Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
File: 95_P0odavfYeGdMnDq_h7_rcZmI.mft (raw, json)
Hash identifier: qd2EiyEiudRfzvPsyyYi1y3Lk5FhgpqasnAm2AnCXWk=
Subject key identifier: 71:81:AF:3B:CE:1D:11:29:DF:BF:8A:97:E7:BD:7D:02:53:3C:E5:30
Authority key identifier: F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
Certificate issuer: /CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Certificate serial: 0199FF59A7C4EDC552A79779B77A668B63D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
Manifest number: 02D8
Signing time: Mon 20 Oct 2025 02:01:29 +0000
Manifest this update: Mon 20 Oct 2025 02:01:29 +0000
Manifest next update: Tue 21 Oct 2025 02:01:29 +0000
Files and hashes: 1: 5BPtNrEhH9Rw1aJqmYEkCzXkQjY.roa (hash: qBma49p0UmV3mrUVRqrsoQSZBl3jQDEOljuj/i+uqbI=)
2: 95_P0odavfYeGdMnDq_h7_rcZmI.crl (hash: XN+EurmaS7XR8RQM8PU8n+dsS9bLAKDTNzBlDlOISpA=)
3: OQ9RtML9G-ixWSm5EbGC_EQmqZQ.roa (hash: Jj0BQnswIB1ZHaTdvAdTXUICRNEwRPIUjy/LhMuocGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:a7:c4:ed:c5:52:a7:97:79:b7:7a:66:8b:63:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Validity
Not Before: Oct 20 02:01:29 2025 GMT
Not After : Oct 21 02:01:29 2025 GMT
Subject: CN=7181af3bce1d1129dfbf8a97e7bd7d02533ce530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:06:6a:74:3e:85:69:0b:ec:a8:69:35:ec:b6:
95:11:72:c9:ea:6d:91:db:34:95:f1:ce:08:70:2f:
e1:f7:14:89:ab:0c:2f:a5:ac:50:93:bb:e9:f8:be:
01:eb:ae:a4:2a:68:57:f7:bc:bc:77:c0:45:17:9a:
3d:e1:66:d8:7e:7d:21:55:ec:0e:56:5b:ac:e4:1c:
01:9a:5f:16:33:03:75:02:a8:22:c2:fd:82:1d:cb:
71:a8:ac:e6:50:2b:16:0a:c1:25:12:c8:de:6d:79:
0b:08:e8:21:08:ce:be:32:d3:50:f4:e2:17:2f:37:
0f:86:f1:11:74:0c:db:49:db:6c:b1:b6:49:f6:55:
b2:45:66:4b:f6:68:cd:de:6c:eb:26:f9:da:2b:c3:
eb:2f:8b:34:31:51:b2:99:a2:e4:a1:b1:ba:08:17:
0b:f6:5e:2c:3d:62:b2:f0:04:9f:00:a4:93:4b:03:
03:b1:b4:61:b6:23:ec:52:89:ae:08:3c:71:87:af:
2e:f6:ae:f4:68:cd:04:9b:29:fb:58:9e:7b:6f:f1:
c9:20:78:b0:13:40:e9:10:eb:a6:76:32:db:3d:80:
77:ef:b7:8f:8e:aa:9b:da:b8:22:f7:18:5c:24:71:
d0:01:ee:de:b3:11:fd:d9:ee:78:f1:55:c1:62:ad:
0d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:81:AF:3B:CE:1D:11:29:DF:BF:8A:97:E7:BD:7D:02:53:3C:E5:30
X509v3 Authority Key Identifier:
keyid:F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ed:d2:68:1c:31:d7:6f:76:eb:3c:c0:bb:8a:f6:81:03:b2:
