Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
File: s90R00a2O7HrIqB8JswSkaKgaJU.mft (raw, json)
Hash identifier: JgAOHgZ/qgLAQNFFfXxscgZeI7TpewOnDfLaNZu9n+M=
Subject key identifier: D0:70:BB:B0:3D:A3:E2:95:31:56:5D:6B:E7:78:0B:BD:73:5A:2B:3A
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: 0198D5BBAFDD0495CFE9AA1F84A95246D2E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
Manifest number: 0E55
Signing time: Sat 23 Aug 2025 07:01:43 +0000
Manifest this update: Sat 23 Aug 2025 07:01:43 +0000
Manifest next update: Sun 24 Aug 2025 07:01:43 +0000
Files and hashes: 1: DUVtp5rmZWhjlPTwXejQEd3V8J4.roa (hash: qTcPo/VJaQTji8d15MDDjiWvnKJ389xtHOegN0VgXp0=)
2: s90R00a2O7HrIqB8JswSkaKgaJU.crl (hash: 4McH2Df9Lv44ptOvvWaUjvqawdCkl2DlSoNQgMkeiyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:af:dd:04:95:cf:e9:aa:1f:84:a9:52:46:d2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: Aug 23 07:01:43 2025 GMT
Not After : Aug 24 07:01:43 2025 GMT
Subject: CN=d070bbb03da3e29531565d6be7780bbd735a2b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7b:14:b1:cf:24:64:7b:68:b1:08:6b:b3:b1:
1c:7e:5b:53:1b:29:ee:9d:d3:bb:e4:56:27:32:c3:
6d:4d:5d:ba:45:5f:a9:f4:76:7e:6d:90:8e:4f:d5:
66:95:c6:dc:03:25:5e:1d:8a:0d:04:ec:bf:83:5b:
0b:1c:a3:92:b6:e6:8f:24:e7:85:ca:2a:4b:6f:41:
52:66:de:8c:13:2a:15:15:ad:6a:15:36:bc:84:3d:
3b:e8:33:54:83:c4:a7:d1:bb:c8:c6:34:93:e9:e7:
78:fc:c1:f9:00:ba:d4:c2:af:3f:79:10:9e:42:09:
29:05:33:79:91:51:b8:6f:21:55:ba:70:ef:8b:47:
c0:4a:d1:3d:ff:94:67:f3:10:95:10:de:30:b6:ac:
38:e5:36:b8:58:36:d5:8a:d2:7b:e6:37:f0:91:9a:
bf:bf:ef:60:d2:95:45:ee:20:48:01:db:07:e4:78:
ac:69:24:5c:61:33:27:ff:3a:78:4e:04:c4:bf:e6:
2a:f4:da:d2:79:ed:23:99:fb:a8:3b:9b:97:d1:b4:
17:9b:35:e4:a2:a2:97:2b:66:8a:55:95:da:8e:9c:
70:bb:35:f3:ab:e6:50:45:98:cf:2c:6c:39:50:7b:
07:1d:aa:08:6f:89:2c:ec:af:bd:db:78:01:4f:cc:
5e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:70:BB:B0:3D:A3:E2:95:31:56:5D:6B:E7:78:0B:BD:73:5A:2B:3A
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4e:78:88:44:f9:22:32:ae:5f:44:75:3f:fe:15:1c:47:9b:
28:0e:8d:13:11:ad:b1:09:0d:2f:21:21:88:7f:ba:69:94:60:
0f:5e:05:ef:ec:7c:31:7d:d7:63:7a:d9:18:75:58:25:e6:ed:
b7:e6:30:fb:f0:3c:e4:f2:bb:20:47:2a:ed:80:b8:d1:7e:92:
