Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
File: 90IFIPikG7BNbRsPQBQOVT-K828.mft (raw, json)
Hash identifier: PDK0Ci8eds3iD1YDQkODTcmVzw4zUy+NyYvjXeL16Zc=
Subject key identifier: 13:1C:2E:5E:95:39:00:6F:97:99:A1:52:DA:F6:FA:9A:FB:97:70:5D
Authority key identifier: F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
Certificate issuer: /CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Certificate serial: 0198D6CDEA4DB9C8ACD853596F8EC68E3C69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
Manifest number: 138A
Signing time: Sat 23 Aug 2025 12:01:15 +0000
Manifest this update: Sat 23 Aug 2025 12:01:15 +0000
Manifest next update: Sun 24 Aug 2025 12:01:15 +0000
Files and hashes: 1: 90IFIPikG7BNbRsPQBQOVT-K828.crl (hash: YhnvNZgBN1mlCXG5aKvvpm0K+ECPAmBTvnT9pdGoy+8=)
2: LFGeCWEJqK41lBLfNDSrvcd-R7M.roa (hash: D3t7Jj+dB85c4h6RAmcwzdWk3BwbQNg/lUXAv4WmqH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:ea:4d:b9:c8:ac:d8:53:59:6f:8e:c6:8e:3c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Validity
Not Before: Aug 23 12:01:15 2025 GMT
Not After : Aug 24 12:01:15 2025 GMT
Subject: CN=131c2e5e9539006f9799a152daf6fa9afb97705d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:aa:5c:c5:e2:d0:c2:cd:89:32:65:38:54:ab:
44:c3:d1:dd:d2:df:29:75:bc:43:65:db:f9:a3:78:
2e:3c:cc:f0:ba:ac:cf:f4:20:01:60:c4:c1:13:e3:
da:19:99:f2:80:13:2c:f1:09:a8:ce:00:a4:4a:a7:
8d:63:63:c6:ad:0d:64:6b:00:d7:09:64:fa:b9:f9:
22:8b:f1:26:0b:0b:19:59:41:f4:5a:a4:29:f9:ac:
b3:5b:7e:7a:58:3f:de:80:57:3e:ff:c6:1e:d1:29:
06:74:18:e9:e1:de:09:2d:5b:9d:76:8b:f3:c1:ac:
51:fb:f0:92:e6:5d:fb:db:0b:df:77:85:ef:a1:8d:
55:85:a3:71:38:27:1c:ac:be:04:a1:60:db:d3:dc:
89:17:47:42:c2:ef:af:6a:d8:a3:b3:4f:11:34:09:
cf:4e:10:21:3b:28:c0:27:d1:da:56:25:47:95:08:
75:26:76:23:a8:14:10:22:b3:bd:d1:db:e7:21:49:
3a:56:ad:8e:93:99:12:4e:16:ce:e0:95:9d:0e:f9:
6e:db:05:bc:00:74:76:6a:22:85:2f:ac:d4:8f:1c:
e3:3b:15:b3:ad:78:98:7c:76:d0:d2:94:53:b3:85:
28:37:f4:6d:b6:30:d6:f3:f6:4c:df:74:a0:c0:e2:
3f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1C:2E:5E:95:39:00:6F:97:99:A1:52:DA:F6:FA:9A:FB:97:70:5D
X509v3 Authority Key Identifier:
keyid:F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e4:84:5e:94:3a:e2:c7:31:cb:28:63:da:eb:b3:01:72:af:
69:34:02:37:41:69:32:0a:62:9a:8f:0a:7b:0b:c9:23:bb:3f:
d2:3a:b5:a6:fe:fe:af:e5:71:2a:ca:a8:bd:9d:a9:6c:8f:58:
16:7c:8f:d3:7f:f1:84:79:16:9c:5b:6c:a2:1d:56:7b:63:a5:
44:71:2d:61:1f:63:ef:aa:81:97:0f:b7:32:12:e6:73:83:60:
80:68:e6:ac:91:84:c8:b4:22:73:b2:61:36:d0:47:75:12:53:
30:b6:41:40:ec:06:13:40:f5:26:01:34:20:c2:75:8e:b5:6e:
49:68:b3:08:71:34:37:d3:7b:2e:99:b0:68:17:81:7b:fa:4e:
e5:0c:b7:d7:06:16:64:b3:ef:bd:12:bc:1b:31:ee:92:ae:d4:
d2:76:61:de:af:ec:3d:55:d0:90:98:97:be:d0:1e:9b:39:67:
84:c4:09:68:46:75:18:20:46:65:8a:fc:33:e0:42:26:4a:a5:
dd:6f:0c:be:48:04:0f:1e:3f:87:be:f0:e6:40:bc:91:ef:05:
fa:b3:ad:f5:1c:81:6f:fb:4d:4e:3e:ff:47:59:e2:c5:ca:86:
99:e1:94:0d:f5:bd:a8:7e:6e:97:d3:72:b2:55:fb:51:30:36:
18:f2:3c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:45:26 2025 by rpki-client