Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
File: IOI90FhJzIEyVauNG4U_ucRdhpQ.mft (raw, json)
Hash identifier: WxlqmSVqvF+k4gPwXG07XFVV+3butNZMEWy23XXbBU8=
Subject key identifier: 90:79:C5:CA:8C:86:C9:78:E1:DE:E7:68:D4:BB:BA:8B:B9:1E:FF:D1
Authority key identifier: 20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94
Certificate issuer: /CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
Certificate serial: 019A5187AB6FD5482BD4DA3F94F8070364E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
Manifest number: 010C
Signing time: Wed 05 Nov 2025 01:00:36 +0000
Manifest this update: Wed 05 Nov 2025 01:00:36 +0000
Manifest next update: Thu 06 Nov 2025 01:00:36 +0000
Files and hashes: 1: 1sean_EV9gz0RRAdSjhoVX8U59c.roa (hash: 7IzX2Oje7AVG7H1WaHSKbKj4BoZgEgCyLYyC1XwAE3w=)
2: IOI90FhJzIEyVauNG4U_ucRdhpQ.crl (hash: rhzOe7+8YGMu+e+DpmzlD8gvqL2pgLygCHIAkWM8lkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:ab:6f:d5:48:2b:d4:da:3f:94:f8:07:03:64:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
Validity
Not Before: Nov 5 01:00:36 2025 GMT
Not After : Nov 6 01:00:36 2025 GMT
Subject: CN=9079c5ca8c86c978e1dee768d4bbba8bb91effd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a2:49:e9:00:57:88:c9:0e:2e:ad:d4:fb:b4:
c1:2a:a2:c2:a4:c1:95:01:74:9a:75:9f:07:14:40:
d2:f8:a1:50:c4:d4:32:7b:8c:ec:cc:ed:ef:e6:3d:
00:67:c5:71:28:1a:f0:9a:84:57:dd:ba:8f:4b:84:
9c:e1:fc:28:2a:46:7a:5a:35:72:16:df:4c:fc:9a:
88:30:dc:e4:f2:0d:47:c3:f7:58:80:7b:19:5f:5b:
d3:3c:18:c9:f1:ce:57:df:c1:0e:75:48:ce:c0:28:
69:b5:76:07:bd:46:3c:1b:50:b1:80:52:eb:6c:13:
8b:e4:db:75:07:33:8a:95:6e:d7:e4:b0:5d:4d:90:
e0:e8:da:94:fb:43:47:bc:46:75:46:75:b0:ec:fe:
e2:26:d5:f3:5f:70:0a:a2:cb:ef:9d:57:f2:e0:1a:
5b:0b:d2:13:7c:79:6f:eb:11:e9:13:3b:cb:59:fa:
61:b6:2a:a5:c2:17:15:91:da:01:78:0a:7d:c0:2b:
df:96:16:31:0c:55:7f:7a:c4:db:e7:70:7e:3c:be:
99:ff:0d:e7:cb:c2:de:bb:ef:ee:14:30:48:5c:0b:
25:e0:d5:e8:69:b9:af:29:8c:25:65:0f:18:30:4b:
a4:38:6e:6b:42:e9:11:6c:2f:0d:99:1c:54:52:07:
b2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:79:C5:CA:8C:86:C9:78:E1:DE:E7:68:D4:BB:BA:8B:B9:1E:FF:D1
X509v3 Authority Key Identifier:
keyid:20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:56:09:6f:e9:05:7e:b8:84:87:51:46:23:c7:d8:06:e4:e4:
4f:74:91:44:f1:fc:6c:35:5d:dc:f4:10:40:a1:a0:03:fd:bb:
62:11:b3:01:7b:a6:3a:bc:fa:07:84:18:a1:a6:ee:57:84:99:
d5:d3:76:f9:ba:77:bb:1e:97:40:66:97:be:f5:52:54:a9:36:
40:ba:cf:f9:c5:00:bb:72:4f:33:e8:98:33:11:db:33:44:2b:
af:82:26:85:52:b9:7b:f7:96:c8:7f:91:3f:ca:f4:56:ed:79:
32:37:0b:9f:29:bc:e1:9a:9d:67:7a:02:b5:82:7d:3a:bf:53:
20:72:f3:f3:69:f5:50:96:8a:7d:32:5d:35:ce:0d:91:f2:c2:
f5:c5:ae:9c:da:d4:fa:4d:39:c8:6c:dd:3c:5e:5b:34:7b:3b:
d7:36:96:f2:9d:de:f8:76:42:e2:e8:8c:b3:b3:82:ab:a6:f0:
8e:c9:12:8a:65:0c:3e:25:d3:12:ad:06:04:87:6f:c7:e0:40:
72:23:5d:e2:25:43:b0:79:ec:93:d0:0e:3f:dd:cf:0f:0c:07:
f3:bc:9d:c8:1f:43:55:6a:a8:6c:a5:db:70:68:7e:08:90:26:
da:cd:99:55:fc:8b:55:f1:ab:84:ab:fb:ea:1a:ce:bb:02:af:
2c:90:05:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:04:51 2025 by rpki-client