d8:bc:b4:52:03:32:b3:60:0f:83:ba:ae:05:ab:39:3d:db:e3:
ae:40:71:d3:ca:0c:83:f0:06:ea:b3:30:c7:7c:74:3e:a4:93:
d8:80:7a:2d:e6:dd:97:41:4a:68:b6:7c:99:25:36:a3:7c:bf:
eb:22:d5:c0:7e:e8:51:d7:94:38:8e:f8:97:71:a1:a1:d9:59:
f5:9c:9a:40:66:b2:0b:8e:65:4d:8c:1c:63:90:2b:cf:25:e8:
4f:d7:f7:6e:50:d3:79:9e:ef:5f:b0:d2:0f:12:0e:1c:1b:fa:
84:a2:e8:c5:cb:2c:18:4c:dc:d0:6e:e4:8c:cb:f3:60:df:58:
7a:96:80:f6:cb:3e:8e:cb:fe:88:6b:59:d4:33:fc:b4:72:53:
22:20:ef:1e:f2:24:75:cd:d3:35:bb:5a:79:3e:36:53:bb:64:
84:67:c4:fe:85:ab:05:f8:1c:6e:05:1f:7e:a3:ff:6a:57:e8:
30:a5:b1:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu6/dBJXP6aofhKlSRtLoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZGQxMWQzNDZiNjNiYjFlYjIyYTA3YzI2Y2MxMjkxYTJh
MDY4OTUwHhcNMjUwODIzMDcwMTQzWhcNMjUwODI0MDcwMTQzWjAzMTEwLwYDVQQD
EyhkMDcwYmJiMDNkYTNlMjk1MzE1NjVkNmJlNzc4MGJiZDczNWEyYjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3sUsc8kZHtosQhrs7EcfltTGynu
ndO75FYnMsNtTV26RV+p9HZ+bZCOT9VmlcbcAyVeHYoNBOy/g1sLHKOStuaPJOeF
yipLb0FSZt6MEyoVFa1qFTa8hD076DNUg8Sn0bvIxjST6ed4/MH5ALrUwq8/eRCe
QgkpBTN5kVG4byFVunDvi0fAStE9/5Rn8xCVEN4wtqw45Ta4WDbVitJ75jfwkZq/
v+9g0pVF7iBIAdsH5HisaSRcYTMn/zp4TgTEv+Yq9NrSee0jmfuoO5uX0bQXmzXk
oqKXK2aKVZXajpxwuzXzq+ZQRZjPLGw5UHsHHaoIb4ks7K+923gBT8xejQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBwu7A9o+KVMVZda+d4C71zWis6MB8GA1UdIwQY
MBaAFLPdEdNGtjux6yKgfCbMEpGioGiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczkwUjAwYTJPN0hySXFCOEpzd1NrYUtnYUpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hNDE4OTgtZGEwOC00NjlkLWJlMWEt
OGJiYzIyNmU2YzQ1LzEvczkwUjAwYTJPN0hySXFCOEpzd1NrYUtnYUpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hNDE4OTgtZGEwOC00NjlkLWJlMWEtOGJiYzIyNmU2YzQ1
LzEvczkwUjAwYTJPN0hySXFCOEpzd1NrYUtnYUpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb054iET5
IjKuX0R1P/4VHEebKA6NExGtsQkNLyEhiH+6aZRgD14F7+x8MX3XY3rZGHVYJebt
t+Yw+/A85PK7IEcq7YC40X6S2Ly0UgMys2APg7quBas5PdvjrkBx08oMg/AG6rMw
x3x0PqST2IB6Lebdl0FKaLZ8mSU2o3y/6yLVwH7oUdeUOI74l3GhodlZ9ZyaQGay
C45lTYwcY5ArzyXoT9f3blDTeZ7vX7DSDxIOHBv6hKLoxcssGEzc0G7kjMvzYN9Y
epaA9ss+jsv+iGtZ1DP8tHJTIiDvHvIkdc3TNbtaeT42U7tkhGfE/oWrBfgcbgUf
fqP/alfoMKWxTQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:10:46 2025 by rpki-client