Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
File: iO0MCQHGnlxdj1GmddBVmC-R0qc.mft (raw, json)
Hash identifier: UWojcZaYgS5ud8CWA19mWGgfHOnxvK/9yzXYs8hbklM=
Subject key identifier: 3A:C1:9E:1B:E1:8E:92:25:CC:08:7F:5C:1F:9E:47:7C:D1:D3:F2:9C
Authority key identifier: 88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
Certificate issuer: /CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Certificate serial: 0199FC584DA28E8AA64801158B6069E01322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
Manifest number: 1010
Signing time: Sun 19 Oct 2025 12:01:09 +0000
Manifest this update: Sun 19 Oct 2025 12:01:09 +0000
Manifest next update: Mon 20 Oct 2025 12:01:09 +0000
Files and hashes: 1: 5bB3yoqJtJ8O9S62QfWorgiioFY.roa (hash: 8Ndb6O5ZdaPJ5izfIbfWtZrPZCIF+KxMhtKJ5R+rDRA=)
2: F2pyX4AW0yNP_DxkJy2c7z3MxKg.roa (hash: YtC8cOEf9B52eoNJhdsOBs1/lz34UsGpGhA4ymHbCSI=)
3: iO0MCQHGnlxdj1GmddBVmC-R0qc.crl (hash: y8ibREZRZqRPmWtaHTLh/XSdcL+iKuwFZR2i4YFqSGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:4d:a2:8e:8a:a6:48:01:15:8b:60:69:e0:13:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Validity
Not Before: Oct 19 12:01:09 2025 GMT
Not After : Oct 20 12:01:09 2025 GMT
Subject: CN=3ac19e1be18e9225cc087f5c1f9e477cd1d3f29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:12:c7:7f:e9:64:62:d0:64:0c:45:65:35:c1:
d1:1e:b8:49:01:cd:7c:7b:aa:5c:13:1d:d0:80:aa:
25:f5:be:b2:70:12:22:33:58:a9:ec:d1:c1:a5:ef:
84:0a:04:2c:7a:fb:6f:5c:13:fe:89:3a:03:c3:7f:
88:ec:b9:b9:8f:aa:dc:01:73:1a:88:c3:8e:63:f4:
af:40:82:38:3c:7e:57:ca:1a:32:a5:8f:7c:a0:65:
99:86:c1:26:7f:bb:89:8f:00:98:a9:52:d0:7f:8d:
d8:ff:49:37:0c:cc:93:a8:57:9c:b9:b4:5b:bd:81:
77:18:43:4f:19:e5:88:e8:b6:5b:92:1d:7e:06:6f:
f0:9c:a1:52:01:00:81:b9:09:ae:76:be:c9:9f:0c:
61:b4:ce:fd:f2:f5:88:5c:1c:d6:1e:5e:0f:ba:ae:
d7:8b:b0:50:0b:57:ff:5d:dd:de:b0:8c:d6:ac:4d:
d7:40:93:f3:63:ec:d3:2e:6a:a5:0c:5a:a4:f9:b1:
19:e1:5a:3b:34:a0:1a:d8:0d:a8:4c:d5:bc:c8:37:
f9:34:0d:f2:20:2d:58:cd:77:3b:82:12:90:1e:78:
12:8e:89:d1:6a:60:9a:16:49:64:ec:e6:a4:7c:4a:
b7:b6:e6:d3:dc:4c:3c:68:b5:c0:2d:6e:41:10:07:
c3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C1:9E:1B:E1:8E:92:25:CC:08:7F:5C:1F:9E:47:7C:D1:D3:F2:9C
X509v3 Authority Key Identifier:
keyid:88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:35:56:e4:56:57:4c:b9:01:bb:6b:56:08:fa:d8:42:a3:69:
fd:6f:08:62:fe:49:c9:ae:7b:fc:8b:58:e8:f0:04:10:2d:51:
f4:3b:42:a0:31:a5:0e:13:f9:56:e1:cd:59:04:3f:6f:39:73:
a1:6c:cb:36:71:6b:8c:93:c1:cb:67:e5:3c:f1:d9:82:4f:1c:
c6:eb:30:0b:f0:c1:0c:60:b8:06:8f:fb:30:b6:e5:ae:7e:83:
71:7e:f3:b7:cd:d9:c7:8c:99:fa:a5:82:c2:bd:0a:da:6a:b8:
3f:c7:2c:89:b2:48:aa:a1:f6:99:54:eb:c7:a0:33:e2:c9:67:
ba:e2:b4:6b:85:12:c8:2b:e0:f3:ab:90:13:f5:f4:d6:28:5a:
8c:2c:47:a1:01:80:75:b8:f7:13:1d:32:79:4d:6e:6e:a3:15:
5a:9f:95:0e:fb:e2:47:1a:8a:ef:e3:cf:8d:dc:0e:eb:a1:11:
d3:37:01:44:2b:82:e0:db:29:f7:0b:5e:30:e8:c2:e6:a3:7a:
36:84:d8:ca:37:2a:c6:1e:9d:92:d0:ca:03:f8:34:92:99:ce:
73:75:00:c0:78:de:fd:a7:74:f1:f9:39:b9:cb:ef:81:be:88:
08:35:e8:9a:55:db:ee:4c:57:83:8f:1a:f0:98:b4:4b:b7:68:
2f:b3:c3:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WE2ijoqmSAEVi2Bp4BMiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZWQwYzA5MDFjNjllNWM1ZDhmNTFhNjc1ZDA1NTk4MmY5
MWQyYTcwHhcNMjUxMDE5MTIwMTA5WhcNMjUxMDIwMTIwMTA5WjAzMTEwLwYDVQQD
EygzYWMxOWUxYmUxOGU5MjI1Y2MwODdmNWMxZjllNDc3Y2QxZDNmMjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBLHf+lkYtBkDEVlNcHRHrhJAc18
e6pcEx3QgKol9b6ycBIiM1ip7NHBpe+ECgQsevtvXBP+iToDw3+I7Lm5j6rcAXMa
iMOOY/SvQII4PH5XyhoypY98oGWZhsEmf7uJjwCYqVLQf43Y/0k3DMyTqFecubRb
vYF3GENPGeWI6LZbkh1+Bm/wnKFSAQCBuQmudr7JnwxhtM798vWIXBzWHl4Puq7X
i7BQC1f/Xd3esIzWrE3XQJPzY+zTLmqlDFqk+bEZ4Vo7NKAa2A2oTNW8yDf5NA3y
IC1YzXc7ghKQHngSjonRamCaFklk7OakfEq3tubT3Ew8aLXALW5BEAfD2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrBnhvhjpIlzAh/XB+eR3zR0/KcMB8GA1UdIwQY
MBaAFIjtDAkBxp5cXY9RpnXQVZgvkdKnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU8wTUNRSEdubHhkajFHbWRkQlZtQy1SMHFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8wOTg1ODMtMzZjZS00NjkyLTlkYzMt
OWQ5ODhhNjAwNzU3LzEvaU8wTUNRSEdubHhkajFHbWRkQlZtQy1SMHFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8wOTg1ODMtMzZjZS00NjkyLTlkYzMtOWQ5ODhhNjAwNzU3
LzEvaU8wTUNRSEdubHhkajFHbWRkQlZtQy1SMHFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXDVW5FZX
TLkBu2tWCPrYQqNp/W8IYv5Jya57/ItY6PAEEC1R9DtCoDGlDhP5VuHNWQQ/bzlz
oWzLNnFrjJPBy2flPPHZgk8cxuswC/DBDGC4Bo/7MLblrn6DcX7zt83Zx4yZ+qWC
wr0K2mq4P8csibJIqqH2mVTrx6Az4slnuuK0a4USyCvg86uQE/X01ihajCxHoQGA
dbj3Ex0yeU1ubqMVWp+VDvviRxqK7+PPjdwO66ER0zcBRCuC4Nsp9wteMOjC5qN6
NoTYyjcqxh6dktDKA/g0kpnOc3UAwHje/ad08fk5ucvvgb6ICDXomlXb7kxXg48a
8Ji0S7doL7PD9w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:06 2025 by rpki-client