Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
File: 90IFIPikG7BNbRsPQBQOVT-K828.mft (raw, json)
Hash identifier: OfLqNgdAJSjUH+SGmiTsc4vPo8oJV1KyyNNdlrS4EiA=
Subject key identifier: AE:3F:94:71:41:8C:53:EC:75:6F:57:3D:5E:EC:74:08:C6:1B:26:87
Authority key identifier: F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
Certificate issuer: /CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Certificate serial: 0197B70F051E5CC4FBCD71AABB2F8A8EB051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
Manifest number: 12F5
Signing time: Sat 28 Jun 2025 15:01:44 +0000
Manifest this update: Sat 28 Jun 2025 15:01:44 +0000
Manifest next update: Sun 29 Jun 2025 15:01:44 +0000
Files and hashes: 1: 90IFIPikG7BNbRsPQBQOVT-K828.crl (hash: dpfAC2KGSuzzdRTXyQhA4yINN7LSUZGNkphHdT9bJCc=)
2: LFGeCWEJqK41lBLfNDSrvcd-R7M.roa (hash: D3t7Jj+dB85c4h6RAmcwzdWk3BwbQNg/lUXAv4WmqH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:05:1e:5c:c4:fb:cd:71:aa:bb:2f:8a:8e:b0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Validity
Not Before: Jun 28 15:01:44 2025 GMT
Not After : Jun 29 15:01:44 2025 GMT
Subject: CN=ae3f9471418c53ec756f573d5eec7408c61b2687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e6:59:53:18:f7:f1:74:a5:81:6e:7c:c0:78:
39:fe:3b:d8:8a:3a:5d:05:8b:a0:e1:c3:89:b5:15:
1d:a9:ef:5b:87:9e:42:9a:55:0c:8d:8d:78:26:f5:
14:9b:36:9a:82:32:66:c7:33:ea:77:22:78:d8:6b:
fc:f5:59:a4:4f:09:f5:64:99:31:25:9e:b1:bb:45:
a4:ad:78:4b:5f:90:9a:0a:be:27:64:c8:ce:61:13:
20:87:2e:03:8a:a0:b9:5a:ba:eb:66:78:59:e8:02:
75:91:90:83:b3:81:f4:0c:f9:83:4f:ed:3b:a3:8c:
d8:a5:19:38:77:63:06:3b:0a:10:ed:a1:9e:fb:37:
a7:f0:77:6a:d3:e0:81:84:2f:79:33:55:25:c0:9b:
60:d0:56:81:18:17:3f:f0:c7:cf:37:56:ee:c4:4b:
1a:b4:d5:12:91:84:9d:4a:25:e0:6f:19:b9:f0:81:
7f:c7:a7:a0:b3:6d:ac:61:97:32:37:97:b8:b1:5c:
f3:50:5b:3d:cb:91:3e:c5:96:75:9a:cb:a4:3b:e3:
5a:b2:f0:cb:0a:ed:4f:ce:3d:8e:9a:9d:b3:ef:f9:
ea:5f:ea:62:c5:27:c4:12:8a:86:2c:50:e4:19:87:
16:12:53:2f:bb:81:12:91:5d:32:4f:5b:4c:ab:21:
e3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3F:94:71:41:8C:53:EC:75:6F:57:3D:5E:EC:74:08:C6:1B:26:87
X509v3 Authority Key Identifier:
keyid:F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ad:b1:4a:3a:1e:d2:7f:ce:b0:ec:c1:5c:58:ea:1b:a0:70:
71:f7:f6:07:25:2c:b3:9f:cb:13:5d:f8:17:1e:b6:1b:4d:85:
