Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
File: AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft (raw, json)
Hash identifier: b3ZLfCezhfvGzk5z0w6tt+VWM1Ox3f0T6sBhfd2K+dg=
Subject key identifier: 9A:85:D5:44:AC:30:82:BF:C7:63:4F:9A:DD:2E:09:A4:3A:9C:03:CA
Authority key identifier: 02:DA:4C:D0:44:C6:E9:87:3A:C8:FD:9C:FD:30:F1:EC:B3:D8:0B:CA
Certificate issuer: /CN=02da4cd044c6e9873ac8fd9cfd30f1ecb3d80bca
Certificate serial: 019A50E3724882AE4C89941F9BD11DE4F64B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 22:01:14 +0000
Manifest this update: Tue 04 Nov 2025 22:01:14 +0000
Manifest next update: Wed 05 Nov 2025 22:01:14 +0000
Files and hashes: 1: AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl (hash: 17sg8SIaj6AC9sOW6kPQGF9FaKWqwlU+P7LDRCjE2jA=)
2: dL5tLsAU6PWlL4weQ4Up71k3hXA.roa (hash: ZvntQMrxSDwlXP02WdClHLb+VoQxqS4KZZo3fc10HIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:72:48:82:ae:4c:89:94:1f:9b:d1:1d:e4:f6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02da4cd044c6e9873ac8fd9cfd30f1ecb3d80bca
Validity
Not Before: Nov 4 22:01:14 2025 GMT
Not After : Nov 5 22:01:14 2025 GMT
Subject: CN=9a85d544ac3082bfc7634f9add2e09a43a9c03ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:21:16:28:0b:a7:c1:42:b2:a5:39:7c:8b:68:
4a:58:30:c6:f3:6f:14:11:42:38:ea:64:76:c1:3f:
d1:9d:c4:b4:51:1d:85:2e:89:8a:52:0f:3c:48:53:
7d:05:26:69:80:6c:91:e3:12:e1:e3:ed:a5:3f:69:
a7:2a:7d:d1:10:43:82:32:7b:0a:00:6d:2b:50:3e:
95:54:88:23:a2:81:e5:00:23:67:80:8e:5a:c4:e4:
40:a1:58:ac:46:17:94:df:2e:2b:52:54:3c:f9:49:
a8:74:8b:d5:ca:55:d4:b1:c6:fe:48:10:51:76:7c:
9f:df:02:6f:1a:8c:4b:21:65:9c:33:09:d7:a2:1b:
7d:5c:67:7e:51:36:c7:ac:93:7b:5f:fb:72:f3:31:
85:82:de:23:e0:1c:53:3b:f4:c1:5f:1e:43:62:61:
02:10:20:b3:5f:18:9e:82:f8:41:cc:19:07:bf:2e:
85:88:37:76:e7:79:40:4f:59:44:3a:0f:57:21:b1:
13:8c:43:54:52:4c:a0:e1:ed:10:f9:fd:86:18:a1:
e6:90:d4:e5:04:a8:fb:51:58:15:7e:95:5a:39:97:
f8:74:77:34:97:39:3f:62:c5:f4:ba:a4:be:88:70:
57:d8:36:17:2d:47:e8:15:df:65:4f:cc:c6:ab:a7:
df:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:85:D5:44:AC:30:82:BF:C7:63:4F:9A:DD:2E:09:A4:3A:9C:03:CA
X509v3 Authority Key Identifier:
keyid:02:DA:4C:D0:44:C6:E9:87:3A:C8:FD:9C:FD:30:F1:EC:B3:D8:0B:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:4e:48:35:40:2c:0d:a5:cb:f9:5d:31:1c:5c:92:13:75:eb:
