Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
File: IOI90FhJzIEyVauNG4U_ucRdhpQ.mft (raw, json)
Hash identifier: Ocz+XoXreolFrKY6alWAVyjzq1r+9qeQ6JsM2MjCXbU=
Subject key identifier: A5:C8:4D:EC:39:7B:80:89:E8:D5:F0:D8:D5:49:22:86:45:14:82:4B
Authority key identifier: 20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94
Certificate issuer: /CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
Certificate serial: 01987D8B98A7818D1103FA08F7AB0A687C14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
Manifest number: 19
Signing time: Wed 06 Aug 2025 04:02:37 +0000
Manifest this update: Wed 06 Aug 2025 04:02:37 +0000
Manifest next update: Thu 07 Aug 2025 04:02:37 +0000
Files and hashes: 1: IOI90FhJzIEyVauNG4U_ucRdhpQ.crl (hash: KcGbKGqFmePGae+XqvZUjkOZLK6uoy+opm1NDhIyrSQ=)
2: WnjDTxLEaqOui0Ha0cHV61JSgqM.roa (hash: /Hg6cfcRzcdPSVYjlpQQ2lt5H6wf7ZaOp41HGAyx/Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:98:a7:81:8d:11:03:fa:08:f7:ab:0a:68:7c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
Validity
Not Before: Aug 6 04:02:37 2025 GMT
Not After : Aug 7 04:02:37 2025 GMT
Subject: CN=a5c84dec397b8089e8d5f0d8d54922864514824b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:99:80:ee:0c:c8:43:e0:f4:78:95:99:f8:63:
0c:f5:79:de:19:6b:bb:ad:98:84:ae:a1:e1:9e:a1:
4c:53:15:71:53:b5:5e:b4:e0:03:91:22:7b:ed:fb:
24:31:11:d5:50:f5:a6:16:22:8a:0b:89:87:6f:de:
32:ae:6f:64:65:a9:12:fd:55:66:a4:b9:4b:3b:35:
a2:17:f8:f0:db:96:90:03:2a:9d:f7:bf:19:66:19:
05:a1:4e:da:97:1b:f1:fb:bd:a5:5e:1f:f8:7e:a9:
15:04:49:4a:8d:c6:fb:26:ea:8a:5d:67:30:cf:83:
37:cb:80:04:c0:a3:c1:50:76:b0:84:da:ee:08:00:
46:51:ed:18:0f:07:67:8b:bd:19:36:91:df:f7:7f:
a6:a3:4d:18:53:f3:86:84:87:72:92:f3:5c:c8:08:
b2:bc:82:f8:45:b1:18:5b:46:63:55:8a:73:49:65:
8a:db:74:f1:86:05:3e:5f:bc:c9:c9:c3:5d:f5:06:
db:4d:18:20:ba:d2:12:83:25:3f:6f:e7:56:99:33:
37:df:bd:27:95:f7:d4:a2:a1:01:ca:63:71:d1:c9:
24:ab:4c:b9:ff:81:40:ad:77:5e:f7:f6:a0:77:00:
81:e2:a1:25:98:b3:b1:be:c9:36:ba:fe:07:7d:ed:
23:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C8:4D:EC:39:7B:80:89:E8:D5:F0:D8:D5:49:22:86:45:14:82:4B
X509v3 Authority Key Identifier:
keyid:20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:96:05:5a:62:79:55:e7:61:b6:a9:29:c0:50:f7:34:d4:2b:
3a:21:bc:20:9b:02:98:ae:f3:d8:e4:7f:33:15:9c:9d:3d:1c:
df:f8:aa:fe:01:b1:83:03:19:86:37:37:05:9e:90:eb:e7:c1:
fd:08:2e:1d:bc:23:34:e1:a4:76:72:b0:59:f9:9b:6e:7e:13:
46:ec:c9:33:aa:30:32:89:bc:7d:86:2d:71:98:05:c6:df:52:
ef:97:9b:a3:6d:05:c9:76:1d:da:31:8b:a0:bf:b6:94:ee:05:
e9:97:25:c5:7a:2d:f6:98:22:24:ed:41:80:e6:7c:f3:bb:ca:
71:db:dd:c1:39:57:1a:1f:64:39:29:da:04:c4:a9:ac:c8:29:
5d:de:b2:09:f2:29:ab:04:fd:3b:2f:5d:b0:88:40:d3:0e:65:
c0:92:90:04:38:aa:bc:4a:ae:c6:e4:a0:2c:54:10:5a:9f:64:
d0:b5:69:3c:18:68:c5:8d:29:60:fa:3f:9f:9b:d4:97:ab:d8:
96:dc:73:e7:8c:f2:d9:24:f4:60:b3:d3:c6:c3:41:23:d1:51:
07:c7:ca:8f:cc:65:a7:87:28:24:0a:b1:3c:dc:15:94:97:d9:
98:f3:82:95:45:75:d4:fe:38:4b:a4:6c:f7:f8:61:56:34:ed:
86:b3:dc:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9i5ingY0RA/oI96sKaHwUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZTIzZGQwNTg0OWNjODEzMjU1YWI4ZDFiODUzZmI5YzQ1
ZDg2OTQwHhcNMjUwODA2MDQwMjM3WhcNMjUwODA3MDQwMjM3WjAzMTEwLwYDVQQD
EyhhNWM4NGRlYzM5N2I4MDg5ZThkNWYwZDhkNTQ5MjI4NjQ1MTQ4MjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJmA7gzIQ+D0eJWZ+GMM9XneGWu7
rZiErqHhnqFMUxVxU7VetOADkSJ77fskMRHVUPWmFiKKC4mHb94yrm9kZakS/VVm
pLlLOzWiF/jw25aQAyqd978ZZhkFoU7alxvx+72lXh/4fqkVBElKjcb7JuqKXWcw
z4M3y4AEwKPBUHawhNruCABGUe0YDwdni70ZNpHf93+mo00YU/OGhIdykvNcyAiy
vIL4RbEYW0ZjVYpzSWWK23TxhgU+X7zJycNd9QbbTRggutISgyU/b+dWmTM3370n
lffUoqEBymNx0ckkq0y5/4FArXde9/agdwCB4qElmLOxvsk2uv4Hfe0jCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXITew5e4CJ6NXw2NVJIoZFFIJLMB8GA1UdIwQY
MBaAFCDiPdBYScyBMlWrjRuFP7nEXYaUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU9JOTBGaEp6SUV5VmF1Tkc0VV91Y1JkaHBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9jMTY3MTctODU1ZC00MzkxLWI3OWYt
Yjg4OGEzMTI0NDU0LzEvSU9JOTBGaEp6SUV5VmF1Tkc0VV91Y1JkaHBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9jMTY3MTctODU1ZC00MzkxLWI3OWYtYjg4OGEzMTI0NDU0
LzEvSU9JOTBGaEp6SUV5VmF1Tkc0VV91Y1JkaHBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5YFWmJ5
VedhtqkpwFD3NNQrOiG8IJsCmK7z2OR/MxWcnT0c3/iq/gGxgwMZhjc3BZ6Q6+fB
/QguHbwjNOGkdnKwWfmbbn4TRuzJM6owMom8fYYtcZgFxt9S75ebo20FyXYd2jGL
oL+2lO4F6ZclxXot9pgiJO1BgOZ887vKcdvdwTlXGh9kOSnaBMSprMgpXd6yCfIp
qwT9Oy9dsIhA0w5lwJKQBDiqvEquxuSgLFQQWp9k0LVpPBhoxY0pYPo/n5vUl6vY
ltxz54zy2ST0YLPTxsNBI9FRB8fKj8xlp4coJAqxPNwVlJfZmPOClUV11P44S6Rs
9/hhVjTthrPcXQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:18:18 2025 by rpki-client