Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
File: 90IFIPikG7BNbRsPQBQOVT-K828.mft (raw, json)
Hash identifier: 9ZjbT3wJ81CB2DFaSbL4GjE3KkjjhsJTaxpm1DHAvlQ=
Subject key identifier: 25:44:8B:49:0F:2D:0D:05:3E:E5:41:8E:D6:DD:39:59:87:BC:91:3B
Authority key identifier: F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
Certificate issuer: /CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Certificate serial: 0198745078CF7D546EAD874DCFAC450CC365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
Manifest number: 1357
Signing time: Mon 04 Aug 2025 09:01:27 +0000
Manifest this update: Mon 04 Aug 2025 09:01:27 +0000
Manifest next update: Tue 05 Aug 2025 09:01:27 +0000
Files and hashes: 1: 90IFIPikG7BNbRsPQBQOVT-K828.crl (hash: abmEcYV+wuCcfcI+deyYNQCGEKnNW6uG+322TQ1G0FQ=)
2: LFGeCWEJqK41lBLfNDSrvcd-R7M.roa (hash: D3t7Jj+dB85c4h6RAmcwzdWk3BwbQNg/lUXAv4WmqH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:78:cf:7d:54:6e:ad:87:4d:cf:ac:45:0c:c3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Validity
Not Before: Aug 4 09:01:27 2025 GMT
Not After : Aug 5 09:01:27 2025 GMT
Subject: CN=25448b490f2d0d053ee5418ed6dd395987bc913b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e2:3b:5e:84:5c:60:08:1f:0a:35:cf:6e:95:
97:c5:7a:fa:e7:f6:4e:7b:05:f4:ae:00:38:e4:1a:
ca:b4:e6:65:32:2e:9a:4a:36:f5:25:b7:08:11:d3:
2f:88:b9:66:82:d7:b1:8a:13:5d:03:53:03:1b:58:
c4:72:62:fa:89:9a:5c:9a:dd:16:d0:98:72:ab:3a:
28:42:8b:fd:33:42:57:da:70:ae:50:cb:9d:ef:5a:
c2:bc:5d:1f:8c:35:8c:b6:8c:fd:fe:79:6b:cd:b4:
18:23:40:fa:23:73:27:f3:2c:20:76:01:16:cd:ff:
55:43:58:a8:80:7e:cb:ae:29:d3:50:28:e1:1d:c0:
ed:aa:7e:49:e2:17:08:1f:a5:10:8d:5e:ef:37:4e:
95:33:a4:cf:82:fd:e1:2d:34:78:03:74:a3:ea:a0:
4d:0c:0a:72:7b:05:46:7f:e3:64:17:42:f8:cd:b7:
eb:16:af:22:f7:cd:17:69:85:5d:b0:58:18:f4:1c:
0f:78:81:4c:57:05:8d:f0:38:46:f3:c0:8c:86:ee:
b4:f3:04:5e:17:d2:7c:38:7e:0b:5b:cb:d2:ab:b8:
78:8a:3d:21:6d:87:4f:a9:7d:34:47:c8:49:96:28:
fa:d2:fa:f2:62:e8:66:08:9d:db:ca:08:12:64:48:
a1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:44:8B:49:0F:2D:0D:05:3E:E5:41:8E:D6:DD:39:59:87:BC:91:3B
X509v3 Authority Key Identifier:
keyid:F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:5a:f5:25:77:91:26:85:b6:55:49:f3:af:53:7d:5d:16:81:
92:a3:d3:90:48:c2:47:67:79:0c:ce:4a:dc:bf:bf:cc:c4:87:
