Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
File: kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft (raw, json)
Hash identifier: FEy1UCFXipy6iYaq6Hx/zeIBpFN4ksmg1kFOLaK/vHc=
Subject key identifier: 9C:0A:AA:D8:A0:EC:4A:26:D9:6D:86:80:B6:E1:6C:43:58:50:D2:28
Authority key identifier: 90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3
Certificate issuer: /CN=90f76537ff745893e3142fa0984f449b725b8fd3
Certificate serial: 0198752BCC1EE1A5E55EED02808093D78D0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 13:01:01 +0000
Manifest this update: Mon 04 Aug 2025 13:01:01 +0000
Manifest next update: Tue 05 Aug 2025 13:01:01 +0000
Files and hashes: 1: 4h8beUu4miiEn1n13esJcxX7gpc.roa (hash: 33+qj2eaRd7O8N5EQLS3e9QL955CTXDuq4VOYW0my7E=)
2: kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl (hash: w4uWu4pxX2btO7Zh6vOBhE6lEAQ3t09IF2N4WUERxk8=)
3: zcJuMPKqinNoidJ9rHaaDdmdVvA.roa (hash: 9UsWhn4/INB/JJvJuTs6CMag+GLrqc1ZuXSO78kkqu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:cc:1e:e1:a5:e5:5e:ed:02:80:80:93:d7:8d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f76537ff745893e3142fa0984f449b725b8fd3
Validity
Not Before: Aug 4 13:01:01 2025 GMT
Not After : Aug 5 13:01:01 2025 GMT
Subject: CN=9c0aaad8a0ec4a26d96d8680b6e16c435850d228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cb:4a:ce:49:61:8f:9f:ae:43:0e:64:d5:73:
74:fd:b7:c1:cc:e0:69:75:16:7d:4d:5d:75:90:f5:
12:b7:03:bf:f2:66:27:ef:f9:9b:0f:c8:cd:47:47:
c7:28:7f:f3:f7:79:9a:6d:e9:ac:6a:8f:83:8c:5d:
05:5e:28:64:fe:57:65:54:55:c5:df:98:8e:a9:90:
cb:fc:3c:79:36:19:c7:a8:1f:a7:a8:89:f0:d2:bd:
d5:7e:0b:ef:c0:5d:59:00:e1:c3:ce:4f:ba:18:31:
d1:a6:69:0d:76:79:d4:8e:d7:bf:38:de:9a:a2:ab:
6d:b1:31:a1:7a:8f:cf:13:77:50:c0:7b:fa:36:80:
91:ff:69:21:32:c4:26:85:42:9d:b5:33:ee:35:83:
fe:d2:b1:8e:03:c8:d9:4f:3e:00:f4:ea:f9:84:63:
df:a3:4f:52:2a:6b:e9:28:64:bb:6d:a4:28:1e:52:
e8:a0:ed:32:b1:e1:d7:bb:db:f9:90:3c:7c:d0:67:
0c:bf:02:2e:cb:05:55:96:4f:8d:02:3a:16:60:03:
42:c8:cb:cb:e3:26:11:24:f9:2f:a5:4c:53:53:3c:
f3:f2:65:29:26:bf:ca:84:e7:ab:87:dc:11:01:25:
88:67:01:1b:98:1e:fe:99:6d:17:88:13:c1:a9:76:
10:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0A:AA:D8:A0:EC:4A:26:D9:6D:86:80:B6:E1:6C:43:58:50:D2:28
X509v3 Authority Key Identifier:
keyid:90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:69:d3:b5:94:54:fa:cb:3b:14:92:45:3f:4f:20:c8:68:d3:
fa:be:bb:ea:c6:ea:62:54:c0:e0:52:1e:14:1a:c2:c9:6e:d7:
2c:b4:05:6f:94:56:09:c2:75:34:8c:f4:63:29:48:5c:b4:70:
ee:da:1c:24:60:79:03:62:ef:74:09:ed:ca:0b:ed:01:f9:6c:
0e:a2:97:a9:68:1f:be:bc:44:90:8c:fb:18:1e:5b:98:27:69:
ec:fe:04:8b:c1:b6:a1:96:17:e3:47:69:6e:3e:e6:3f:c5:57:
74:01:30:7c:50:60:af:54:bb:33:4b:2b:48:8b:77:8e:5a:53:
0b:3e:a5:a8:e7:43:b7:a1:cd:99:a1:40:29:00:81:22:4f:12:
b5:88:f7:2a:f9:ff:66:41:0a:1d:f1:92:5b:8b:68:54:21:dc:
fe:98:58:dc:66:b2:08:af:a6:9c:53:5e:09:09:a7:14:3a:10:
90:4e:b8:57:51:05:a8:1a:32:99:c8:e2:73:66:42:89:84:75:
86:03:66:d3:b4:a4:56:cc:47:e9:7c:b9:de:9a:d9:3d:44:65:
9b:95:4e:e5:c3:1d:3e:0d:69:77:dc:5e:47:c8:91:1f:1c:38:
15:f7:bb:3b:f9:ce:0e:77:f2:83:95:44:97:37:5c:67:16:b3:
a0:52:c5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:32:36 2025 by rpki-client