Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
File: c90olFaK69Ba1kMtU89w4s14jm4.mft (raw, json)
Hash identifier: C7Uu3HBguUcmvtN6nQNJWQdrkvViyoCDZeosHA+MT0g=
Subject key identifier: 08:C2:C5:DD:C3:22:66:2B:1B:01:13:D5:01:2A:0E:8C:70:98:EE:2C
Authority key identifier: 73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E
Certificate issuer: /CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
Certificate serial: 0198D5F13C1E92EFDC2F922C8D606F0E49F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:13 +0000
Manifest this update: Sat 23 Aug 2025 08:00:13 +0000
Manifest next update: Sun 24 Aug 2025 08:00:13 +0000
Files and hashes: 1: UT_ZqedtuCB3HHv5lCRNjDUnZHE.roa (hash: /rFlwg+a07MXWPZmqC8xSpbpKsUCk+WTtzjGaygl83Y=)
2: c90olFaK69Ba1kMtU89w4s14jm4.crl (hash: bBPDRbcKik+AVfTdBCkN8lwJda4rud0PpyJS8tjbabA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:3c:1e:92:ef:dc:2f:92:2c:8d:60:6f:0e:49:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
Validity
Not Before: Aug 23 08:00:13 2025 GMT
Not After : Aug 24 08:00:13 2025 GMT
Subject: CN=08c2c5ddc322662b1b0113d5012a0e8c7098ee2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:68:bf:af:06:ca:e5:fa:2c:7b:d6:33:72:fa:
63:94:40:aa:fe:18:13:2f:8b:d3:fb:13:07:37:de:
17:77:4b:c4:0b:72:f9:17:0e:ab:3b:72:22:47:f5:
94:95:69:58:c5:4e:22:2f:6d:5d:34:a3:e3:f2:04:
71:33:d9:e5:38:3b:b8:0b:c7:ff:db:e9:95:2e:0d:
6b:18:27:9f:ce:e5:71:5b:c6:b0:d6:5f:8c:17:a9:
19:04:9a:c0:37:ed:6d:df:58:3c:80:53:d8:f1:4a:
0f:0a:7f:3c:5d:6e:da:3f:b6:cb:38:ed:7a:a9:72:
29:be:d6:99:7c:71:d3:da:ca:1f:15:b9:e6:c3:27:
39:4d:79:e5:c5:e5:a3:09:09:6e:30:3f:a3:ca:70:
80:f2:4c:c3:63:56:d0:c0:2f:b3:98:ff:72:b0:1c:
cf:66:bf:a1:d7:d3:37:12:78:db:6d:a2:6e:73:49:
b7:2c:83:22:8f:10:ff:03:d2:70:f8:26:37:aa:20:
81:ff:c4:32:eb:c1:23:0c:1b:4f:31:54:bc:26:a9:
5e:ef:e8:58:44:3d:59:90:58:83:69:7c:c7:23:7f:
bf:c1:09:54:10:09:76:82:c3:27:1a:f7:b9:a3:28:
35:72:91:7d:cc:15:b0:4b:c7:c9:04:81:57:00:1f:
5c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C2:C5:DD:C3:22:66:2B:1B:01:13:D5:01:2A:0E:8C:70:98:EE:2C
X509v3 Authority Key Identifier:
keyid:73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:22:2a:e9:9f:18:c9:e4:f9:1d:9d:5e:8f:db:c8:4b:ca:77:
f9:9c:74:d6:c7:79:ff:b4:51:62:4d:67:c0:d1:43:86:49:c7:
66:9b:a9:5f:68:2f:71:09:a5:f8:84:57:00:16:86:ab:d2:8d:
01:89:a6:8c:02:dd:ba:76:40:db:cf:59:30:3c:c5:6e:8c:55:
ff:99:57:1b:5e:c6:4d:87:10:eb:cd:c7:aa:95:9c:3b:60:e8:
49:41:b4:dd:cb:c6:78:b2:00:24:fb:0e:d0:d5:0a:c2:67:2b:
a2:49:61:37:5b:cb:96:11:14:88:62:c0:4f:92:ad:fd:cc:9f:
81:79:bf:83:f6:bd:b2:5e:75:7c:c4:e7:ec:5f:ae:a6:34:9b:
e0:b1:51:e9:ca:14:5c:92:22:c7:a9:dd:08:a6:7d:b1:db:16:
a2:d9:96:78:0d:3a:3b:85:9a:b4:f0:0b:3f:ab:95:8a:6e:22:
fe:73:cb:11:49:c3:94:46:b3:37:87:fe:11:3c:54:ce:5a:57:
4a:ea:40:02:ef:0e:82:d0:ef:d8:f5:48:12:6a:34:0a:74:e5:
fc:7c:db:0a:36:f2:dd:17:40:02:8a:0d:f8:55:d7:0d:63:f5:
cb:50:a5:2e:8e:bd:e4:d7:35:1b:de:66:7e:6d:1c:b1:1b:78:
40:62:dc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:12:38 2025 by rpki-client