04:1d:7c:2a:ff:6e:ef:61:bf:b5:60:f5:a8:b7:71:92:b9:ff:
5c:81:14:c1:51:28:85:12:e5:c7:64:af:49:20:fe:5e:65:49:
db:eb:85:f9:58:25:72:77:f4:85:1a:11:e2:6f:9e:2f:2e:50:
2f:34:03:45:f6:4e:27:64:1f:f3:b3:7f:00:83:85:bb:a9:9f:
d3:ba:5f:a5:f5:3d:f7:b5:4c:e5:a9:2c:dd:f1:cf:e3:4d:2c:
29:1f:06:c9:eb:f4:6c:ec:6d:85:6a:e7:d4:57:e1:df:b2:06:
d7:fa:a7:25:6f:28:22:5c:15:c3:46:74:a4:b1:78:b2:b3:0f:
ff:1d:e2:df:58:f8:28:a9:8c:bf:14:3d:65:6b:9a:ab:eb:15:
a6:b6:37:12:f7:3b:87:4c:32:b1:f5:80:25:9a:34:e8:d5:54:
32:1e:a2:eb:0a:4d:34:32:e5:e1:b8:8e:e4:92:29:ad:88:70:
1f:31:3c:d8:48:e7:1d:a7:00:b4:bd:da:e1:f8:fd:81:dd:46:
17:a9:13:e3:68:21:34:55:e7:f6:16:d3:64:bb:b7:bc:3d:06:
ad:18:30:3f:a6:d4:59:e2:38:08:47:81:f3:70:15:ca:ec:77:
93:eb:b7:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/WafE7cVSp5d5t3pmi2PUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3OWZjZmQyODc1YWJkZjYxZTE5ZDMyNzBlYWZlMWVmZmFk
YzY2NjIwHhcNMjUxMDIwMDIwMTI5WhcNMjUxMDIxMDIwMTI5WjAzMTEwLwYDVQQD
Eyg3MTgxYWYzYmNlMWQxMTI5ZGZiZjhhOTdlN2JkN2QwMjUzM2NlNTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwZqdD6FaQvsqGk17LaVEXLJ6m2R
2zSV8c4IcC/h9xSJqwwvpaxQk7vp+L4B666kKmhX97y8d8BFF5o94WbYfn0hVewO
Vlus5BwBml8WMwN1Aqgiwv2CHctxqKzmUCsWCsElEsjebXkLCOghCM6+MtNQ9OIX
LzcPhvERdAzbSdtssbZJ9lWyRWZL9mjN3mzrJvnaK8PrL4s0MVGymaLkobG6CBcL
9l4sPWKy8ASfAKSTSwMDsbRhtiPsUomuCDxxh68u9q70aM0Emyn7WJ57b/HJIHiw
E0DpEOumdjLbPYB377ePjqqb2rgi9xhcJHHQAe7esxH92e548VXBYq0NMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGBrzvOHREp37+Kl+e9fQJTPOUwMB8GA1UdIwQY
MBaAFPefz9KHWr32HhnTJw6v4e/63GZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTVfUDBvZGF2ZlllR2RNbkRxX2g3X3JjWm1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iMDJjYjYtODZjNy00ZjZkLTk5ZDEt
OTA3NzZmODRjOWI3LzEvOTVfUDBvZGF2ZlllR2RNbkRxX2g3X3JjWm1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iMDJjYjYtODZjNy00ZjZkLTk5ZDEtOTA3NzZmODRjOWI3
LzEvOTVfUDBvZGF2ZlllR2RNbkRxX2g3X3JjWm1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfO3SaBwx
12926zzAu4r2gQOyBB18Kv9u72G/tWD1qLdxkrn/XIEUwVEohRLlx2SvSSD+XmVJ
2+uF+Vglcnf0hRoR4m+eLy5QLzQDRfZOJ2Qf87N/AIOFu6mf07pfpfU997VM5aks
3fHP400sKR8Gyev0bOxthWrn1Ffh37IG1/qnJW8oIlwVw0Z0pLF4srMP/x3i31j4
KKmMvxQ9ZWuaq+sVprY3Evc7h0wysfWAJZo06NVUMh6i6wpNNDLl4biO5JIprYhw
HzE82EjnHacAtL3a4fj9gd1GF6kT42ghNFXn9hbTZLu3vD0GrRgwP6bUWeI4CEeB
83AVyux3k+u3lg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:05:10 2025 by rpki-client