Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
File: 90IFIPikG7BNbRsPQBQOVT-K828.mft (raw, json)
Hash identifier: A0xgP3IM3cDl748cT8ouVOyxSRD5+sGYRW87+OepVuY=
Subject key identifier: 08:A3:10:EA:9C:09:6B:79:A2:5B:4F:C2:6C:CB:1B:0F:64:F9:62:26
Authority key identifier: F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
Certificate issuer: /CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Certificate serial: 01976DABEE700F5A6C577E30C0C1EC703D9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
Manifest number: 12CF
Signing time: Sat 14 Jun 2025 09:01:13 +0000
Manifest this update: Sat 14 Jun 2025 09:01:13 +0000
Manifest next update: Sun 15 Jun 2025 09:01:13 +0000
Files and hashes: 1: 90IFIPikG7BNbRsPQBQOVT-K828.crl (hash: a8gBxE8tEvHDoczhR5THegpbEqJ9ac0sPcELtlgfMbk=)
2: LFGeCWEJqK41lBLfNDSrvcd-R7M.roa (hash: D3t7Jj+dB85c4h6RAmcwzdWk3BwbQNg/lUXAv4WmqH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:ee:70:0f:5a:6c:57:7e:30:c0:c1:ec:70:3d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f
Validity
Not Before: Jun 14 09:01:13 2025 GMT
Not After : Jun 15 09:01:13 2025 GMT
Subject: CN=08a310ea9c096b79a25b4fc26ccb1b0f64f96226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a8:a2:c9:09:01:91:46:04:32:fc:47:98:0d:
6e:31:96:c3:36:84:5b:4a:25:e2:41:43:02:78:8a:
92:6a:ea:29:f8:90:06:9f:2e:93:c8:31:99:c4:e6:
53:39:fe:6a:e3:80:55:39:55:ac:35:d4:57:25:b5:
c1:8e:2a:91:53:3f:92:e7:e6:b5:b8:aa:0e:2f:a2:
00:3a:1a:5a:e4:0f:0a:a9:52:eb:b1:1f:fe:ca:03:
9d:03:49:ec:dd:3c:17:f0:e6:5b:b8:d0:9d:ad:42:
a6:6c:91:56:ed:90:1c:45:32:c0:44:4b:9b:4e:13:
5f:44:a5:9a:d5:46:53:f5:30:05:8d:12:55:41:b0:
80:b3:31:fa:ec:f7:ce:be:df:26:9c:93:76:8f:13:
85:db:b9:04:ed:0f:7b:06:47:a8:d7:f8:bc:00:92:
34:fa:d9:55:10:a4:16:86:5e:af:f5:8e:cd:00:ad:
f1:31:84:02:ea:67:16:41:d2:31:ff:fb:1d:90:39:
6a:6d:93:13:5c:77:46:11:95:8c:5b:68:d2:14:fb:
70:2e:dc:20:38:03:64:93:7f:0d:ad:76:1f:71:3e:
53:52:15:b0:00:87:76:f4:09:dd:07:1d:19:92:33:
dc:b0:2d:c7:e2:f2:3a:f5:16:70:9d:2f:5f:c4:ae:
3c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A3:10:EA:9C:09:6B:79:A2:5B:4F:C2:6C:CB:1B:0F:64:F9:62:26
X509v3 Authority Key Identifier:
keyid:F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ea:f8:40:8e:b9:27:48:3b:c7:18:d7:49:e9:cf:42:1f:3e:
95:d1:3a:f1:96:9e:aa:34:0e:7a:92:9f:e7:8f:d6:4a:12:c4:
91:a3:20:df:10:6d:7b:4d:16:8b:a6:36:f6:20:1e:61:54:62:
cc:0e:72:94:53:6a:1a:de:73:45:2f:fe:ce:68:64:f3:b1:b1:
85:23:fc:ab:7e:8c:ac:65:af:f4:9a:d4:73:20:de:96:bd:59:
d0:ff:1e:6c:81:b8:4f:bf:e3:ab:59:84:7b:39:c0:6e:6e:6d:
3d:9c:a6:ed:80:36:4a:a7:94:03:5f:54:02:a1:0f:55:8e:f9:
bc:e3:5f:18:17:e4:fe:3c:33:ba:cb:1c:fa:28:86:2a:2e:90:
76:b7:6a:da:78:83:53:54:8d:f3:2b:d8:c3:ca:1a:e8:91:6e:
46:01:68:93:9b:95:f9:80:28:f3:30:f2:99:ad:9c:fe:ea:ef:
e3:6f:22:97:3c:d3:14:de:60:b2:8b:3b:60:79:ed:ab:d9:ba:
01:bd:fd:02:f3:be:0e:04:57:b4:03:3b:be:97:10:bf:af:9b:
22:ed:b7:46:e0:9f:3f:2c:67:35:b2:32:f2:e8:c6:d6:49:5a:
1e:c4:5d:48:d3:5c:d0:35:52:4d:41:c2:49:62:8b:81:af:45:
66:b4:8b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:00:17 2025 by rpki-client