Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
File: 90IFIPikG7BNbRsPQBQOVT-K828.mft (raw, json)
Hash identifier: EWYIKGa1hDDUzFgOW7Q/pvkiJftI9XFigLmtnj9h7iQ=
Subject key identifier: 0A:3C:81:70:BB:B2:F5:03:B6:03:6D:CF:B7:87:7E:49:74:A3:75:70
Authority key identifier: F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
Certificate issuer: /CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Certificate serial: 019A7225FAF29A51B44E62B539A23523E3A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
Manifest number: 145F
Signing time: Tue 11 Nov 2025 09:01:22 +0000
Manifest this update: Tue 11 Nov 2025 09:01:22 +0000
Manifest next update: Wed 12 Nov 2025 09:01:22 +0000
Files and hashes: 1: 90IFIPikG7BNbRsPQBQOVT-K828.crl (hash: nIE6xK100kESrSnOJZk0oJJXRJl5iVpHlEKb2DXIrjo=)
2: LFGeCWEJqK41lBLfNDSrvcd-R7M.roa (hash: D3t7Jj+dB85c4h6RAmcwzdWk3BwbQNg/lUXAv4WmqH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:fa:f2:9a:51:b4:4e:62:b5:39:a2:35:23:e3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Validity
Not Before: Nov 11 09:01:22 2025 GMT
Not After : Nov 12 09:01:22 2025 GMT
Subject: CN=0a3c8170bbb2f503b6036dcfb7877e4974a37570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c5:71:44:74:0f:b3:75:29:8a:93:44:85:c4:
b3:f0:36:64:73:b0:ba:d3:c7:3a:e2:b3:c5:56:2a:
76:a8:99:31:9f:d4:f0:71:c0:48:e5:69:bf:41:7e:
b9:26:5d:d4:f5:09:f9:d4:3b:22:73:f9:d2:25:5c:
a9:10:6c:54:f8:bd:2b:00:32:8c:66:ea:a9:ae:9b:
60:a6:bf:d6:ff:cf:65:5b:28:6e:50:0b:cc:97:3a:
19:be:6d:6a:2c:5d:2c:ca:91:f9:07:84:f1:fd:ae:
60:8b:5f:e2:d8:51:10:1c:c0:2e:76:93:a7:64:07:
62:40:8d:08:85:7c:13:43:7a:15:97:72:3d:e5:aa:
41:3d:09:b1:2d:fa:f2:94:99:2b:37:ad:cc:61:5c:
c7:33:f5:18:77:fc:27:14:07:6d:fb:4f:cb:02:00:
4f:71:e2:39:16:ed:70:64:e8:4a:89:13:51:3c:1a:
2a:16:fc:59:1e:04:82:5d:cb:85:e9:fe:7e:bd:db:
85:99:cd:f5:eb:f0:42:a4:62:ba:3b:ff:49:1a:17:
cb:19:8d:ee:a1:8f:6a:8b:77:98:1b:5f:61:b3:76:
c6:12:d0:d0:8c:89:46:f1:18:e9:be:f9:b7:7a:5d:
63:39:e5:9c:57:93:c0:b8:15:8d:40:59:04:ff:aa:
f4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3C:81:70:BB:B2:F5:03:B6:03:6D:CF:B7:87:7E:49:74:A3:75:70
X509v3 Authority Key Identifier:
keyid:F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:07:be:7d:5a:96:df:43:6e:99:f6:ad:9a:d9:bd:61:51:3b:
16:93:82:bf:d3:e4:e6:e6:57:43:aa:97:59:4a:02:51:38:61:
0b:ee:77:f3:8b:ba:42:cb:34:0b:6f:c3:6a:30:68:ee:fc:a9:
bf:4a:49:4f:a3:68:25:1a:f1:d5:4b:d0:0e:e7:d4:a7:f2:13:
df:41:32:50:53:8a:3e:ee:18:ed:a3:9b:0a:fd:8f:eb:a9:b7:
d0:01:39:b8:b1:d6:20:dc:61:ae:84:d3:7c:c0:25:a5:7a:d3:
4e:c0:19:52:9c:34:e0:d7:a1:a2:e5:fe:6f:94:93:a8:82:47:
e4:07:2d:5d:e3:cd:e8:e3:1c:f3:96:a9:b7:bd:93:d3:4f:84:
d3:e0:7c:b6:7f:da:01:b5:c1:0e:e0:78:6e:8f:85:53:8e:66:
93:9c:16:50:89:ed:c8:68:e8:e0:9d:80:8a:7b:7b:58:c6:bb:
5d:69:2a:d1:b3:26:56:8b:60:2b:66:74:d1:8e:6a:f5:55:f4:
2f:96:01:98:36:4f:ba:33:8f:81:07:34:c2:90:fb:f9:6e:8a:
1a:da:20:2d:62:f9:8d:76:29:24:9f:6b:a5:94:70:c5:7c:9f:
cc:5c:8e:cd:27:8d:0b:fe:3e:1f:fa:4e:ce:1f:5f:e6:ac:8b:
88:6a:49:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:20 2025 by rpki-client