Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
File: kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft (raw, json)
Hash identifier: lf0rGp8eRqlSxXyIzhS1j/9hyVw4X0nwqBaem7AeDnE=
Subject key identifier: 41:2D:66:2C:EB:61:DD:01:43:55:E5:03:08:72:6A:C1:7C:69:0E:CE
Authority key identifier: 90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3
Certificate issuer: /CN=90f76537ff745893e3142fa0984f449b725b8fd3
Certificate serial: 0198D5BBC712F1E79CEB298844BD1EE62925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 07:01:49 +0000
Manifest this update: Sat 23 Aug 2025 07:01:49 +0000
Manifest next update: Sun 24 Aug 2025 07:01:49 +0000
Files and hashes: 1: 4h8beUu4miiEn1n13esJcxX7gpc.roa (hash: 33+qj2eaRd7O8N5EQLS3e9QL955CTXDuq4VOYW0my7E=)
2: kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl (hash: OSh+wequ/HyE8kPVZi24r9lEFolEp3HsivCh6KhCCAI=)
3: zcJuMPKqinNoidJ9rHaaDdmdVvA.roa (hash: 9UsWhn4/INB/JJvJuTs6CMag+GLrqc1ZuXSO78kkqu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c7:12:f1:e7:9c:eb:29:88:44:bd:1e:e6:29:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f76537ff745893e3142fa0984f449b725b8fd3
Validity
Not Before: Aug 23 07:01:49 2025 GMT
Not After : Aug 24 07:01:49 2025 GMT
Subject: CN=412d662ceb61dd014355e50308726ac17c690ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:75:62:e1:0b:72:d9:e3:a7:16:59:00:07:54:
3d:64:32:97:42:85:6f:e0:79:71:37:5a:c0:0d:05:
90:5f:00:9f:f9:24:9e:bb:9b:fa:83:e6:35:ac:b7:
8c:3a:5e:5b:a1:04:a8:0d:92:b9:71:a9:5e:e7:64:
9a:17:c3:1d:6a:bc:ee:9c:99:92:92:61:ca:1f:38:
49:c0:8d:1c:88:7a:40:ee:e2:5f:8d:99:b9:92:18:
46:21:00:8d:8d:29:c0:fc:45:06:84:ec:e1:60:01:
02:53:96:59:f6:b6:88:57:bb:d9:60:6e:12:82:8e:
48:63:bf:5d:bc:cd:09:7f:d8:62:06:43:a8:a0:dd:
7d:5a:43:d3:29:db:fc:3e:34:56:dc:75:dd:52:5f:
b5:86:43:09:5f:05:59:bd:96:fa:13:db:0a:cd:2f:
0e:38:ae:2b:96:04:3a:c1:b2:fd:73:28:8c:52:55:
e7:e3:33:d4:55:bd:41:49:f4:bc:08:57:26:38:46:
bf:98:ec:2d:10:fa:7b:da:ea:35:d5:8b:14:55:f3:
38:85:f3:9b:4c:bc:26:69:c2:6d:f8:f6:b7:a7:f3:
43:5f:f0:d3:f4:50:2c:ff:a6:b8:de:75:65:dd:a3:
cc:bd:f9:3a:ba:9b:48:1c:d1:ad:df:8e:35:8a:35:
09:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2D:66:2C:EB:61:DD:01:43:55:E5:03:08:72:6A:C1:7C:69:0E:CE
X509v3 Authority Key Identifier:
keyid:90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:6a:08:9a:f5:93:ed:21:c7:4d:a6:2b:20:df:89:5c:b9:7d:
9d:1a:76:d0:61:d1:6f:51:43:06:f0:b3:ad:ec:7e:94:65:b2:
ae:47:eb:0c:bd:76:29:15:18:24:24:6c:3b:62:0a:98:0d:2f:
fd:fc:0f:00:a4:80:f4:20:39:1f:ce:77:9c:cf:01:a8:4e:ac:
f9:16:65:b7:47:e1:de:73:54:07:0e:62:a9:2b:0e:fa:0d:0e:
e0:5d:c7:7c:e8:96:89:36:f3:fc:8c:be:85:3d:a1:c2:bd:c6:
a3:42:52:a2:a3:3f:8a:8a:ed:79:e9:a4:48:a7:64:03:d1:db:
37:81:f8:60:af:33:ff:6b:45:0c:2d:cf:da:f5:60:96:0f:3a:
7d:72:b5:d7:e2:a6:30:a7:b4:b0:06:f0:3d:65:94:4a:32:ed:
44:65:ef:c8:9f:26:9f:f1:10:95:fe:4e:b7:6d:71:13:cc:2e:
e6:52:12:90:5c:7c:6d:0a:1e:b4:7e:f2:83:8c:b8:5f:9b:0d:
1c:75:72:1d:76:70:67:f2:88:a1:a2:8d:52:dd:78:8e:a6:e4:
b4:5e:39:46:30:80:c3:e6:e0:2a:a5:52:b1:d0:c4:fc:72:69:
55:94:41:86:64:d3:42:16:76:aa:1a:ba:76:75:95:73:27:35:
f8:17:cd:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu8cS8eec6ymIRL0e5iklMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZjc2NTM3ZmY3NDU4OTNlMzE0MmZhMDk4NGY0NDliNzI1
YjhmZDMwHhcNMjUwODIzMDcwMTQ5WhcNMjUwODI0MDcwMTQ5WjAzMTEwLwYDVQQD
Eyg0MTJkNjYyY2ViNjFkZDAxNDM1NWU1MDMwODcyNmFjMTdjNjkwZWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XVi4Qty2eOnFlkAB1Q9ZDKXQoVv
4HlxN1rADQWQXwCf+SSeu5v6g+Y1rLeMOl5boQSoDZK5cale52SaF8MdarzunJmS
kmHKHzhJwI0ciHpA7uJfjZm5khhGIQCNjSnA/EUGhOzhYAECU5ZZ9raIV7vZYG4S
go5IY79dvM0Jf9hiBkOooN19WkPTKdv8PjRW3HXdUl+1hkMJXwVZvZb6E9sKzS8O
OK4rlgQ6wbL9cyiMUlXn4zPUVb1BSfS8CFcmOEa/mOwtEPp72uo11YsUVfM4hfOb
TLwmacJt+Pa3p/NDX/DT9FAs/6a43nVl3aPMvfk6uptIHNGt3441ijUJFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEtZizrYd0BQ1XlAwhyasF8aQ7OMB8GA1UdIwQY
MBaAFJD3ZTf/dFiT4xQvoJhPRJtyW4/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1BkbE5fOTBXSlBqRkMtZ21FOUVtM0piajlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80Zjc2ODAtODFhYi00YzFmLWEwN2It
N2M2MmQ1YzMxNWJmLzEva1BkbE5fOTBXSlBqRkMtZ21FOUVtM0piajlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi80Zjc2ODAtODFhYi00YzFmLWEwN2ItN2M2MmQ1YzMxNWJm
LzEva1BkbE5fOTBXSlBqRkMtZ21FOUVtM0piajlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2oImvWT
7SHHTaYrIN+JXLl9nRp20GHRb1FDBvCzrex+lGWyrkfrDL12KRUYJCRsO2IKmA0v
/fwPAKSA9CA5H853nM8BqE6s+RZlt0fh3nNUBw5iqSsO+g0O4F3HfOiWiTbz/Iy+
hT2hwr3Go0JSoqM/iorteemkSKdkA9HbN4H4YK8z/2tFDC3P2vVglg86fXK11+Km
MKe0sAbwPWWUSjLtRGXvyJ8mn/EQlf5Ot21xE8wu5lISkFx8bQoetH7yg4y4X5sN
HHVyHXZwZ/KIoaKNUt14jqbktF45RjCAw+bgKqVSsdDE/HJpVZRBhmTTQhZ2qhq6
dnWVcyc1+BfN0w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:42:57 2025 by rpki-client