Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
File: atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft (raw, json)
Hash identifier: Yb9eLLGsshb2j6ZLrolfXX89jNAsUYMTC/jDZwaKiJM=
Subject key identifier: B8:EF:90:F9:0D:EC:AC:48:F5:9B:1D:37:E4:6F:0C:C1:9D:49:6B:09
Authority key identifier: 6A:D3:8B:D4:C0:D0:E9:F3:02:80:21:98:4C:D8:35:56:04:7F:63:98
Certificate issuer: /CN=6ad38bd4c0d0e9f3028021984cd83556047f6398
Certificate serial: 019A56400B38A07A6A84A2C8AEF20FDC896C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
Manifest number: 8A
Signing time: Wed 05 Nov 2025 23:00:28 +0000
Manifest this update: Wed 05 Nov 2025 23:00:28 +0000
Manifest next update: Thu 06 Nov 2025 23:00:28 +0000
Files and hashes: 1: A_iHhKALil4lTEQzAUwPF3mIEBw.roa (hash: foFKLdP+k5Z9u1b7IqZhZYmzZ2C3HRJY7iqeg2B9yu0=)
2: atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl (hash: 0Pr3/m14XuDjZUoHzzr5JDUL+fzeRQEjjCYlPIEaJ3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:40:0b:38:a0:7a:6a:84:a2:c8:ae:f2:0f:dc:89:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad38bd4c0d0e9f3028021984cd83556047f6398
Validity
Not Before: Nov 5 23:00:28 2025 GMT
Not After : Nov 6 23:00:28 2025 GMT
Subject: CN=b8ef90f90decac48f59b1d37e46f0cc19d496b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e2:c1:45:ef:9e:52:4a:57:1a:4b:d1:27:a1:
6b:9b:50:63:5f:b9:57:46:84:fa:73:cf:d0:72:18:
5f:a6:32:82:81:27:9c:ae:04:1f:18:5c:cc:ed:f1:
9c:e8:12:a7:4d:cc:a3:9f:c6:c8:1b:b0:6f:c3:ac:
95:f2:3e:3d:a9:01:6f:fe:26:fa:a0:9a:39:a7:07:
bc:a1:1d:1a:de:5f:6d:1b:45:7b:8a:c3:86:6c:59:
b1:c1:25:0e:54:ce:f6:90:2b:19:ff:71:4d:ab:9a:
12:37:66:17:4b:ec:8d:43:d7:73:73:1c:11:87:55:
2e:6d:61:e5:e6:9f:88:b5:ac:f1:ba:4f:1d:dd:63:
76:df:52:b0:3c:a0:e4:44:b0:cf:aa:37:27:35:7f:
8f:ae:02:a4:70:0a:c3:ef:f5:1c:f8:ad:c9:5a:92:
98:be:5a:6c:1e:30:c4:99:35:a8:26:ce:b9:97:72:
74:91:98:fd:4c:ee:a3:d0:cb:7c:86:25:9a:b6:97:
98:01:44:31:c5:6c:98:69:a8:69:ee:ba:6c:a2:1c:
59:0a:cc:1c:0a:0b:d1:bd:cb:c5:ed:8b:79:68:49:
c4:5c:98:26:c9:a8:b3:c3:f9:59:44:39:01:56:c1:
a0:ca:1e:05:3d:1a:35:06:5d:b2:77:5e:39:8a:40:
fa:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EF:90:F9:0D:EC:AC:48:F5:9B:1D:37:E4:6F:0C:C1:9D:49:6B:09
X509v3 Authority Key Identifier:
keyid:6A:D3:8B:D4:C0:D0:E9:F3:02:80:21:98:4C:D8:35:56:04:7F:63:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:08:c4:a7:b9:13:87:ff:eb:e2:0d:9f:c7:98:05:53:ef:bd:
d3:23:7b:5b:96:c9:cc:70:b5:39:f5:65:9f:d6:c7:c9:fa:e8:
00:87:ba:bb:b0:8e:cf:1d:85:6e:5f:aa:bd:4f:97:7b:9d:4d:
ab:cc:ca:13:c3:60:2f:7f:62:af:b4:ee:78:01:ab:7d:a9:27:
50:28:20:4e:25:6f:e4:97:c5:93:87:c3:f4:12:8c:a2:ef:e5:
74:4f:bd:5a:b6:8c:1c:45:01:96:e7:dc:63:10:ae:bc:0a:65:
ec:3a:c8:55:ea:70:e9:59:34:4a:5e:34:01:90:2f:a9:a4:36:
2f:a8:10:c6:45:48:8c:4d:48:af:da:54:a0:5d:0a:9a:3b:93:
39:89:31:d5:52:9a:e3:d4:09:58:02:14:0a:fe:46:ea:f7:92:
bf:91:11:09:6a:18:57:49:57:18:93:a3:16:fb:71:06:17:00:
92:ff:4c:75:7a:2f:fd:06:b2:f9:eb:12:30:62:f3:33:d3:0e:
ad:a1:0c:7f:91:b9:f8:40:39:0e:7e:e6:d1:1e:36:c8:e1:19:
55:1e:e5:d3:5f:05:f9:43:be:89:e1:a2:6f:7c:9c:df:a6:79:
38:2b:ff:00:1e:b5:35:5a:97:0b:f3:21:8e:cc:82:13:41:a2:
5b:9d:82:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:46:30 2025 by rpki-client