
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
File: 90IFIPikG7BNbRsPQBQOVT-K828.mft (raw, json)
Hash identifier: 7t0h9iFQS2QQfJoKiy8DDhRNLyDW/qOTVRf6cuw4KSg=
Subject key identifier: 5F:83:75:7A:D7:E6:7D:EA:CA:07:36:28:31:67:2C:9D:22:93:F7:F5
Authority key identifier: F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
Certificate issuer: /CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Certificate serial: 0199FC58814EEDC5319265771B73CBE32083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
Manifest number: 1422
Signing time: Sun 19 Oct 2025 12:01:22 +0000
Manifest this update: Sun 19 Oct 2025 12:01:22 +0000
Manifest next update: Mon 20 Oct 2025 12:01:22 +0000
Files and hashes: 1: 90IFIPikG7BNbRsPQBQOVT-K828.crl (hash: woFlREaGMyJp5zgsioLp9dWTfEVK8psxk32rt0iJ1fw=)
2: LFGeCWEJqK41lBLfNDSrvcd-R7M.roa (hash: D3t7Jj+dB85c4h6RAmcwzdWk3BwbQNg/lUXAv4WmqH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:81:4e:ed:c5:31:92:65:77:1b:73:cb:e3:20:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Validity
Not Before: Oct 19 12:01:22 2025 GMT
Not After : Oct 20 12:01:22 2025 GMT
Subject: CN=5f83757ad7e67deaca07362831672c9d2293f7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:2f:b5:c6:3f:aa:f7:8b:5a:98:bf:84:16:9b:
4c:f5:ad:c4:51:7b:39:36:c1:5a:f8:97:bf:60:ff:
96:80:5e:c9:03:2c:8b:f7:e9:b5:0f:98:61:87:29:
e1:c3:86:36:4e:f3:82:c4:14:89:1e:27:38:00:ad:
cf:74:14:43:38:65:5c:b6:76:74:e4:ff:36:76:ed:
2a:ed:85:bd:f6:ae:c2:79:70:61:2b:28:51:41:70:
63:12:f3:4d:a0:36:d7:e2:ee:60:bc:f7:8c:85:9f:
86:7c:56:ad:b9:46:24:13:6f:1c:82:86:2d:ed:9c:
d0:6a:38:e3:5a:0b:c1:31:aa:61:81:26:ea:b0:05:
89:70:e8:ac:1a:e1:a5:9b:0f:75:e0:b3:03:1b:ae:
a1:40:53:6a:1b:fa:03:43:79:fe:a9:7a:5c:18:1f:
a4:63:b1:fe:22:4a:39:1a:6b:46:4d:56:71:c1:f4:
08:66:7c:49:44:58:c5:5d:77:3a:48:09:86:9f:b4:
71:4f:f9:35:2e:3a:f6:28:01:c4:37:4f:ed:a1:22:
db:94:1f:74:7a:bc:33:fc:f7:89:12:d9:3b:81:fa:
80:59:b9:ca:f5:2a:2e:79:af:5a:62:8a:61:8a:c4:
ee:1d:49:a4:66:09:26:88:24:9c:71:b0:e1:ec:e0:
33:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:83:75:7A:D7:E6:7D:EA:CA:07:36:28:31:67:2C:9D:22:93:F7:F5
X509v3 Authority Key Identifier:
keyid:F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:88:33:d5:d8:9d:5c:fe:21:d7:04:fb:c4:ad:c2:da:ab:a6:
ba:fb:18:04:ad:71:0d:05:5d:81:39:27:a2:05:4c:4f:23:87:
a1:a5:28:42:0f:5b:88:18:73:50:32:7a:fa:a0:2a:d2:3e:3b:
7d:7f:0e:cd:20:29:e3:cc:80:79:b2:ea:4c:b2:b7:2b:39:2a:
33:62:32:c4:7a:61:b5:1c:56:3e:72:43:38:01:50:6c:f3:38:
5f:9f:62:97:30:90:dd:97:75:2f:3f:1c:6d:89:f9:b7:f6:7f:
7e:0c:bc:49:12:19:4b:fc:02:87:2e:74:66:57:c2:ac:07:2c:
04:3d:4e:0b:01:ac:f3:5e:74:f5:fc:d7:d7:02:74:48:5e:50:
2a:2d:3c:26:73:db:3a:ca:a0:97:b3:0d:6b:ed:e0:ea:17:bf:
94:e5:da:14:e0:df:ea:cd:46:a5:f7:17:ee:8d:d5:08:82:88:
c6:ea:ca:4c:f9:d0:e9:bf:b6:50:d5:71:8c:ff:b7:31:83:eb:
39:7d:02:ec:63:37:05:dd:04:42:a9:ce:b7:4a:c2:3d:d3:fe:
e1:f1:ba:53:38:01:94:49:af:b2:0a:8c:1a:36:47:aa:3e:f8:
92:0c:d8:dc:3e:61:e3:e7:c3:f8:71:60:23:3d:45:16:f9:4d:
bf:e0:19:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:53 2025 by rpki-client