Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
File: 90IFIPikG7BNbRsPQBQOVT-K828.mft (raw, json)
Hash identifier: +XJEMunb3/4VvzArZCR7jVkCDLYoQp9gYuXdQBF6emo=
Subject key identifier: 17:8C:5D:83:26:7E:B0:8B:DA:AA:EA:84:78:7B:81:AF:C8:1E:EE:B3
Authority key identifier: F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
Certificate issuer: /CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Certificate serial: 0199240D6951F6611BF39B15B443356F9007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
Manifest number: 13B2
Signing time: Sun 07 Sep 2025 12:01:22 +0000
Manifest this update: Sun 07 Sep 2025 12:01:22 +0000
Manifest next update: Mon 08 Sep 2025 12:01:22 +0000
Files and hashes: 1: 90IFIPikG7BNbRsPQBQOVT-K828.crl (hash: M6My0Z2+cmGDl3Obt26jNLwcb2Yhlh4Ssj+hLOLdUjw=)
2: LFGeCWEJqK41lBLfNDSrvcd-R7M.roa (hash: D3t7Jj+dB85c4h6RAmcwzdWk3BwbQNg/lUXAv4WmqH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:69:51:f6:61:1b:f3:9b:15:b4:43:35:6f:90:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Validity
Not Before: Sep 7 12:01:22 2025 GMT
Not After : Sep 8 12:01:22 2025 GMT
Subject: CN=178c5d83267eb08bdaaaea84787b81afc81eeeb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:0d:57:f0:cd:1d:97:67:92:92:58:68:cd:
09:d0:2a:0b:0d:48:ab:99:94:71:2c:fa:3a:f9:68:
ca:f0:7c:f3:16:48:73:fa:50:a7:1f:9e:09:27:51:
69:7f:88:5d:eb:f7:60:63:a9:fc:61:bd:b8:58:09:
29:2d:e0:89:b4:f1:2d:65:3e:42:d5:81:ea:73:a5:
4a:60:79:98:e9:ea:c0:6b:f0:77:c8:5c:d7:1d:67:
bc:e2:4b:2d:75:36:46:bf:05:ba:50:bf:e0:e1:06:
b7:59:e9:0c:f1:a0:63:8d:c3:a2:87:f1:1e:8f:c7:
a7:b9:8b:66:36:f5:c3:21:36:b9:eb:bb:65:a9:bf:
c9:b6:c0:26:41:da:75:c1:88:cb:95:2c:33:50:0c:
22:d8:0d:01:1f:1b:52:7a:48:bd:8f:8c:52:ab:77:
49:07:cb:78:a6:b5:fa:01:f3:73:52:eb:42:b7:f0:
43:a2:20:b8:d0:4d:28:c5:88:e9:80:79:06:a8:ff:
a5:e1:38:93:59:70:e3:ae:b5:1a:22:c8:60:29:a1:
6d:ba:fb:10:cc:80:91:f6:02:45:61:be:95:e6:ad:
61:b8:56:57:37:a9:54:60:68:43:31:f6:ac:fa:3b:
fb:b3:ef:d6:65:05:d3:dc:69:ba:10:a1:d3:b5:14:
0e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8C:5D:83:26:7E:B0:8B:DA:AA:EA:84:78:7B:81:AF:C8:1E:EE:B3
X509v3 Authority Key Identifier:
keyid:F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c8:8f:22:94:92:91:32:3b:a6:bf:d1:65:82:b2:d6:1f:2f:
ff:17:e8:b3:6c:60:f3:b0:dd:62:14:85:02:b6:ab:c8:45:a0:
37:ca:ef:0c:03:3a:b0:bb:fc:22:4b:d4:b3:f1:57:ba:39:7f:
58:c4:6f:94:c4:a2:b9:d4:b1:0f:4e:0e:47:e1:77:76:f5:8a:
c3:bb:e7:08:9e:66:a2:95:0a:98:83:f9:26:af:ba:d6:35:f4:
09:23:84:a4:ff:0e:73:60:e0:93:d7:f4:d7:ed:2e:28:16:e8:
2d:5b:b5:71:0d:50:58:77:04:18:da:05:13:18:3d:41:5e:6a:
31:61:72:e6:ae:45:96:57:7e:37:76:da:ec:af:cd:33:84:4a:
a5:64:00:76:6b:9e:7e:34:35:9a:20:0c:51:90:07:e6:90:b6:
73:ee:bb:a2:6c:78:6c:d8:d8:62:8c:6c:e8:b0:99:2d:64:75:
dd:07:75:cc:f5:d0:25:55:66:2c:13:af:25:e7:a3:a9:23:0b:
bd:78:9e:fd:af:26:5d:1d:98:42:88:42:f7:d4:84:cf:ee:f3:
b5:17:f9:dd:21:bf:9f:45:6a:82:27:4f:dd:9a:02:d1:7a:a5:
ef:01:4f:c1:36:e4:67:52:de:36:ff:77:65:40:95:b1:71:40:
e2:0c:60:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:37 2025 by rpki-client