Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
File: 90REoIZ_zKmjVpwf0JITNUajf0s.mft (raw, json)
Hash identifier: W/64cGeOjh8nvMQH5HRYA4XIVS7fXtiWLMOeaHhFgdA=
Subject key identifier: 01:60:05:8B:4A:EF:7D:8F:C7:26:A2:33:95:7A:AF:7F:46:FE:48:E7
Authority key identifier: F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B
Certificate issuer: /CN=f74444a0867fcca9a3569c1fd092133546a37f4b
Certificate serial: 0199FFFE49E57D6C0D139227A74FAA89A811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
Manifest number: 1674
Signing time: Mon 20 Oct 2025 05:01:19 +0000
Manifest this update: Mon 20 Oct 2025 05:01:19 +0000
Manifest next update: Tue 21 Oct 2025 05:01:19 +0000
Files and hashes: 1: 90REoIZ_zKmjVpwf0JITNUajf0s.crl (hash: 7yHa+hXq47K5eXEufFQk/2Wb04UOUUglvWGR6o6GJKo=)
2: b9lO4JuPU_XGDEIOyFIyTFoywlI.roa (hash: sqBT/bZlTljLi10b8NxaSvoAN6hXGjYEttvRj2Pm9N4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:49:e5:7d:6c:0d:13:92:27:a7:4f:aa:89:a8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f74444a0867fcca9a3569c1fd092133546a37f4b
Validity
Not Before: Oct 20 05:01:19 2025 GMT
Not After : Oct 21 05:01:19 2025 GMT
Subject: CN=0160058b4aef7d8fc726a233957aaf7f46fe48e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:28:40:91:b6:b2:92:c9:9d:ac:6a:5d:40:38:
e3:ab:10:11:06:a8:cd:c9:14:7f:50:54:1a:5c:2d:
2f:a2:98:82:6d:cc:42:56:00:5f:8b:58:61:ca:9d:
d8:a2:fc:4d:6b:8b:67:3f:3b:ba:43:6a:66:b2:e3:
04:de:10:c6:85:07:97:2f:a0:c3:dc:43:1e:e1:b2:
bc:41:b4:f5:22:44:83:31:f3:a6:5c:48:8e:a3:96:
d5:1b:11:dc:f9:6b:b8:1a:4f:24:bf:47:4e:ae:08:
b3:a7:ed:f1:b0:7a:4c:87:9b:db:9f:31:c0:f9:be:
7a:a6:23:f2:e6:0b:2e:1a:74:28:bc:cf:8c:1a:b5:
b9:40:70:f8:55:22:80:14:88:8a:d4:53:d1:8f:9c:
dd:5b:62:c8:61:44:de:a5:df:25:84:30:76:70:56:
93:23:61:7d:8a:5b:41:6c:80:e3:2b:33:6c:02:78:
94:9c:69:a4:28:cb:ac:ab:73:e9:44:be:f3:7d:cf:
2a:ae:c4:e2:d1:cc:bf:71:0b:58:8f:67:5d:38:70:
97:86:91:42:a7:8e:70:ff:1f:c9:bc:da:b0:8a:1c:
7b:dd:4b:1e:10:25:35:ea:60:41:0b:09:ff:29:23:
58:82:95:5b:68:ce:cb:e9:48:e0:7f:c9:9c:40:05:
9e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:60:05:8B:4A:EF:7D:8F:C7:26:A2:33:95:7A:AF:7F:46:FE:48:E7
X509v3 Authority Key Identifier:
keyid:F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:bf:41:71:45:1e:e8:2e:e1:cb:9a:d7:2b:fa:44:47:a8:7e:
94:6b:70:f9:84:77:fa:36:9b:d4:d6:bd:b3:14:f4:a8:e3:a6:
