Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
File: 90REoIZ_zKmjVpwf0JITNUajf0s.mft (raw, json)
Hash identifier: R0G4MDMhqbHkGDquEtNA/OVbztPTxcGQx98ESD3sPrM=
Subject key identifier: F1:94:24:2D:D7:62:AB:0D:B7:FD:E8:BC:F1:AA:30:54:8F:B4:1E:71
Authority key identifier: F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B
Certificate issuer: /CN=f74444a0867fcca9a3569c1fd092133546a37f4b
Certificate serial: 019A511976661448187F68205052B0F08254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
Manifest number: 169E
Signing time: Tue 04 Nov 2025 23:00:14 +0000
Manifest this update: Tue 04 Nov 2025 23:00:14 +0000
Manifest next update: Wed 05 Nov 2025 23:00:14 +0000
Files and hashes: 1: 90REoIZ_zKmjVpwf0JITNUajf0s.crl (hash: w+xlEcCwxrmTaDKrkvb7wW08GvJykpppqftk72FHNHU=)
2: b9lO4JuPU_XGDEIOyFIyTFoywlI.roa (hash: sqBT/bZlTljLi10b8NxaSvoAN6hXGjYEttvRj2Pm9N4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:76:66:14:48:18:7f:68:20:50:52:b0:f0:82:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f74444a0867fcca9a3569c1fd092133546a37f4b
Validity
Not Before: Nov 4 23:00:14 2025 GMT
Not After : Nov 5 23:00:14 2025 GMT
Subject: CN=f194242dd762ab0db7fde8bcf1aa30548fb41e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:87:5f:be:07:0f:24:41:ff:5e:70:e4:bb:c4:
6a:41:c1:11:00:c9:45:13:25:9f:01:0d:e6:73:9e:
4a:0e:ae:db:a3:73:ea:2f:11:1f:1c:3a:49:3c:3a:
53:d3:83:44:37:70:66:a2:2e:4e:6b:2d:4e:c7:47:
5f:b9:7e:41:bc:41:44:dc:4e:18:e4:17:d4:11:c1:
5a:9b:ef:d5:03:14:9e:bc:64:1e:e8:22:11:40:24:
30:a9:37:db:34:57:8f:cb:82:f7:72:c0:fd:1f:5f:
31:f5:6a:c6:f0:73:59:27:52:b3:a3:46:ae:30:01:
98:15:e4:c8:b5:55:d3:5a:9b:25:2b:1d:99:1f:da:
d8:20:55:13:43:a5:2e:aa:e8:8a:7c:dd:ef:82:d5:
66:24:41:c0:ba:ea:67:05:2b:b8:e6:66:ea:33:c0:
91:73:69:ac:4b:53:fc:c2:ee:d6:c6:6e:8c:b2:c3:
14:37:0d:b9:15:56:86:e0:a1:8d:7c:f4:94:cf:60:
92:d1:6b:79:93:3a:6a:25:9d:89:7e:ef:f4:98:46:
ef:5d:b6:bc:56:34:a9:c2:25:e5:7c:ab:f8:48:65:
82:91:a6:1c:d7:a9:e5:c6:27:35:d8:3c:a5:46:d5:
4e:2c:c8:7a:85:e5:39:1e:f4:63:ac:78:30:28:c6:
62:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:94:24:2D:D7:62:AB:0D:B7:FD:E8:BC:F1:AA:30:54:8F:B4:1E:71
X509v3 Authority Key Identifier:
keyid:F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ac:6f:05:37:69:c9:e1:94:66:e6:98:2a:23:b6:b5:bd:58:
bf:d8:cc:74:3c:cd:65:34:33:2a:d7:12:54:12:f2:bc:16:08:
26:94:db:8a:08:be:24:eb:f2:15:1e:36:fd:09:50:46:fc:da:
9a:af:e5:3e:df:01:ea:0e:42:9b:7f:3c:77:c0:ee:76:b1:79:
a3:85:de:99:e1:4e:81:37:31:9c:8a:23:24:7e:c6:43:47:8c:
34:c8:13:cb:fc:43:14:67:ad:68:50:33:1c:22:15:73:e9:57:
10:f3:e5:65:1d:43:09:53:a4:f7:fe:78:94:aa:91:4c:6f:eb:
a3:f3:85:02:e2:97:12:ba:92:d1:1b:db:db:98:d2:12:4f:99:
dc:1a:b3:7c:26:b8:c9:26:75:ef:7f:82:17:f8:5a:38:51:18:
63:0b:c2:67:27:ea:ab:78:1a:2b:6e:40:8b:92:d0:d4:c3:05:
b9:b9:23:d0:ed:2a:1e:4f:91:4a:e5:04:04:20:10:c8:cc:8c:
23:42:8c:46:f3:80:b5:b7:6f:2a:06:17:39:8b:4d:d3:f1:0f:
ae:2f:76:98:14:54:eb:d6:b3:c2:43:c2:f8:bf:13:b1:c0:f8:
f1:af:99:e3:d4:f5:b6:ae:34:5b:c9:1b:9a:6a:d4:21:f8:a6:
17:d5:1b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:56:02 2025 by rpki-client