Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
File: c90olFaK69Ba1kMtU89w4s14jm4.mft (raw, json)
Hash identifier: 64dHrraZExxqN5AXU9jKBqxnCie2nd5fheSmqB+wARM=
Subject key identifier: 55:63:39:F0:5E:32:F6:86:76:E5:D1:40:02:23:D1:AB:03:C5:6E:D7
Authority key identifier: 73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E
Certificate issuer: /CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
Certificate serial: 0199FD347984690373007F5EA3A8A7F6343D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 16:01:38 +0000
Manifest this update: Sun 19 Oct 2025 16:01:38 +0000
Manifest next update: Mon 20 Oct 2025 16:01:38 +0000
Files and hashes: 1: UT_ZqedtuCB3HHv5lCRNjDUnZHE.roa (hash: /rFlwg+a07MXWPZmqC8xSpbpKsUCk+WTtzjGaygl83Y=)
2: c90olFaK69Ba1kMtU89w4s14jm4.crl (hash: /jYhPAI9h2nYf+Q+wn3XPNCIw1KdQvA0o0381RjSst8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:79:84:69:03:73:00:7f:5e:a3:a8:a7:f6:34:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
Validity
Not Before: Oct 19 16:01:38 2025 GMT
Not After : Oct 20 16:01:38 2025 GMT
Subject: CN=556339f05e32f68676e5d1400223d1ab03c56ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7a:a1:2b:95:4f:16:4b:ba:e8:aa:2f:be:56:
4d:76:26:66:8e:3b:14:80:09:88:0f:f4:85:2a:fb:
a1:b2:14:1c:9e:d5:49:68:85:44:45:4c:21:15:3e:
d3:3e:a8:7e:98:59:7b:bc:2f:a8:da:e0:f2:91:2d:
af:ef:50:69:d7:0d:80:69:7b:6b:da:f6:a4:37:f2:
f2:d2:38:9b:98:2e:cd:08:6e:70:d9:29:13:34:fa:
32:38:8c:7d:41:01:6d:2c:e9:36:ec:ab:94:c1:09:
d1:28:06:9e:5d:52:d7:80:7d:f6:c3:94:ec:86:b6:
ef:44:f9:d9:5b:9e:82:89:76:61:8b:b9:b6:1c:36:
e3:ef:65:ff:cd:c4:6a:2b:43:24:b1:b3:25:0c:d4:
26:3a:63:0f:90:fe:8f:7e:3a:50:78:21:bd:be:eb:
a8:f7:52:38:fe:b2:b2:f6:dc:ae:3d:f1:47:c2:27:
73:1a:46:0d:f9:fa:2d:10:4a:66:e9:4d:34:a8:a7:
84:83:47:c0:76:76:e2:b1:26:d3:b5:ea:5a:2e:a8:
05:3d:28:44:38:d1:35:e5:00:89:71:49:2e:40:49:
50:9e:48:ae:36:1f:64:c5:73:1b:4e:03:2a:2a:a6:
da:a7:21:4a:07:48:2a:f5:5c:78:f6:94:5d:1e:d7:
15:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:63:39:F0:5E:32:F6:86:76:E5:D1:40:02:23:D1:AB:03:C5:6E:D7
X509v3 Authority Key Identifier:
keyid:73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:4c:95:61:86:59:c8:06:3c:5c:3e:9a:d1:29:e3:e0:24:b1:
2a:7f:34:43:e4:9c:0c:0c:7e:7e:f9:a2:75:24:ae:cc:14:ac:
4e:d2:55:55:2e:19:4b:2f:92:be:20:0b:4b:48:dc:0b:71:16:
8c:2c:28:77:86:30:71:93:9d:9b:7d:7b:1b:c5:d9:88:e6:fd:
f8:53:98:37:ac:87:13:b7:2f:19:59:e3:42:cb:fb:06:17:73:
18:9b:e6:9b:ff:c2:37:14:76:9e:c0:32:df:00:80:a1:39:60:
5a:4c:8d:8e:77:3c:d7:36:40:72:89:33:5d:16:46:fc:15:79:
eb:d6:c5:64:60:74:f2:71:f9:49:35:55:55:a9:88:47:fc:42:
41:64:6b:a0:b2:47:18:8e:8a:00:cc:8d:9b:01:32:b5:4f:b6:
c4:a4:30:32:aa:3c:90:24:c5:b5:54:72:7e:48:45:ad:bc:ce:
5a:c8:84:0d:7a:bb:d3:88:8b:8e:b8:00:05:5f:3b:1a:2a:0a:
da:87:50:be:12:71:b2:05:7f:6d:17:dc:7b:7c:5f:f9:aa:d1:
60:25:68:38:1d:62:d1:6c:4b:51:4e:5e:b8:24:f6:47:8c:5b:
d2:93:4a:2d:bb:d3:53:73:47:51:e4:41:e7:86:a5:cc:f0:29:
b0:c7:bc:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NHmEaQNzAH9eo6in9jQ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZGQyODk0NTY4YWViZDA1YWQ2NDMyZDUzY2Y3MGUyY2Q3
ODhlNmUwHhcNMjUxMDE5MTYwMTM4WhcNMjUxMDIwMTYwMTM4WjAzMTEwLwYDVQQD
Eyg1NTYzMzlmMDVlMzJmNjg2NzZlNWQxNDAwMjIzZDFhYjAzYzU2ZWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXqhK5VPFku66KovvlZNdiZmjjsU
gAmID/SFKvuhshQcntVJaIVERUwhFT7TPqh+mFl7vC+o2uDykS2v71Bp1w2AaXtr
2vakN/Ly0jibmC7NCG5w2SkTNPoyOIx9QQFtLOk27KuUwQnRKAaeXVLXgH32w5Ts
hrbvRPnZW56CiXZhi7m2HDbj72X/zcRqK0MksbMlDNQmOmMPkP6PfjpQeCG9vuuo
91I4/rKy9tyuPfFHwidzGkYN+fotEEpm6U00qKeEg0fAdnbisSbTtepaLqgFPShE
ONE15QCJcUkuQElQnkiuNh9kxXMbTgMqKqbapyFKB0gq9Vx49pRdHtcV5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVjOfBeMvaGduXRQAIj0asDxW7XMB8GA1UdIwQY
MBaAFHPdKJRWiuvQWtZDLVPPcOLNeI5uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzkwb2xGYUs2OUJhMWtNdFU4OXc0czE0am00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hMWQyMGUtNTBhMi00NGRjLWIxZTgt
YTY3ZGNhOGEwODhjLzEvYzkwb2xGYUs2OUJhMWtNdFU4OXc0czE0am00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9hMWQyMGUtNTBhMi00NGRjLWIxZTgtYTY3ZGNhOGEwODhj
LzEvYzkwb2xGYUs2OUJhMWtNdFU4OXc0czE0am00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuEyVYYZZ
yAY8XD6a0Snj4CSxKn80Q+ScDAx+fvmidSSuzBSsTtJVVS4ZSy+SviALS0jcC3EW
jCwod4YwcZOdm317G8XZiOb9+FOYN6yHE7cvGVnjQsv7BhdzGJvmm//CNxR2nsAy
3wCAoTlgWkyNjnc81zZAcokzXRZG/BV569bFZGB08nH5STVVVamIR/xCQWRroLJH
GI6KAMyNmwEytU+2xKQwMqo8kCTFtVRyfkhFrbzOWsiEDXq704iLjrgABV87GioK
2odQvhJxsgV/bRfce3xf+arRYCVoOB1i0WxLUU5euCT2R4xb0pNKLbvTU3NHUeRB
54alzPApsMe8qQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:26:54 2025 by rpki-client