Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
File: kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft (raw, json)
Hash identifier: Psjw9eCpW/G8kuty5wSZ363a9U6++TF4xYqR+nLVjE8=
Subject key identifier: F4:77:D3:E4:90:7A:D0:69:5F:FB:8F:4B:2E:34:89:A9:5A:93:5E:5E
Authority key identifier: 90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3
Certificate issuer: /CN=90f76537ff745893e3142fa0984f449b725b8fd3
Certificate serial: 0198564531726B7D7DF2A1E4CE9A88402838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
Manifest number: 1609
Signing time: Tue 29 Jul 2025 13:00:31 +0000
Manifest this update: Tue 29 Jul 2025 13:00:31 +0000
Manifest next update: Wed 30 Jul 2025 13:00:31 +0000
Files and hashes: 1: 4h8beUu4miiEn1n13esJcxX7gpc.roa (hash: 33+qj2eaRd7O8N5EQLS3e9QL955CTXDuq4VOYW0my7E=)
2: kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl (hash: 9IKewESBgnH93KTR4FC3xwOuYh73YTMBCNhYtboX0W0=)
3: zcJuMPKqinNoidJ9rHaaDdmdVvA.roa (hash: 9UsWhn4/INB/JJvJuTs6CMag+GLrqc1ZuXSO78kkqu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:45:31:72:6b:7d:7d:f2:a1:e4:ce:9a:88:40:28:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f76537ff745893e3142fa0984f449b725b8fd3
Validity
Not Before: Jul 29 13:00:31 2025 GMT
Not After : Jul 30 13:00:31 2025 GMT
Subject: CN=f477d3e4907ad0695ffb8f4b2e3489a95a935e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6e:ca:7d:83:3c:34:5a:46:7b:a4:48:69:8c:
c8:c1:b0:7a:2a:b3:9c:e1:95:c1:43:46:34:b0:1c:
55:9e:d9:26:aa:97:d0:b9:eb:33:5a:d2:39:f1:05:
f6:72:00:c1:6b:2c:aa:20:0c:1d:26:ab:b2:ee:41:
a5:a2:24:99:84:95:88:04:5a:db:ee:48:82:5c:9e:
4f:60:2f:99:3c:13:00:8a:be:69:3b:79:b4:4d:6a:
7e:26:91:89:2d:9d:89:50:f1:b2:d7:cc:00:f4:5b:
50:d4:6d:2b:c6:b8:5b:78:03:ce:1f:a7:bf:47:f8:
ac:a0:9a:6c:2d:6f:4d:6f:6b:93:dc:87:e3:d1:d7:
73:d6:f2:f2:da:c7:2c:b5:af:25:e9:54:fc:58:96:
41:a9:74:16:43:f4:c8:12:71:ee:30:c3:0e:d5:16:
b9:58:95:69:38:e7:3c:4b:5c:0d:48:38:0c:e3:8a:
a3:15:25:fa:90:29:3a:78:70:5d:61:8a:e0:22:d5:
f9:e4:7d:d9:d3:91:89:88:f7:12:79:a5:51:0b:cd:
b3:ec:82:8f:3c:42:41:ff:26:e6:cc:a3:94:63:8b:
20:00:5e:d4:6e:8f:ee:7f:26:bc:e9:ba:c8:33:0a:
a3:46:e5:9e:e1:f1:f8:56:b8:e1:fc:c7:3c:22:20:
03:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:77:D3:E4:90:7A:D0:69:5F:FB:8F:4B:2E:34:89:A9:5A:93:5E:5E
X509v3 Authority Key Identifier:
keyid:90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3e:84:cc:c3:78:16:fa:d2:fe:bc:7c:27:6d:60:85:98:ad:
8e:c9:02:e0:77:3d:c0:e4:9b:82:5b:52:b9:b2:b4:4f:04:93:
c0:1e:79:0d:02:11:23:e2:1a:4d:89:00:f2:10:24:29:f2:95:
dd:18:b4:48:a6:3b:e1:97:4e:fb:d9:49:87:34:a0:41:6e:5d:
df:82:7f:48:fc:1f:a1:96:4f:40:11:61:2d:a0:7c:e9:6d:f7:
da:8a:59:9f:02:92:52:5d:5c:60:9c:a2:b4:6b:cd:f1:f6:0f:
c7:5c:be:b7:09:66:33:56:4a:da:9b:ac:bd:47:37:15:4d:8d:
ba:5f:98:df:8b:d6:81:f9:c4:cc:04:51:63:bc:e0:8a:29:b4:
de:9e:fe:f9:28:0e:90:bf:23:d1:98:80:be:84:77:25:ea:22:
6d:13:78:d6:4a:12:66:f1:8d:d4:18:fc:5f:d2:3b:1f:1b:d7:
a1:8c:f3:4b:89:3a:63:11:de:57:e5:f4:d0:02:69:c7:e8:84:
24:4f:05:3d:84:1c:36:1f:9c:11:16:6e:48:37:f5:ec:36:9e:
78:6f:f1:4d:6f:ec:0f:92:11:fc:9f:47:f6:80:37:28:af:ce:
ca:b3:be:24:a8:a2:32:a7:80:e4:bc:57:9f:40:cc:44:c3:51:
2a:a5:c7:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhWRTFya3198qHkzpqIQCg4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZjc2NTM3ZmY3NDU4OTNlMzE0MmZhMDk4NGY0NDliNzI1
YjhmZDMwHhcNMjUwNzI5MTMwMDMxWhcNMjUwNzMwMTMwMDMxWjAzMTEwLwYDVQQD
EyhmNDc3ZDNlNDkwN2FkMDY5NWZmYjhmNGIyZTM0ODlhOTVhOTM1ZTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiW7KfYM8NFpGe6RIaYzIwbB6KrOc
4ZXBQ0Y0sBxVntkmqpfQueszWtI58QX2cgDBayyqIAwdJquy7kGloiSZhJWIBFrb
7kiCXJ5PYC+ZPBMAir5pO3m0TWp+JpGJLZ2JUPGy18wA9FtQ1G0rxrhbeAPOH6e/
R/isoJpsLW9Nb2uT3Ifj0ddz1vLy2scsta8l6VT8WJZBqXQWQ/TIEnHuMMMO1Ra5
WJVpOOc8S1wNSDgM44qjFSX6kCk6eHBdYYrgItX55H3Z05GJiPcSeaVRC82z7IKP
PEJB/ybmzKOUY4sgAF7Ubo/ufya86brIMwqjRuWe4fH4Vrjh/Mc8IiAD4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPR30+SQetBpX/uPSy40ialak15eMB8GA1UdIwQY
MBaAFJD3ZTf/dFiT4xQvoJhPRJtyW4/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1BkbE5fOTBXSlBqRkMtZ21FOUVtM0piajlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80Zjc2ODAtODFhYi00YzFmLWEwN2It
N2M2MmQ1YzMxNWJmLzEva1BkbE5fOTBXSlBqRkMtZ21FOUVtM0piajlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi80Zjc2ODAtODFhYi00YzFmLWEwN2ItN2M2MmQ1YzMxNWJm
LzEva1BkbE5fOTBXSlBqRkMtZ21FOUVtM0piajlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAST6EzMN4
FvrS/rx8J21ghZitjskC4Hc9wOSbgltSubK0TwSTwB55DQIRI+IaTYkA8hAkKfKV
3Ri0SKY74ZdO+9lJhzSgQW5d34J/SPwfoZZPQBFhLaB86W332opZnwKSUl1cYJyi
tGvN8fYPx1y+twlmM1ZK2pusvUc3FU2Nul+Y34vWgfnEzARRY7zgiim03p7++SgO
kL8j0ZiAvoR3JeoibRN41koSZvGN1Bj8X9I7HxvXoYzzS4k6YxHeV+X00AJpx+iE
JE8FPYQcNh+cERZuSDf17DaeeG/xTW/sD5IR/J9H9oA3KK/OyrO+JKiiMqeA5LxX
n0DMRMNRKqXHrg==
-----END CERTIFICATE-----
Generated at Tue Jul 29 16:19:13 2025 by rpki-client