Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
File: AtboJz-QUawxy5V5LLUUANq3FKo.mft (raw, json)
Hash identifier: UhDRcO8sU1PJm8LutpdOmmf2t8DNx7b76+Mv3PXPLEU=
Subject key identifier: 5E:F6:08:4C:33:28:CD:DF:7C:32:52:42:0B:BD:AD:14:DE:DA:75:19
Authority key identifier: 02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
Certificate issuer: /CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Certificate serial: 019A1EAC5D7B753BF62172DFBF377A0B6ABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
Manifest number: 16F3
Signing time: Sun 26 Oct 2025 04:00:03 +0000
Manifest this update: Sun 26 Oct 2025 04:00:03 +0000
Manifest next update: Mon 27 Oct 2025 04:00:03 +0000
Files and hashes: 1: 7BZ6n-mqQeS7WvxbzQcDTyMPPGA.roa (hash: A/dQyVGugZPPzzKbUernmnmEYkigB1EDFhlRwxZgoK0=)
2: AtboJz-QUawxy5V5LLUUANq3FKo.crl (hash: N1TB3WqZOUTCMx8KMAPoLjbW1Enk0h8/odkv63e+Pgk=)
3: TqDzXylobmv5YZZYBBs97jYKvU0.roa (hash: NHV6Fswg/e8zrywVYBxwjK/JaW1VOFVPHkfR6/mh8w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ac:5d:7b:75:3b:f6:21:72:df:bf:37:7a:0b:6a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Validity
Not Before: Oct 26 04:00:03 2025 GMT
Not After : Oct 27 04:00:03 2025 GMT
Subject: CN=5ef6084c3328cddf7c3252420bbdad14deda7519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c4:36:fe:0b:a2:54:34:43:cc:02:4a:c7:79:
22:0b:8d:67:6b:44:73:b0:f7:20:18:7a:7d:71:6a:
74:93:93:c5:0b:39:73:88:fd:e4:21:44:90:f0:15:
fe:21:07:61:4d:67:f3:35:42:6b:1e:2d:ce:17:55:
f1:a8:9a:21:02:65:35:26:98:6b:1d:41:90:2b:5e:
ff:25:48:4c:45:20:80:04:20:b1:a4:f5:0c:3b:ad:
09:ad:f4:7f:d6:22:d2:c3:4c:c8:d2:c9:8a:ef:c8:
e3:7b:08:8b:c1:1e:2f:fc:ad:2c:64:8b:b3:8a:ce:
3b:f6:5f:f9:a4:c6:c9:c4:a1:dd:82:56:71:55:f1:
13:be:3d:34:be:97:8d:4f:66:c2:ac:bc:f1:d6:30:
40:1c:35:7e:b4:0d:9c:0d:8d:7d:5c:5f:13:9b:d5:
b1:e9:19:b1:d7:84:54:a0:70:03:e1:95:e5:b1:e5:
3d:bb:2c:65:67:44:63:32:9d:8b:5e:cb:db:6f:c1:
1c:ef:96:21:88:32:5b:89:08:4a:e3:bc:98:5c:e3:
bc:2d:57:e8:5a:f2:fb:8c:c8:90:d3:dc:ad:3c:c3:
fb:e7:9c:04:95:03:2b:a0:c4:d8:1e:71:82:f2:f3:
45:d8:18:9a:46:42:ea:0e:d2:5f:f4:e0:26:0d:25:
a1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F6:08:4C:33:28:CD:DF:7C:32:52:42:0B:BD:AD:14:DE:DA:75:19
X509v3 Authority Key Identifier:
keyid:02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e4:13:0b:af:0e:34:63:e2:3b:8c:39:0c:06:8d:87:99:fd:
b8:9b:61:ee:c2:f8:06:be:2a:16:c9:83:36:0d:d2:51:17:7f:
e1:e0:76:39:6b:dd:08:33:d6:55:a8:8b:cd:8a:1f:03:ef:1f:
50:07:6a:65:08:96:7f:7c:85:a1:0d:a7:c1:f9:f1:29:58:ff:
35:73:03:2e:20:3c:d1:13:ff:bd:f1:d5:b7:4e:20:3b:0e:c2:
70:c5:28:f2:7e:05:e7:c8:8b:de:4e:f3:93:d0:fb:65:0e:28:
70:0e:ee:4e:b4:28:3a:ae:2c:72:5a:8f:8b:85:35:f5:c7:fb:
00:2f:56:54:a3:9a:23:69:44:41:dd:44:82:af:bb:2f:8d:0a:
d1:07:87:99:83:43:c7:5c:1f:71:17:58:35:26:6a:3c:fe:17:
b5:3b:e2:7a:fc:5c:75:50:c8:72:09:93:bb:84:aa:8e:82:a4:
19:2e:89:2b:45:2f:fa:21:08:41:de:28:5b:62:99:a6:73:da:
33:a0:bc:0a:56:45:00:53:49:eb:db:55:4a:4f:65:77:be:57:
e6:af:ac:69:35:70:27:62:9a:4b:c2:32:06:f1:16:0d:9b:a5:
4b:14:59:b2:07:4d:07:8b:1d:75:9e:57:a4:08:78:ee:75:c9:
20:61:a4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:32:42 2025 by rpki-client