Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
File: atcO8l5SLA0m6Xeh0k_3fq062hk.mft (raw, json)
Hash identifier: 4pm0LkbAERQ90/3+X9cczpJfhtT7afxxPWYpJWr7ZkM=
Subject key identifier: D2:51:59:A3:6E:44:E6:1B:0C:48:5A:BB:3B:AF:D6:2E:4B:10:98:84
Authority key identifier: 6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
Certificate issuer: /CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Certificate serial: 019A522C729CAB3FB547C770E7795B8BF630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
Manifest number: 035E
Signing time: Wed 05 Nov 2025 04:00:35 +0000
Manifest this update: Wed 05 Nov 2025 04:00:35 +0000
Manifest next update: Thu 06 Nov 2025 04:00:35 +0000
Files and hashes: 1: 0ZwVYpJfrbJyYn_YtY3RuMq5lcg.roa (hash: gf6HtAdxN0GhhrFPeZ2e6ZRLEIlkoJtABmVeq8td+ik=)
2: atcO8l5SLA0m6Xeh0k_3fq062hk.crl (hash: wyRA8EBq0RP8nX8ImNds8+EkWbcp76kYsaI4D93AFb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:72:9c:ab:3f:b5:47:c7:70:e7:79:5b:8b:f6:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Validity
Not Before: Nov 5 04:00:35 2025 GMT
Not After : Nov 6 04:00:35 2025 GMT
Subject: CN=d25159a36e44e61b0c485abb3bafd62e4b109884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:03:f6:86:3a:25:cd:9a:07:57:6d:b1:33:5e:
a6:7c:64:82:e4:4d:b8:73:3f:a3:12:fd:c3:7f:26:
aa:a6:d0:cf:5b:18:d6:27:7a:b9:39:86:7d:3b:b6:
3e:99:87:f3:bb:33:35:c8:13:3f:59:ae:30:ee:0c:
a7:a2:e9:a9:ec:4e:ae:eb:73:6e:f0:72:9b:41:92:
be:16:a0:7a:8c:6c:58:38:c0:ef:83:50:4f:bc:9e:
27:64:f6:09:e3:13:95:34:63:d8:d1:8a:4d:cb:91:
6b:64:cf:2f:42:d0:8a:aa:c4:2b:90:62:96:e2:c1:
c0:f2:34:61:6c:6b:34:62:a4:fc:5e:86:be:73:6a:
f3:49:6f:ec:dd:e3:7c:de:ec:61:cc:1e:7b:ee:06:
03:56:ea:07:6e:e2:fb:1c:d4:fa:89:33:eb:c7:1f:
2d:61:fe:bb:43:68:af:71:9f:14:32:8f:d1:54:3d:
23:62:60:eb:18:c8:a1:3f:18:04:d7:09:14:be:d6:
f0:d4:be:e6:f4:fe:f1:9f:71:c7:79:40:0a:71:79:
fc:dd:de:7f:26:dd:5a:b3:b7:d1:3c:9a:e9:83:55:
9d:4a:46:4a:de:85:c5:73:ef:f0:80:5d:b3:b2:02:
de:70:58:16:c3:af:04:48:ca:32:21:c8:b8:c7:81:
a9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:51:59:A3:6E:44:E6:1B:0C:48:5A:BB:3B:AF:D6:2E:4B:10:98:84
X509v3 Authority Key Identifier:
keyid:6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:54:ac:b0:e2:e5:51:bd:b0:88:b6:33:0c:42:a3:7a:b5:20:
39:60:3f:1d:90:78:a5:97:37:4f:5d:37:06:b9:88:f0:e3:29:
32:50:4d:1d:f3:94:92:93:bf:fe:88:56:24:f2:3e:b6:c5:3d:
93:b2:b0:8c:6e:1b:b0:4e:a9:93:c1:2a:d3:f6:0c:af:ab:fe:
13:19:5e:55:22:d2:b0:b7:08:bd:e0:36:fb:2d:8f:94:5c:ac:
1e:d1:a0:f9:89:bf:c6:c5:f0:7f:fd:c9:1d:9c:b3:00:fc:8a:
96:4b:af:1d:c1:c9:b0:f6:52:d2:d1:17:e1:a2:0b:34:96:ee:
c6:8a:2e:c8:38:1a:4b:e8:cb:34:fa:ea:06:89:2d:1e:cc:a6:
75:84:66:73:b8:c0:99:b5:2f:82:1a:dd:95:e5:be:f0:2b:7e:
42:f9:2f:5b:b7:ec:1b:d6:5f:78:3c:a2:a9:42:fa:b2:19:f3:
f0:29:1b:36:70:c7:31:d6:ca:97:9b:01:0e:2f:66:ab:39:b8:
c4:89:30:46:66:ce:6c:6d:89:8f:3f:83:bf:c1:87:f7:dd:68:
fc:d0:6f:22:f1:1e:4a:b7:93:1d:b1:cd:c1:79:e7:6e:87:df:
a4:3f:a6:9c:4e:ca:28:53:4d:e4:ec:af:55:70:5d:3c:af:3a:
45:74:62:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:51:36 2025 by rpki-client