Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
File: AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft (raw, json)
Hash identifier: wAvhtsOlLkUd0GWZrLchD6IBoLeyu3VpEIIy51Mp8KU=
Subject key identifier: E7:68:5F:8D:5E:6C:63:AA:31:52:7E:0A:30:F2:B8:D8:FC:91:7A:F4
Authority key identifier: 02:DA:4C:D0:44:C6:E9:87:3A:C8:FD:9C:FD:30:F1:EC:B3:D8:0B:CA
Certificate issuer: /CN=02da4cd044c6e9873ac8fd9cfd30f1ecb3d80bca
Certificate serial: 019A71B78BBC257D01E718611D96C3C12DC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:00:45 +0000
Manifest this update: Tue 11 Nov 2025 07:00:45 +0000
Manifest next update: Wed 12 Nov 2025 07:00:45 +0000
Files and hashes: 1: AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl (hash: t4rHJobrH/Y82pA0gdnz+zLCFEkI5p5tlS2OcU9rBU0=)
2: dL5tLsAU6PWlL4weQ4Up71k3hXA.roa (hash: ZvntQMrxSDwlXP02WdClHLb+VoQxqS4KZZo3fc10HIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:8b:bc:25:7d:01:e7:18:61:1d:96:c3:c1:2d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02da4cd044c6e9873ac8fd9cfd30f1ecb3d80bca
Validity
Not Before: Nov 11 07:00:45 2025 GMT
Not After : Nov 12 07:00:45 2025 GMT
Subject: CN=e7685f8d5e6c63aa31527e0a30f2b8d8fc917af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6b:a6:e2:04:0e:ce:49:53:e8:8d:2c:d1:e5:
11:c7:48:0f:2c:a8:c0:00:01:02:ff:8f:88:24:61:
19:06:ff:79:67:3f:5c:e0:e6:bf:26:04:4f:4e:bf:
d8:0b:84:14:1d:c7:ee:15:c8:1e:f1:52:ae:f1:ed:
bf:dd:06:12:b3:88:47:3e:bb:c1:3e:5e:f3:b2:b9:
e2:ae:d6:36:20:85:27:1b:76:cb:02:16:fd:9f:c0:
a8:93:54:d3:85:de:66:d0:ce:81:54:99:b7:89:ca:
76:f8:25:6e:e6:bc:4d:40:9d:da:dd:68:32:7f:ab:
d4:b3:20:0c:a9:8e:0f:85:19:87:c8:89:5d:10:85:
34:d8:a6:9d:61:f3:b1:48:37:58:a0:ab:2e:22:0a:
2e:96:b8:4d:95:d0:9c:40:00:94:ae:a2:1e:d7:05:
2f:4b:17:a7:82:ff:da:23:68:fb:99:85:79:5e:24:
c2:be:da:1f:90:bb:7f:b0:7e:17:62:8e:8b:67:1c:
ca:91:82:5e:7a:42:c2:b8:cf:db:7f:c9:ad:32:0c:
c0:46:44:d8:f9:c2:44:2b:00:45:83:70:43:98:b5:
d8:43:a6:12:1e:1c:a9:a8:4f:bb:ac:19:14:0f:22:
81:72:a7:89:ed:7a:82:c3:e6:51:0f:cb:7d:9c:f5:
f6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:68:5F:8D:5E:6C:63:AA:31:52:7E:0A:30:F2:B8:D8:FC:91:7A:F4
X509v3 Authority Key Identifier:
keyid:02:DA:4C:D0:44:C6:E9:87:3A:C8:FD:9C:FD:30:F1:EC:B3:D8:0B:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:66:ae:63:76:4f:f5:be:96:e3:5c:1c:0e:e9:a9:07:bc:8c:
