Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
File: s90R00a2O7HrIqB8JswSkaKgaJU.mft (raw, json)
Hash identifier: MuBjfKLXftljpEIPW3cLFVrDkmYQ6ijTiw0uI1NLtVg=
Subject key identifier: E0:67:CF:90:02:F9:F6:EE:0C:8F:88:83:D0:54:D8:51:86:EA:F1:9E
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: 0199FD33F5DD0FC297ED205FBBBB0FF652ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
Manifest number: 0EEE
Signing time: Sun 19 Oct 2025 16:01:04 +0000
Manifest this update: Sun 19 Oct 2025 16:01:04 +0000
Manifest next update: Mon 20 Oct 2025 16:01:04 +0000
Files and hashes: 1: DUVtp5rmZWhjlPTwXejQEd3V8J4.roa (hash: qTcPo/VJaQTji8d15MDDjiWvnKJ389xtHOegN0VgXp0=)
2: s90R00a2O7HrIqB8JswSkaKgaJU.crl (hash: W/msYWRwh7HjasxFPTJ9WcJWyT+kFOwSre8cRPe3T64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:f5:dd:0f:c2:97:ed:20:5f:bb:bb:0f:f6:52:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: Oct 19 16:01:04 2025 GMT
Not After : Oct 20 16:01:04 2025 GMT
Subject: CN=e067cf9002f9f6ee0c8f8883d054d85186eaf19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:65:35:e5:8f:67:e1:eb:0a:56:a6:1c:1a:
13:58:79:a1:e5:5a:8d:de:5f:d6:40:45:7c:13:82:
00:2c:18:a0:03:62:95:60:e6:55:c9:01:a4:d6:d9:
0e:1d:9c:14:7d:3e:af:73:ad:49:62:12:f4:1a:8f:
af:8c:6c:45:28:89:2e:3e:4b:e9:23:c2:c5:52:c6:
c2:93:ee:5b:c5:5d:3e:0c:1b:b2:7b:f2:9f:a3:5c:
c4:7f:14:3c:ee:35:58:e5:9a:a8:e2:00:7a:dc:8d:
4d:62:41:bd:38:37:d1:0e:aa:90:6c:a6:22:1e:01:
6c:56:28:a3:82:a6:47:f8:7e:ef:bd:af:9e:1e:1c:
f9:54:b3:7a:41:c2:1f:95:26:c0:ea:f4:5a:2f:3f:
44:90:45:01:f3:69:ce:62:d8:ff:19:87:ec:a5:32:
43:bb:fc:03:ac:ec:f6:df:19:65:d6:ed:5f:64:08:
20:d6:96:26:15:47:aa:11:85:b3:e1:4e:cf:66:bc:
8a:1e:7e:d9:34:19:f8:e4:cb:75:d8:5c:f2:1e:72:
59:d9:18:8f:5c:d4:d4:58:34:1b:cc:e2:76:50:3e:
9e:9e:0b:68:6a:a4:07:33:4f:98:b4:ac:20:b0:17:
c6:6d:1f:ca:7c:e9:e0:85:ba:7d:4a:30:d7:61:f0:
00:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:67:CF:90:02:F9:F6:EE:0C:8F:88:83:D0:54:D8:51:86:EA:F1:9E
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d8:be:75:23:9d:ab:d9:65:b2:6a:aa:4e:de:df:b8:92:94:
88:39:66:9a:81:d1:b6:fa:82:3c:41:be:71:5a:69:77:e6:c7:
44:a7:58:f2:ae:ac:f2:79:14:d1:46:b1:0e:35:bc:d7:77:9c:
71:12:0c:e7:e4:a5:8f:fd:0f:7c:e2:30:34:40:e6:b9:fc:0b:
8c:39:72:89:d7:36:74:6e:4b:87:08:be:65:52:7f:23:85:3d:
89:88:21:4d:dc:2a:c7:75:e8:d7:58:ec:d2:93:fc:92:6d:52:
0c:ff:03:00:b0:c1:0e:67:19:49:9e:67:c1:07:6f:a6:78:ff:
89:1b:4d:7e:cd:cb:e7:80:06:3b:98:56:b3:0b:5c:e8:82:40:
f7:a2:87:00:5e:45:f1:b9:be:ff:b1:a5:00:69:82:e4:f2:f2:
08:0c:bd:bd:7e:74:2c:ae:ab:9e:31:7d:ff:8b:51:fe:7c:55:
ce:cd:e9:3e:a1:ae:c1:e5:6b:37:13:48:ed:65:1c:9a:ad:b7:
6b:21:54:04:2e:de:3d:c3:d1:fb:61:0e:e2:61:97:44:39:62:
bd:e1:e7:f4:3f:6c:de:9d:d1:1f:00:da:b5:f1:5b:c9:99:e7:
95:7f:af:e4:9f:6e:dc:31:36:0a:6f:01:23:74:db:c9:b3:75:
c9:6a:b5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:25 2025 by rpki-client