Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft
File: 88q2j7sMl5R2WUvfxWwZIEK43t8.mft (raw, json)
Hash identifier: AAn3YOVHkAPhPrWwmnxE8ffM8hzejmpRw+QUFTsG1PA=
Subject key identifier: D7:7E:CC:E0:83:6B:4E:C7:9A:6B:B8:61:F3:07:D9:62:1E:D6:C8:D9
Authority key identifier: F3:CA:B6:8F:BB:0C:97:94:76:59:4B:DF:C5:6C:19:20:42:B8:DE:DF
Certificate issuer: /CN=f3cab68fbb0c979476594bdfc56c192042b8dedf
Certificate serial: 0199FDDA102A9D1382648F30A8C5DBC3AC80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft
Manifest number: 1227
Signing time: Sun 19 Oct 2025 19:02:30 +0000
Manifest this update: Sun 19 Oct 2025 19:02:30 +0000
Manifest next update: Mon 20 Oct 2025 19:02:30 +0000
Files and hashes: 1: 88q2j7sMl5R2WUvfxWwZIEK43t8.crl (hash: GwmvNyr5c/q1P1R6AwTPHvUqMtpSbnupqn5LqexNXco=)
2: uhzHg_0oTjSNISZWz69g2JwlZBI.roa (hash: SYDZB0vXv8S1CegMsOsTpWapvWlbrYaUA5uYqL/hcv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:10:2a:9d:13:82:64:8f:30:a8:c5:db:c3:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3cab68fbb0c979476594bdfc56c192042b8dedf
Validity
Not Before: Oct 19 19:02:30 2025 GMT
Not After : Oct 20 19:02:30 2025 GMT
Subject: CN=d77ecce0836b4ec79a6bb861f307d9621ed6c8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f2:d5:16:c4:2d:37:4f:63:06:f2:02:4c:5e:
16:c5:d3:7c:d0:b9:7c:32:68:0c:96:4d:74:e4:48:
37:af:55:28:78:18:70:b3:f9:05:b1:7b:d5:03:e1:
7e:d0:83:54:db:93:a1:63:f4:a5:aa:c9:f3:2d:60:
bc:0a:61:a4:b3:6c:55:ce:b0:9d:ca:c7:a6:f3:44:
b1:bd:88:e8:c5:92:31:6e:4f:f4:ae:92:4c:5f:c9:
e5:a8:0a:f4:56:87:e2:33:63:8c:05:c9:17:65:04:
21:90:c3:96:a2:85:04:29:37:79:21:75:c4:98:8e:
70:ef:d0:4c:f9:4a:f3:9d:a4:5e:1e:9e:5e:f4:f7:
f8:db:12:b7:aa:3b:75:10:0b:09:86:c3:d0:fa:ad:
af:5b:89:65:6f:2e:18:6a:f3:a0:de:83:c7:30:3b:
c4:4f:f6:45:a9:b2:fe:c4:5e:04:db:fd:c6:52:ec:
1e:b5:16:28:9c:c9:ba:36:83:fe:1c:ea:df:2a:43:
7a:d1:94:3e:c8:bd:81:67:cc:b0:b0:ff:9c:b4:b0:
3b:b3:d8:ec:9f:72:85:47:03:d4:bf:23:ad:ad:a2:
63:45:38:7e:68:78:eb:4e:a8:14:ab:98:4b:b1:e4:
6f:be:de:58:4c:ad:5e:e0:c2:db:58:5a:1f:ad:04:
ce:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7E:CC:E0:83:6B:4E:C7:9A:6B:B8:61:F3:07:D9:62:1E:D6:C8:D9
X509v3 Authority Key Identifier:
keyid:F3:CA:B6:8F:BB:0C:97:94:76:59:4B:DF:C5:6C:19:20:42:B8:DE:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:bf:9f:3b:37:eb:2e:21:28:4f:53:68:e8:08:fe:cf:2a:72:
