Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
File: c90olFaK69Ba1kMtU89w4s14jm4.mft (raw, json)
Hash identifier: k4qZy3HAzOBY2wLb10b9FqV1UXZe6QULMKHz1Y+O34A=
Subject key identifier: 97:8A:4C:A3:58:ED:16:76:C8:A3:BF:EB:AF:0B:9B:63:22:70:8E:67
Authority key identifier: 73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E
Certificate issuer: /CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
Certificate serial: 019A503E0993C2769057B91A32E1DFA166F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 19:00:34 +0000
Manifest this update: Tue 04 Nov 2025 19:00:34 +0000
Manifest next update: Wed 05 Nov 2025 19:00:34 +0000
Files and hashes: 1: UT_ZqedtuCB3HHv5lCRNjDUnZHE.roa (hash: /rFlwg+a07MXWPZmqC8xSpbpKsUCk+WTtzjGaygl83Y=)
2: c90olFaK69Ba1kMtU89w4s14jm4.crl (hash: m/BfGjDcz6bAnq3KcuBaZ+AJ28argc/qStRuN25P/GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:09:93:c2:76:90:57:b9:1a:32:e1:df:a1:66:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
Validity
Not Before: Nov 4 19:00:34 2025 GMT
Not After : Nov 5 19:00:34 2025 GMT
Subject: CN=978a4ca358ed1676c8a3bfebaf0b9b6322708e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:10:96:b4:67:20:4e:90:03:73:a2:65:da:fb:
2c:d6:6f:6b:86:7b:cc:79:ec:df:2d:c7:68:b9:61:
82:46:87:61:1c:30:aa:33:08:25:3c:fe:29:ef:35:
39:b0:0c:f7:2d:33:f3:74:cd:3d:94:62:ad:9e:33:
fb:6e:e1:11:f5:81:b7:4b:bb:4c:e2:ab:9d:c4:a6:
22:7d:d8:be:0a:7b:0d:85:bb:e3:31:bd:78:72:33:
6b:48:2a:06:50:87:cd:a3:83:d8:65:6c:a7:dc:dd:
f3:35:ca:1a:13:61:3a:4d:6a:1f:38:ce:22:8b:14:
31:06:21:08:df:9e:d4:24:46:23:0a:55:ee:0d:04:
fd:15:44:6d:07:88:4d:30:5f:a1:4e:0d:68:85:18:
54:be:2e:20:71:4a:0e:b1:2e:3c:9a:83:b6:4b:e0:
ab:7d:8e:91:82:b7:19:27:1f:c8:00:35:d8:2e:57:
19:cb:b2:7d:ed:52:d2:da:e7:17:60:64:80:9b:08:
1b:54:4d:b4:3d:58:a5:67:e4:5c:b3:3d:f9:12:39:
38:5e:ed:ac:ad:2f:70:f1:9b:19:f5:e5:f6:4f:5e:
00:70:68:9c:76:cd:a1:af:b1:8b:98:84:e1:11:65:
80:95:a2:01:30:e7:c6:f3:bf:78:f3:25:cf:85:a5:
03:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8A:4C:A3:58:ED:16:76:C8:A3:BF:EB:AF:0B:9B:63:22:70:8E:67
X509v3 Authority Key Identifier:
keyid:73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:3a:23:f3:c0:c8:7b:e7:31:e2:b4:e2:3c:92:39:5c:fe:f9:
c1:14:60:4f:f4:be:1a:a8:62:ab:68:91:d0:39:61:ba:84:69:
fa:c6:dc:87:59:b4:a4:11:85:ea:34:35:1e:08:94:14:8f:2f:
66:2c:ea:e1:00:31:9e:3f:ec:c6:72:fa:e6:f6:b6:be:b6:8b:
8f:fe:72:e3:5e:27:26:ed:aa:ac:79:97:26:d1:97:f5:82:1a:
d9:59:a4:70:00:cd:5a:5d:66:fd:ea:70:b7:82:dd:19:25:97:
f0:39:6c:9b:7b:54:bd:20:c0:5d:68:c9:88:62:33:b2:e7:41:
1d:5c:ce:43:af:fc:b2:fb:0d:19:f9:29:9d:79:9b:78:34:03:
0d:26:f1:35:7d:48:ed:3f:2d:6a:0e:ff:21:01:73:f4:82:be:
ea:dd:fe:48:28:e0:a0:fb:e7:41:f8:a0:1e:ed:e7:73:5b:c8:
04:1f:9f:f2:3a:67:90:6c:ab:2d:3c:d6:c0:fb:c5:81:94:b5:
96:ca:b2:ae:4a:57:74:aa:ad:27:c5:c8:9a:01:e6:4e:23:2d:
f4:e0:ea:f5:11:74:2a:a0:85:79:0c:cc:45:c0:66:f5:24:f3:
37:89:88:b1:47:1c:e5:a4:7e:b0:06:e0:4f:c8:99:a8:37:e8:
de:6c:5f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:57:45 2025 by rpki-client