70:eb:f5:e0:13:b5:dc:81:07:d1:e3:ec:
c9:c1:d9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:12:50 2025 by rpki-client