Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
File: 95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft (raw, json)
Hash identifier: vvrfhgMf5047Gru6E284gwPr7kJVz9i7u0c+FIrXXxs=
Subject key identifier: F5:F7:9D:B8:A1:35:7E:7F:89:2E:3C:5D:11:F2:2C:8E:22:FC:8D:46
Authority key identifier: F7:9C:7C:1A:1B:AE:D3:26:0D:95:0D:4C:FC:E9:A8:97:CC:97:FA:30
Certificate issuer: /CN=f79c7c1a1baed3260d950d4cfce9a897cc97fa30
Certificate serial: 0199FC219D114E14D8994C071DA0EC3EA42E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
Manifest number: 088D
Signing time: Sun 19 Oct 2025 11:01:25 +0000
Manifest this update: Sun 19 Oct 2025 11:01:25 +0000
Manifest next update: Mon 20 Oct 2025 11:01:25 +0000
Files and hashes: 1: 95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl (hash: ZJbIPpB9baaURQHi0luqfCMimn4lm8g6PHMX6DqBEXw=)
2: Mqsj_mYBdYcPJ5l_74z5bHNTr1k.roa (hash: +l1/GGdu0QqetRbkoCyavDfKTfdB+pfAVXCWByI+XBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:9d:11:4e:14:d8:99:4c:07:1d:a0:ec:3e:a4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f79c7c1a1baed3260d950d4cfce9a897cc97fa30
Validity
Not Before: Oct 19 11:01:25 2025 GMT
Not After : Oct 20 11:01:25 2025 GMT
Subject: CN=f5f79db8a1357e7f892e3c5d11f22c8e22fc8d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ad:4f:f1:e9:39:92:ce:5d:04:a5:b7:f2:34:
f0:99:b0:74:bc:68:61:4e:e3:cb:3f:3c:0a:d4:87:
d0:44:06:db:1f:2f:d4:56:bc:d6:f1:65:1b:a9:07:
97:03:ff:b4:de:d6:63:a7:24:6b:78:2f:4e:b9:a5:
38:31:ab:f8:46:a7:47:04:4b:fd:53:14:f0:d1:c9:
fa:1c:86:d4:dd:0f:2d:35:e5:1c:38:e1:b4:a0:91:
22:63:da:e2:a5:73:ba:f8:f7:a8:a3:68:49:57:e1:
08:f0:1a:1e:b2:c4:13:e1:3e:31:02:01:53:bb:d2:
b7:1d:55:ff:14:a9:d2:6a:2f:49:df:15:fa:62:ee:
f9:a8:ee:82:c8:93:42:fc:b9:e2:50:b1:20:25:b9:
bd:c5:1c:e4:7f:65:81:d1:82:df:36:e7:2f:36:ec:
8c:a6:3d:5f:93:bc:41:2c:61:89:ce:d7:54:af:05:
2a:81:f1:e6:86:23:f8:6a:b4:7d:d1:bf:b2:d2:de:
e4:12:fa:83:29:dc:b5:1e:7d:05:35:34:aa:fb:49:
72:47:5c:5e:3f:d6:c8:0c:ac:43:48:3e:0a:34:5c:
60:6c:7f:27:eb:64:d8:8a:da:bf:b9:92:bd:3f:24:
ac:56:8c:c2:25:5f:35:94:cd:5a:7c:db:10:6a:aa:
5c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F7:9D:B8:A1:35:7E:7F:89:2E:3C:5D:11:F2:2C:8E:22:FC:8D:46
X509v3 Authority Key Identifier:
keyid:F7:9C:7C:1A:1B:AE:D3:26:0D:95:0D:4C:FC:E9:A8:97:CC:97:FA:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:4d:8f:70:b6:fe:0b:7c:81:10:fc:cb:2a:7b:8b:22:61:8c:
