Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
File: ATx0EyWXFizbLdY3YKvZlx4wv2M.mft (raw, json)
Hash identifier: IOCsfxOTVXUutlKVwlsJ6FLW5NuiRp7I7aq6BBn1jAg=
Subject key identifier: 07:98:A7:7B:5E:A3:69:3A:C5:48:43:E7:67:46:10:48:FE:DC:1A:FA
Authority key identifier: 01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63
Certificate issuer: /CN=013c74132597162cdb2dd63760abd9971e30bf63
Certificate serial: 019A4EF4D733E28B225E2D39042AA622AFDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
Manifest number: 0D8E
Signing time: Tue 04 Nov 2025 13:00:59 +0000
Manifest this update: Tue 04 Nov 2025 13:00:59 +0000
Manifest next update: Wed 05 Nov 2025 13:00:59 +0000
Files and hashes: 1: ATx0EyWXFizbLdY3YKvZlx4wv2M.crl (hash: /4ee6AEyj1Xt+Sx6FxmfrRJ9ukaOu4UV6wZcnnwPtbg=)
2: pUM6ACWqLcQahA0lg8mmij4I6d4.roa (hash: UbfUIFFNnl9kUqI4HdZKMmMa2NoguiRD4aW6tenaTi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:d7:33:e2:8b:22:5e:2d:39:04:2a:a6:22:af:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=013c74132597162cdb2dd63760abd9971e30bf63
Validity
Not Before: Nov 4 13:00:59 2025 GMT
Not After : Nov 5 13:00:59 2025 GMT
Subject: CN=0798a77b5ea3693ac54843e767461048fedc1afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b4:b7:ee:3a:6b:6a:54:02:fa:aa:0e:9a:f3:
66:8e:b8:e2:25:c7:a0:e9:ee:ba:99:cd:73:5c:11:
40:fd:41:d6:41:93:5a:5c:8a:97:82:d2:43:e8:68:
87:7c:a7:e4:be:7d:00:0d:a1:65:8b:48:34:ae:2f:
51:75:b8:88:dc:fc:60:cb:c4:1d:4a:3d:d0:41:cc:
ba:01:ac:c7:13:1b:ae:f4:bc:63:9b:2e:06:83:be:
88:0c:06:95:3c:90:08:a0:9a:28:48:c0:e1:45:92:
73:8b:a3:1b:1f:b3:f9:8f:c5:40:b9:59:6f:bb:b2:
7b:71:03:2c:d7:3c:6b:22:34:1c:6c:b3:f8:8f:40:
62:e9:22:40:cc:c8:10:09:94:d5:df:53:33:f6:ce:
9b:16:6e:48:9c:2d:46:89:ae:22:06:26:2b:8c:e7:
26:c7:aa:de:b1:7e:97:4f:10:0f:c4:d5:48:b1:25:
43:22:6a:7f:ed:43:65:92:57:50:51:d5:0c:09:ec:
a2:fa:d1:00:4a:ce:ce:78:3e:30:38:92:78:fb:15:
fc:fa:19:9f:58:b8:88:48:ca:5d:e6:97:f2:02:df:
ec:33:66:87:6b:a4:f9:67:a9:e0:e8:d5:6d:74:6d:
9f:6d:a9:f5:08:a8:56:94:6b:ab:d9:d7:bd:dc:f0:
a6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:98:A7:7B:5E:A3:69:3A:C5:48:43:E7:67:46:10:48:FE:DC:1A:FA
X509v3 Authority Key Identifier:
keyid:01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:93:56:6f:71:5c:b9:23:75:a4:6f:d4:b4:90:47:05:ca:7e:
0d:43:a5:5b:20:94:de:7d:91:c2:55:82:11:66:62:7f:e3:8f:
09:f4:0f:3a:56:ce:97:d5:c0:c5:f2:21:4d:71:65:78:34:e7:
6e:cb:e3:5f:de:5b:1d:df:be:1d:81:23:49:7b:02:da:b3:10:
a0:6b:25:77:cb:9e:c4:d1:44:79:c3:96:48:75:15:9e:99:8c:
06:ea:88:38:39:d7:fc:31:b1:26:26:f7:a6:6c:82:51:f0:8c:
fd:61:4e:1c:f2:fd:c0:31:8b:44:20:19:33:a6:80:cb:aa:27:
db:61:f4:85:62:05:4b:6f:0e:e5:ad:5d:fa:86:5c:73:5d:94:
5d:09:1c:08:eb:c8:07:62:bc:fe:ac:49:77:a6:44:57:13:00:
43:4f:db:d8:e1:84:6d:4c:ec:e7:54:e1:d2:fe:85:2c:7e:6a:
c0:9d:41:ab:b3:8c:90:d3:3b:0f:0a:b6:c3:3d:0c:8e:e2:ae:
e0:9d:27:98:4c:06:b1:5d:b4:c8:0e:b0:28:b7:61:ec:f0:a8:
31:af:64:51:5c:8d:58:f8:d0:d6:f2:88:4d:cd:0d:a6:15:aa:
04:b5:ea:ed:61:db:ba:9d:68:e2:5e:c1:9e:33:c9:b8:5c:d6:
bf:21:dd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:20 2025 by rpki-client