42:26:ac:2e:3b:7d:64:57:7f:60:f8:cf:f4:47:45:42:4a:cb:
c6:df:f0:3c:28:06:a8:ef:7a:eb:ed:8c:63:1d:39:c5:88:57:
6a:cb:3f:88:c7:ae:83:9f:c9:e1:7e:c3:be:c4:2f:a6:62:ef:
ae:34:0a:8f:43:34:d2:42:24:be:c1:c9:b3:02:cf:7f:38:21:
dc:ea:23:e3:6e:1b:ad:08:60:45:43:c3:3f:94:ed:19:41:82:
04:84:63:e2:69:90:04:8b:8e:73:3b:15:dd:64:ae:96:53:cf:
dd:f9:50:cb:e4:1c:6c:b8:ad:5f:3d:f2:ed:47:c6:ff:5c:3c:
d1:d8:2e:ce:9b:d8:46:2c:01:cc:69:36:22:99:2e:b4:95:81:
1a:56:3c:41:a3:27:75:1a:3e:d1:b8:6b:62:f5:e2:42:ce:bf:
77:16:eb:25:08:5a:03:5c:c8:cb:f2:9d:9c:72:4f:7d:a2:5e:
f6:95:a2:e0:f8:54:c2:9a:6d:07:7d:a9:84:4b:3e:d2:14:de:
00:a2:b8:6b:99:2b:1f:ea:6e:fd:49:73:38:9e:1d:56:d0:fa:
bd:d2:5f:32:03:c8:19:9c:e3:5b:25:8b:f8:9b:32:cd:42:1d:
df:f1:61:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92hAqnROCZI8wqMXbw6yAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzY2FiNjhmYmIwYzk3OTQ3NjU5NGJkZmM1NmMxOTIwNDJi
OGRlZGYwHhcNMjUxMDE5MTkwMjMwWhcNMjUxMDIwMTkwMjMwWjAzMTEwLwYDVQQD
EyhkNzdlY2NlMDgzNmI0ZWM3OWE2YmI4NjFmMzA3ZDk2MjFlZDZjOGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvLVFsQtN09jBvICTF4WxdN80Ll8
MmgMlk105Eg3r1UoeBhws/kFsXvVA+F+0INU25OhY/SlqsnzLWC8CmGks2xVzrCd
ysem80SxvYjoxZIxbk/0rpJMX8nlqAr0VofiM2OMBckXZQQhkMOWooUEKTd5IXXE
mI5w79BM+UrznaReHp5e9Pf42xK3qjt1EAsJhsPQ+q2vW4llby4YavOg3oPHMDvE
T/ZFqbL+xF4E2/3GUuwetRYonMm6NoP+HOrfKkN60ZQ+yL2BZ8ywsP+ctLA7s9js
n3KFRwPUvyOtraJjRTh+aHjrTqgUq5hLseRvvt5YTK1e4MLbWFofrQTO0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNd+zOCDa07Hmmu4YfMH2WIe1sjZMB8GA1UdIwQY
MBaAFPPKto+7DJeUdllL38VsGSBCuN7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODhxMmo3c01sNVIyV1V2ZnhXd1pJRUs0M3Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9hNDQzMzUtNDE0Zi00NDc5LWE3ZmUt
YWE0YTgxYTJlYjIzLzEvODhxMmo3c01sNVIyV1V2ZnhXd1pJRUs0M3Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9hNDQzMzUtNDE0Zi00NDc5LWE3ZmUtYWE0YTgxYTJlYjIz
LzEvODhxMmo3c01sNVIyV1V2ZnhXd1pJRUs0M3Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKb+fOzfr
LiEoT1No6Aj+zypyQiasLjt9ZFd/YPjP9EdFQkrLxt/wPCgGqO966+2MYx05xYhX
ass/iMeug5/J4X7DvsQvpmLvrjQKj0M00kIkvsHJswLPfzgh3Ooj424brQhgRUPD
P5TtGUGCBIRj4mmQBIuOczsV3WSullPP3flQy+QcbLitXz3y7UfG/1w80dguzpvY
RiwBzGk2IpkutJWBGlY8QaMndRo+0bhrYvXiQs6/dxbrJQhaA1zIy/KdnHJPfaJe
9pWi4PhUwpptB32phEs+0hTeAKK4a5krH+pu/UlzOJ4dVtD6vdJfMgPIGZzjWyWL
+JsyzUId3/Fhyw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:58:55 2025 by rpki-client