a9:26:d6:c5:f0:c3:42:b5:ff:22:ee:f3:01:a1:5c:97:9c:14:
7f:7e:f4:a2:19:db:55:f1:2b:0f:2f:98:00:85:27:97:9b:88:
85:e2:6d:d8:76:a9:10:d2:0a:2f:aa:89:83:42:60:33:c5:52:
f1:06:5d:38:f2:6e:fb:45:cf:c1:84:14:45:fd:45:77:78:8a:
44:40:5d:7f:ed:d0:dd:51:96:b4:84:6e:cf:1c:90:38:c9:d7:
f9:e8:15:8a:90:c6:26:84:dd:85:29:31:5b:0a:7a:45:45:c4:
23:64:99:68:d9:09:ba:0d:68:33:1c:10:37:8b:52:15:d4:0d:
6a:5b:d8:47:98:73:91:86:0a:73:58:d0:20:ba:dd:59:4c:ce:
71:7f:d4:64:e8:bf:88:d7:b6:6b:3a:fb:c4:81:12:62:b9:c1:
ea:ff:ef:ce:2b:77:48:6f:1c:82:5d:d3:23:41:67:0b:d9:e1:
02:25:35:ed:f8:3f:96:42:01:8a:50:51:b9:e6:6e:f0:96:ec:
70:dc:17:d8:cf:08:f6:63:a1:8d:94:e6:36:4f:3f:ee:df:58:
b6:e3:37:03:e8:fd:5b:ea:d2:51:ec:b4:36:f9:06:db:8d:86:
42:7c:a3:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt4u8JX0B5xhhHZbDwS3BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZGE0Y2QwNDRjNmU5ODczYWM4ZmQ5Y2ZkMzBmMWVjYjNk
ODBiY2EwHhcNMjUxMTExMDcwMDQ1WhcNMjUxMTEyMDcwMDQ1WjAzMTEwLwYDVQQD
EyhlNzY4NWY4ZDVlNmM2M2FhMzE1MjdlMGEzMGYyYjhkOGZjOTE3YWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmum4gQOzklT6I0s0eURx0gPLKjA
AAEC/4+IJGEZBv95Zz9c4Oa/JgRPTr/YC4QUHcfuFcge8VKu8e2/3QYSs4hHPrvB
Pl7zsrnirtY2IIUnG3bLAhb9n8Cok1TThd5m0M6BVJm3icp2+CVu5rxNQJ3a3Wgy
f6vUsyAMqY4PhRmHyIldEIU02KadYfOxSDdYoKsuIgoulrhNldCcQACUrqIe1wUv
Sxengv/aI2j7mYV5XiTCvtofkLt/sH4XYo6LZxzKkYJeekLCuM/bf8mtMgzARkTY
+cJEKwBFg3BDmLXYQ6YSHhypqE+7rBkUDyKBcqeJ7XqCw+ZRD8t9nPX29wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdoX41ebGOqMVJ+CjDyuNj8kXr0MB8GA1UdIwQY
MBaAFALaTNBExumHOsj9nP0w8eyz2AvKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXRwTTBFVEc2WWM2eVAyY19URHg3TFBZQzhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8yOTM3M2UtYzMwOS00YzMyLWE2MDYt
ZDY5MmMzNzI5YzQ4LzEvQXRwTTBFVEc2WWM2eVAyY19URHg3TFBZQzhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8yOTM3M2UtYzMwOS00YzMyLWE2MDYtZDY5MmMzNzI5YzQ4
LzEvQXRwTTBFVEc2WWM2eVAyY19URHg3TFBZQzhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh2auY3ZP
9b6W41wcDumpB7yMqSbWxfDDQrX/Iu7zAaFcl5wUf370ohnbVfErDy+YAIUnl5uI
heJt2HapENIKL6qJg0JgM8VS8QZdOPJu+0XPwYQURf1Fd3iKREBdf+3Q3VGWtIRu
zxyQOMnX+egVipDGJoTdhSkxWwp6RUXEI2SZaNkJug1oMxwQN4tSFdQNalvYR5hz
kYYKc1jQILrdWUzOcX/UZOi/iNe2azr7xIESYrnB6v/vzit3SG8cgl3TI0FnC9nh
AiU17fg/lkIBilBRueZu8JbscNwX2M8I9mOhjZTmNk8/7t9YtuM3A+j9W+rSUey0
NvkG242GQnyjnw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:33 2025 by rpki-client