4b:8d:ed:ff:c1:a0:60:00:26:8d:bc:2d:63:58:94:57:82:a4:
85:7a:01:ad:31:de:46:99:0f:37:17:25:26:e4:c3:01:f5:fd:
6a:9a:c3:19:31:fd:41:4b:32:a2:1e:cb:75:18:e7:e7:92:b4:
13:5c:65:03:73:19:90:49:26:fe:71:17:07:f7:21:35:8d:ff:
16:0b:23:8c:c9:29:4d:49:6b:24:85:63:0f:f2:6b:f8:a9:25:
e6:ff:4d:ad:9a:81:a8:64:ab:4a:f1:6b:ce:89:34:c1:b9:b3:
51:29:5b:ad:94:14:db:67:43:56:9a:31:14:34:da:8b:24:37:
7a:e0:2f:17:1a:1c:df:ce:ee:46:7c:5b:6c:ef:43:ee:55:37:
f4:51:ba:c2:ba:8b:8b:3d:30:0a:08:87:f9:5f:cb:d8:b8:b8:
0e:d4:44:52:cf:46:f5:d9:72:5e:bf:43:05:7c:21:b8:63:6b:
fc:b5:e8:bc:3e:84:9f:41:db:20:48:4c:18:b8:76:be:2e:04:
81:e9:6b:70:f2:25:5a:33:60:2b:2b:65:32:19:92:80:bc:d6:
b6:74:ae:c1:ea:6d:ad:4e:c0:0a:b7:51:3f:54:ff:7b:c3:f7:
d5:e7:25:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IZ0RThTYmUwHHaDsPqQuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3OWM3YzFhMWJhZWQzMjYwZDk1MGQ0Y2ZjZTlhODk3Y2M5
N2ZhMzAwHhcNMjUxMDE5MTEwMTI1WhcNMjUxMDIwMTEwMTI1WjAzMTEwLwYDVQQD
EyhmNWY3OWRiOGExMzU3ZTdmODkyZTNjNWQxMWYyMmM4ZTIyZmM4ZDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAza1P8ek5ks5dBKW38jTwmbB0vGhh
TuPLPzwK1IfQRAbbHy/UVrzW8WUbqQeXA/+03tZjpyRreC9OuaU4Mav4RqdHBEv9
UxTw0cn6HIbU3Q8tNeUcOOG0oJEiY9ripXO6+Peoo2hJV+EI8BoessQT4T4xAgFT
u9K3HVX/FKnSai9J3xX6Yu75qO6CyJNC/LniULEgJbm9xRzkf2WB0YLfNucvNuyM
pj1fk7xBLGGJztdUrwUqgfHmhiP4arR90b+y0t7kEvqDKdy1Hn0FNTSq+0lyR1xe
P9bIDKxDSD4KNFxgbH8n62TYitq/uZK9PySsVozCJV81lM1afNsQaqpcHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPX3nbihNX5/iS48XRHyLI4i/I1GMB8GA1UdIwQY
MBaAFPecfBobrtMmDZUNTPzpqJfMl/owMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTV4OEdodXUweVlObFExTV9PbW9sOHlYLWpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yZGQwM2ItNTg5Yi00NTFjLWI5ZWQt
ZDEyYjU4Y2NiODdjLzEvOTV4OEdodXUweVlObFExTV9PbW9sOHlYLWpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yZGQwM2ItNTg5Yi00NTFjLWI5ZWQtZDEyYjU4Y2NiODdj
LzEvOTV4OEdodXUweVlObFExTV9PbW9sOHlYLWpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx02PcLb+
C3yBEPzLKnuLImGMS43t/8GgYAAmjbwtY1iUV4KkhXoBrTHeRpkPNxclJuTDAfX9
aprDGTH9QUsyoh7LdRjn55K0E1xlA3MZkEkm/nEXB/chNY3/FgsjjMkpTUlrJIVj
D/Jr+Kkl5v9NrZqBqGSrSvFrzok0wbmzUSlbrZQU22dDVpoxFDTaiyQ3euAvFxoc
387uRnxbbO9D7lU39FG6wrqLiz0wCgiH+V/L2Li4DtREUs9G9dlyXr9DBXwhuGNr
/LXovD6En0HbIEhMGLh2vi4EgelrcPIlWjNgKytlMhmSgLzWtnSuweptrU7ACrdR
P1T/e8P31ecl5w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:28:41 2025 by rpki-client