6e:bd:be:8f:cb:15:66:f1:67:15:23:47:50:72:5d:cb:44:4b:
a8:58:89:11:34:ca:d5:3c:d9:79:5a:84:49:08:79:ce:a5:b0:
38:2b:b0:2c:a8:be:93:19:43:db:74:4b:7e:91:3a:05:ae:f7:
2d:b7:37:83:5f:8a:79:ae:28:3b:fd:a8:ca:a6:df:53:a9:99:
0e:9a:44:1e:a6:fa:07:26:69:47:92:31:b5:46:8a:5c:b6:25:
4a:a1:5c:58:ec:6d:e5:3a:ff:34:49:72:c6:94:0d:2b:f8:5a:
b2:20:08:0b:2f:fa:2e:0e:07:6f:3a:b3:c8:be:0b:c4:5d:a3:
31:e3:43:7e:37:ea:19:51:98:0d:4c:56:4e:d3:3d:07:95:54:
6c:8c:97:5a:10:c4:78:24:2b:c0:a5:59:23:22:a8:c5:d7:5b:
1a:2c:2b:67:08:3a:0b:35:86:d2:70:36:3f:49:62:94:da:24:
64:e1:a8:7d:5b:53:80:50:2b:24:f7:46:2d:f6:05:32:b2:82:
09:cf:59:35:3c:f0:f9:b4:e5:64:93:5c:1b:93:3e:cb:3a:ee:
19:25:a3:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn//knlfWwNE5Inp0+qiagRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NDQ0NGEwODY3ZmNjYTlhMzU2OWMxZmQwOTIxMzM1NDZh
MzdmNGIwHhcNMjUxMDIwMDUwMTE5WhcNMjUxMDIxMDUwMTE5WjAzMTEwLwYDVQQD
EygwMTYwMDU4YjRhZWY3ZDhmYzcyNmEyMzM5NTdhYWY3ZjQ2ZmU0OGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyhAkbayksmdrGpdQDjjqxARBqjN
yRR/UFQaXC0vopiCbcxCVgBfi1hhyp3YovxNa4tnPzu6Q2pmsuME3hDGhQeXL6DD
3EMe4bK8QbT1IkSDMfOmXEiOo5bVGxHc+Wu4Gk8kv0dOrgizp+3xsHpMh5vbnzHA
+b56piPy5gsuGnQovM+MGrW5QHD4VSKAFIiK1FPRj5zdW2LIYUTepd8lhDB2cFaT
I2F9iltBbIDjKzNsAniUnGmkKMusq3PpRL7zfc8qrsTi0cy/cQtYj2ddOHCXhpFC
p45w/x/JvNqwihx73UseECU16mBBCwn/KSNYgpVbaM7L6Ujgf8mcQAWekQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFgBYtK732PxyaiM5V6r39G/kjnMB8GA1UdIwQY
MBaAFPdERKCGf8ypo1acH9CSEzVGo39LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTBSRW9JWl96S21qVnB3ZjBKSVROVWFqZjBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9mNjQwNTMtYjkzOC00YzUxLThlYzUt
NWQyNTI0NGU0YWFkLzEvOTBSRW9JWl96S21qVnB3ZjBKSVROVWFqZjBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9mNjQwNTMtYjkzOC00YzUxLThlYzUtNWQyNTI0NGU0YWFk
LzEvOTBSRW9JWl96S21qVnB3ZjBKSVROVWFqZjBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVL9BcUUe
6C7hy5rXK/pER6h+lGtw+YR3+jab1Na9sxT0qOOmbr2+j8sVZvFnFSNHUHJdy0RL
qFiJETTK1TzZeVqESQh5zqWwOCuwLKi+kxlD23RLfpE6Ba73Lbc3g1+Kea4oO/2o
yqbfU6mZDppEHqb6ByZpR5IxtUaKXLYlSqFcWOxt5Tr/NElyxpQNK/hasiAICy/6
Lg4HbzqzyL4LxF2jMeNDfjfqGVGYDUxWTtM9B5VUbIyXWhDEeCQrwKVZIyKoxddb
GiwrZwg6CzWG0nA2P0lilNokZOGofVtTgFArJPdGLfYFMrKCCc9ZNTzw+bTlZJNc
G5M+yzruGSWj0w==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:59 2025 by rpki-client