Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
File: kOszbVYE1HuugXI4sNu0l3HiRyk.mft (raw, json)
Hash identifier: eQhzCVFQruj3Tgku0aDG0OPpsvdby51yoXk030RHU9M=
Subject key identifier: 98:1F:8A:06:DA:2B:34:DE:AA:2E:7C:EF:EB:FB:20:7A:A4:C0:E8:8F
Authority key identifier: 90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
Certificate issuer: /CN=90eb336d5604d47bae817238b0dbb49771e24729
Certificate serial: 0199FCFD320445A87992B2425025BE532979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 15:01:15 +0000
Manifest this update: Sun 19 Oct 2025 15:01:15 +0000
Manifest next update: Mon 20 Oct 2025 15:01:15 +0000
Files and hashes: 1: kOszbVYE1HuugXI4sNu0l3HiRyk.crl (hash: qMDOa86zTE7P3uyZrcfmjZxf642bg/ivoXePmEJ2lVs=)
2: nHFDaIILOdTjKywJ536u2NbijQ4.roa (hash: GZUS5OKqPLBVaLkWEyB2Ce3k2q8gf8Rj7vaTEKCevNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:32:04:45:a8:79:92:b2:42:50:25:be:53:29:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90eb336d5604d47bae817238b0dbb49771e24729
Validity
Not Before: Oct 19 15:01:15 2025 GMT
Not After : Oct 20 15:01:15 2025 GMT
Subject: CN=981f8a06da2b34deaa2e7cefebfb207aa4c0e88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:65:91:3a:ae:37:59:fb:2e:29:1e:95:15:7a:
ca:0f:2e:78:a8:b1:f7:27:9f:ff:e8:57:19:6b:97:
e1:ec:a1:d7:f9:c9:8c:93:ef:77:15:72:1d:28:b3:
47:a8:7e:70:2f:f7:8c:36:bb:09:31:63:b9:bd:8c:
8f:b8:37:06:cf:e8:69:20:dd:0f:0d:89:bc:fb:01:
b8:e0:0a:e3:e6:3a:0e:3a:9d:f8:aa:cf:0f:59:9b:
a6:f1:71:a6:0f:d0:52:78:1b:12:9a:0e:1e:45:c7:
6d:d7:8c:37:cf:6c:3b:2d:c9:52:6b:d7:b2:26:8e:
29:d6:57:40:0e:96:a9:34:79:66:15:8c:de:33:28:
ea:da:0b:2a:c8:20:65:6d:60:03:f2:a1:fd:d2:f8:
cf:16:2a:05:ec:79:1a:4b:2d:cb:8e:7e:7b:d4:03:
44:65:8b:74:50:dd:03:14:dc:2b:58:fa:db:93:12:
83:6b:69:d4:af:7a:d6:90:61:84:58:56:83:d8:7f:
0e:67:77:c9:0e:f4:31:3a:b4:53:e1:9e:38:c3:e5:
eb:e3:87:b0:dd:da:17:52:ff:11:8d:f9:a1:2c:d4:
12:be:d5:a0:24:9f:d0:df:f7:c7:3c:c4:f5:13:6a:
10:c9:4e:83:3a:89:9a:3c:54:7c:19:0d:1a:49:82:
ed:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1F:8A:06:DA:2B:34:DE:AA:2E:7C:EF:EB:FB:20:7A:A4:C0:E8:8F
X509v3 Authority Key Identifier:
keyid:90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b6:ba:fb:45:82:d8:bc:bb:ad:05:21:83:74:8a:6c:95:a9:
54:8c:d9:1a:49:18:a6:f1:75:72:43:80:b1:15:a4:ce:5b:ae:
d7:ab:2b:cd:06:a1:69:0c:02:e9:a8:a8:23:e6:9e:42:91:94:
95:c6:6f:e9:ea:73:f1:8f:65:5b:88:23:96:b3:23:0b:0b:cd:
1d:e6:c4:31:62:ec:da:c1:11:23:ab:4f:09:3d:1a:90:3e:56:
df:c2:77:52:24:c6:8a:0f:29:d2:d6:69:9a:80:14:53:01:08:
d8:72:ba:be:40:9c:f6:3d:59:b8:e9:77:86:9e:d4:15:96:20:
a1:0e:ef:53:4f:e1:43:e2:e6:e2:41:33:47:89:93:b5:cb:ea:
18:e4:a0:ae:30:25:96:a7:57:82:53:18:14:cc:b0:a4:67:dd:
84:24:f9:04:1b:0a:75:f7:18:c5:7e:df:fa:3f:34:80:fe:05:
ab:28:44:1b:36:cc:9c:e0:38:ca:01:78:5a:07:ac:52:7e:11:
f2:a3:34:6a:77:db:95:c6:bc:e7:a5:42:47:e9:80:23:48:16:
24:ff:62:d8:3a:51:5e:e8:b6:c9:70:5d:b0:44:fe:9b:8a:5c:
60:e7:7f:f6:c9:74:4f:92:cf:c5:73:86:63:bf:25:77:82:ea:
b0:b3:12:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:53 2025 by rpki-client