41:eb:2a:68:02:71:2a:e6:82:a4:02:38:6b:1d:44:4b:12:a8:
4c:9b:c1:d7:7b:8f:9c:89:fa:60:cb:0a:68:f2:d2:95:ff:4c:
9f:02:a7:cb:0b:d0:8c:ba:cf:eb:fc:bc:8c:da:0a:dc:23:1e:
49:f9:a8:90:30:cf:84:0d:a4:65:8a:04:4f:a6:ce:d6:5c:f5:
2e:ff:06:61:a3:fa:57:a4:ef:a9:7a:66:9b:40:cd:50:54:20:
3e:ea:c2:46:2c:1d:f4:41:bb:c1:a4:1c:59:a5:c6:d9:02:43:
dc:32:b0:e5:3d:9d:6b:e7:10:5f:7e:0a:2d:4b:0c:f5:bf:30:
bb:bf:40:45:b3:a4:e3:52:d1:94:5e:0d:06:72:9a:1d:02:bb:
0a:6f:07:a1:31:89:c6:2f:2c:e4:4a:9f:f6:09:2b:ae:57:d0:
16:c4:00:c0:b6:78:02:c3:9f:fc:87:8a:81:44:2e:6f:de:2b:
7a:b6:5d:c0:66:16:ee:31:96:b2:ce:03:e4:95:3d:b0:9d:78:
f9:a1:a1:97:3e:a6:77:ea:f6:ec:86:d2:74:91:1c:39:19:a9:
7c:f5:3b:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DwUeXMT7zXGquy+KjrBRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NDIwNTIwZjhhNDFiYjA0ZDZkMWIwZjQwMTQwZTU1M2Y4
YWYzNmYwHhcNMjUwNjI4MTUwMTQ0WhcNMjUwNjI5MTUwMTQ0WjAzMTEwLwYDVQQD
EyhhZTNmOTQ3MTQxOGM1M2VjNzU2ZjU3M2Q1ZWVjNzQwOGM2MWIyNjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuZZUxj38XSlgW58wHg5/jvYijpd
BYug4cOJtRUdqe9bh55CmlUMjY14JvUUmzaagjJmxzPqdyJ42Gv89VmkTwn1ZJkx
JZ6xu0WkrXhLX5CaCr4nZMjOYRMghy4DiqC5WrrrZnhZ6AJ1kZCDs4H0DPmDT+07
o4zYpRk4d2MGOwoQ7aGe+zen8Hdq0+CBhC95M1UlwJtg0FaBGBc/8MfPN1buxEsa
tNUSkYSdSiXgbxm58IF/x6egs22sYZcyN5e4sVzzUFs9y5E+xZZ1msukO+NasvDL
Cu1Pzj2Omp2z7/nqX+pixSfEEoqGLFDkGYcWElMvu4ESkV0yT1tMqyHjaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4/lHFBjFPsdW9XPV7sdAjGGyaHMB8GA1UdIwQY
MBaAFPdCBSD4pBuwTW0bD0AUDlU/ivNvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTBJRklQaWtHN0JOYlJzUFFCUU9WVC1LODI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yYWI5YzgtMDQ0Ni00MTA1LThiZmYt
MDhiZTNlZTZkOGFhLzEvOTBJRklQaWtHN0JOYlJzUFFCUU9WVC1LODI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yYWI5YzgtMDQ0Ni00MTA1LThiZmYtMDhiZTNlZTZkOGFh
LzEvOTBJRklQaWtHN0JOYlJzUFFCUU9WVC1LODI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApq2xSjoe
0n/OsOzBXFjqG6Bwcff2ByUss5/LE134Fx62G02FQesqaAJxKuaCpAI4ax1ESxKo
TJvB13uPnIn6YMsKaPLSlf9MnwKnywvQjLrP6/y8jNoK3CMeSfmokDDPhA2kZYoE
T6bO1lz1Lv8GYaP6V6TvqXpmm0DNUFQgPurCRiwd9EG7waQcWaXG2QJD3DKw5T2d
a+cQX34KLUsM9b8wu79ARbOk41LRlF4NBnKaHQK7Cm8HoTGJxi8s5Eqf9gkrrlfQ
FsQAwLZ4AsOf/IeKgUQub94rerZdwGYW7jGWss4D5JU9sJ14+aGhlz6md+r27IbS
dJEcORmpfPU7Eg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:40:25 2025 by rpki-client