11:23:bb:48:a2:57:b8:14:bd:9f:f4:11:c5:8e:aa:45:de:50:
89:00:47:f2:6c:13:1c:79:00:ae:a7:8c:a7:84:8b:b4:79:c7:
d8:b8:16:09:15:af:f9:a2:0a:f3:cc:ec:e9:8d:fc:d9:89:4a:
15:14:39:0d:87:be:50:13:3e:e6:7a:b5:87:68:f8:2b:58:95:
3f:a0:c1:6b:b2:1f:a8:a9:b9:a3:c1:d0:91:c6:b2:03:f9:cb:
bf:8c:cb:df:d8:25:79:6c:af:7f:a3:f7:fe:e0:74:67:74:27:
b6:02:c9:a8:97:84:2e:35:cc:57:48:4a:66:9c:5d:80:2a:60:
13:50:fb:8d:fb:9d:f9:09:4d:02:8a:7c:74:e8:6f:28:da:dc:
cb:35:27:8b:fd:34:d3:60:7a:eb:30:09:43:69:38:39:93:e6:
47:85:98:58:08:a5:4a:ef:5a:68:91:35:89:e2:08:20:b4:b0:
cb:a5:7d:f3:6f:b9:2b:63:0b:ce:bb:22:30:77:42:41:d5:43:
35:b8:b6:f7:f7:c6:7c:bd:9a:d2:4b:5f:2e:24:67:5f:5c:c3:
91:61:46:bf:3d:d7:4a:0c:c6:6b:4f:cd:55:57:7b:c5:d9:17:
c1:22:d0:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ43JIgq5MiZQfm9Ed5PZLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZGE0Y2QwNDRjNmU5ODczYWM4ZmQ5Y2ZkMzBmMWVjYjNk
ODBiY2EwHhcNMjUxMTA0MjIwMTE0WhcNMjUxMTA1MjIwMTE0WjAzMTEwLwYDVQQD
Eyg5YTg1ZDU0NGFjMzA4MmJmYzc2MzRmOWFkZDJlMDlhNDNhOWMwM2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yEWKAunwUKypTl8i2hKWDDG828U
EUI46mR2wT/RncS0UR2FLomKUg88SFN9BSZpgGyR4xLh4+2lP2mnKn3REEOCMnsK
AG0rUD6VVIgjooHlACNngI5axORAoVisRheU3y4rUlQ8+UmodIvVylXUscb+SBBR
dnyf3wJvGoxLIWWcMwnXoht9XGd+UTbHrJN7X/ty8zGFgt4j4BxTO/TBXx5DYmEC
ECCzXxiegvhBzBkHvy6FiDd253lAT1lEOg9XIbETjENUUkyg4e0Q+f2GGKHmkNTl
BKj7UVgVfpVaOZf4dHc0lzk/YsX0uqS+iHBX2DYXLUfoFd9lT8zGq6ffjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqF1USsMIK/x2NPmt0uCaQ6nAPKMB8GA1UdIwQY
MBaAFALaTNBExumHOsj9nP0w8eyz2AvKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXRwTTBFVEc2WWM2eVAyY19URHg3TFBZQzhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8yOTM3M2UtYzMwOS00YzMyLWE2MDYt
ZDY5MmMzNzI5YzQ4LzEvQXRwTTBFVEc2WWM2eVAyY19URHg3TFBZQzhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8yOTM3M2UtYzMwOS00YzMyLWE2MDYtZDY5MmMzNzI5YzQ4
LzEvQXRwTTBFVEc2WWM2eVAyY19URHg3TFBZQzhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPU5INUAs
DaXL+V0xHFySE3XrESO7SKJXuBS9n/QRxY6qRd5QiQBH8mwTHHkArqeMp4SLtHnH
2LgWCRWv+aIK88zs6Y382YlKFRQ5DYe+UBM+5nq1h2j4K1iVP6DBa7IfqKm5o8HQ
kcayA/nLv4zL39gleWyvf6P3/uB0Z3QntgLJqJeELjXMV0hKZpxdgCpgE1D7jfud
+QlNAop8dOhvKNrcyzUni/0002B66zAJQ2k4OZPmR4WYWAilSu9aaJE1ieIIILSw
y6V982+5K2MLzrsiMHdCQdVDNbi29/fGfL2a0ktfLiRnX1zDkWFGvz3XSgzGa0/N
VVd7xdkXwSLQ+Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:19:29 2025 by rpki-client