aa:71:53:e3:39:7d:2e:7b:b1:9d:1f:89:fa:7b:73:54:4d:c3:
79:49:e4:76:3f:6b:84:dc:78:8e:71:40:36:af:64:cc:55:47:
4d:d8:3b:a6:77:3a:95:db:65:43:78:c1:44:9f:45:b4:66:6d:
fb:f6:d3:33:47:f3:e3:79:f7:f9:7b:bd:06:ee:fc:7d:d3:6a:
fe:5b:a2:a0:4e:80:bf:3f:00:81:ac:5d:83:58:b6:6d:30:85:
c7:e2:27:57:e9:61:69:c2:6c:36:17:ce:89:4a:32:e1:33:d1:
d3:07:b8:4b:64:52:e0:7a:84:b6:92:40:9b:9b:9a:3a:ac:0b:
3b:fb:f6:cc:c9:eb:f4:12:e3:39:62:8d:bf:28:68:4c:f6:44:
6e:11:f6:b6:ae:2d:71:0b:bc:2f:db:6c:f8:2b:95:a2:06:6a:
1a:ae:40:7f:a5:83:66:68:1b:21:b9:51:87:a8:eb:a3:f8:92:
ec:9c:d2:6d:6e:f1:ea:e7:46:4f:cd:12:25:a5:f0:6a:4c:1c:
b4:de:b5:a6:a5:be:ac:9d:d8:fa:ac:2b:ea:1b:05:6f:a6:a2:
3a:35:07:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UHjPfVRurYdNz6xFDMNlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NDIwNTIwZjhhNDFiYjA0ZDZkMWIwZjQwMTQwZTU1M2Y4
YWYzNmYwHhcNMjUwODA0MDkwMTI3WhcNMjUwODA1MDkwMTI3WjAzMTEwLwYDVQQD
EygyNTQ0OGI0OTBmMmQwZDA1M2VlNTQxOGVkNmRkMzk1OTg3YmM5MTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OI7XoRcYAgfCjXPbpWXxXr65/ZO
ewX0rgA45BrKtOZlMi6aSjb1JbcIEdMviLlmgtexihNdA1MDG1jEcmL6iZpcmt0W
0JhyqzooQov9M0JX2nCuUMud71rCvF0fjDWMtoz9/nlrzbQYI0D6I3Mn8ywgdgEW
zf9VQ1iogH7LrinTUCjhHcDtqn5J4hcIH6UQjV7vN06VM6TPgv3hLTR4A3Sj6qBN
DApyewVGf+NkF0L4zbfrFq8i980XaYVdsFgY9BwPeIFMVwWN8DhG88CMhu608wRe
F9J8OH4LW8vSq7h4ij0hbYdPqX00R8hJlij60vryYuhmCJ3byggSZEihKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVEi0kPLQ0FPuVBjtbdOVmHvJE7MB8GA1UdIwQY
MBaAFPdCBSD4pBuwTW0bD0AUDlU/ivNvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTBJRklQaWtHN0JOYlJzUFFCUU9WVC1LODI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yYWI5YzgtMDQ0Ni00MTA1LThiZmYt
MDhiZTNlZTZkOGFhLzEvOTBJRklQaWtHN0JOYlJzUFFCUU9WVC1LODI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yYWI5YzgtMDQ0Ni00MTA1LThiZmYtMDhiZTNlZTZkOGFh
LzEvOTBJRklQaWtHN0JOYlJzUFFCUU9WVC1LODI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZlr1JXeR
JoW2VUnzr1N9XRaBkqPTkEjCR2d5DM5K3L+/zMSHqnFT4zl9LnuxnR+J+ntzVE3D
eUnkdj9rhNx4jnFANq9kzFVHTdg7pnc6ldtlQ3jBRJ9FtGZt+/bTM0fz43n3+Xu9
Bu78fdNq/luioE6Avz8Agaxdg1i2bTCFx+InV+lhacJsNhfOiUoy4TPR0we4S2RS
4HqEtpJAm5uaOqwLO/v2zMnr9BLjOWKNvyhoTPZEbhH2tq4tcQu8L9ts+CuVogZq
Gq5Af6WDZmgbIblRh6jro/iS7JzSbW7x6udGT80SJaXwakwctN61pqW+rJ3Y+qwr
6hsFb6aiOjUH0A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:53 2025 by rpki-client