Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
File: c90olFaK69Ba1kMtU89w4s14jm4.mft (raw, json)
Hash identifier: SqkRp/cOj/wcx1bdtHiuWuA674QwPynJk4v5j9BD2oI=
Subject key identifier: FD:38:4D:69:2A:77:F7:D7:EB:2A:06:B6:6E:42:DB:0A:62:07:18:FB
Authority key identifier: 73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E
Certificate issuer: /CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
Certificate serial: 019A42B9B09E6A1BD19EEB35B7E60F90D879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
Manifest number: 1707
Signing time: Sun 02 Nov 2025 04:00:56 +0000
Manifest this update: Sun 02 Nov 2025 04:00:56 +0000
Manifest next update: Mon 03 Nov 2025 04:00:56 +0000
Files and hashes: 1: UT_ZqedtuCB3HHv5lCRNjDUnZHE.roa (hash: /rFlwg+a07MXWPZmqC8xSpbpKsUCk+WTtzjGaygl83Y=)
2: c90olFaK69Ba1kMtU89w4s14jm4.crl (hash: P3YlIiDSKeXXbJMBcE8vDWMLgJY4wMDEMAUg1yTXeXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Nov 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:42:b9:b0:9e:6a:1b:d1:9e:eb:35:b7:e6:0f:90:d8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
Validity
Not Before: Nov 2 04:00:56 2025 GMT
Not After : Nov 3 04:00:56 2025 GMT
Subject: CN=fd384d692a77f7d7eb2a06b66e42db0a620718fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:28:42:eb:cb:ac:a0:83:9b:d8:b7:5c:ab:67:
57:ae:76:a6:08:a0:bd:fb:ec:1c:6b:7f:9c:89:d9:
5a:9d:2b:4a:6c:47:eb:bd:50:ef:bf:16:25:45:71:
ae:9e:24:c1:09:41:d2:4d:be:02:d7:b2:5f:32:8f:
dc:1c:47:83:b9:3b:0e:72:0e:53:f8:3a:00:46:79:
5d:9f:77:c9:7a:eb:90:b6:11:c4:fe:cf:a7:22:27:
ad:bf:31:2e:59:99:38:86:86:0d:26:53:52:3d:58:
1c:ab:78:c7:04:63:0c:90:31:3c:14:ef:85:13:34:
84:43:b9:34:53:b2:4e:95:93:47:fd:a5:e9:0d:9a:
60:04:79:d5:6b:fe:a8:76:fe:6d:09:85:45:78:30:
22:83:93:4c:60:e2:3f:93:87:7d:09:2f:90:f2:80:
06:e8:f3:7d:5b:85:5c:3a:d3:27:33:89:42:57:15:
28:f4:40:49:f2:4e:f3:04:32:14:3f:f0:fc:61:6c:
8a:85:17:24:03:4e:a0:c1:c4:1c:c3:ce:91:93:5a:
99:b4:59:50:4d:4d:6a:06:20:05:c0:ba:38:aa:42:
89:8e:75:92:58:b2:ac:ed:dc:f9:64:71:26:2f:7f:
5b:35:a4:92:24:ad:d5:c2:44:3d:19:73:f8:e5:c0:
b0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:38:4D:69:2A:77:F7:D7:EB:2A:06:B6:6E:42:DB:0A:62:07:18:FB
X509v3 Authority Key Identifier:
keyid:73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:46:b2:85:4b:64:42:b6:fd:2c:e1:0f:3d:18:83:2f:3e:4c:
4d:39:57:89:01:32:87:9d:fd:1d:9e:51:16:e4:ec:5d:d9:0f:
bd:41:c7:7c:d3:86:96:d9:5b:e3:d8:4d:1e:03:27:de:88:ce:
77:6f:e3:d2:09:24:73:c4:50:01:e1:f1:d5:0c:2b:55:18:95:
a4:10:fa:9e:d1:d4:42:bf:2b:72:36:c8:db:a7:a9:33:89:78:
0f:b8:3c:2e:84:0e:0d:81:dc:b8:50:9c:fc:75:0f:17:09:e2:
c5:7c:6f:24:56:0b:ab:59:4e:39:a2:43:18:8f:90:60:d8:92:
fc:42:fc:77:dd:8a:e0:62:5a:10:41:b6:f9:bc:58:89:0e:1e:
b8:d4:50:87:27:76:94:18:da:82:84:03:c3:26:50:98:da:c3:
f8:83:2b:7b:a0:2f:f0:f8:73:30:b0:2c:e6:a3:4c:24:af:c5:
a0:ab:5e:4d:24:88:0f:6d:10:4f:4b:2e:91:2b:cd:bc:32:ea:
d1:9f:d7:97:23:5d:a3:7b:21:c9:1f:8c:ed:96:05:ce:7a:3b:
a7:f8:fb:56:29:f1:f5:62:df:de:c5:90:37:82:c6:c4:97:80:
fa:43:09:7d:1d:e8:f7:94:1c:3e:42:84:13:d3:f6:83:22:3e:
11:56:34:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 13:15:38 2025 by rpki-client