Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
File: kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft (raw, json)
Hash identifier: N6gsOCJk66O7yC1G2lcWbw2/TqQxahB4Zdyj6gPrWtE=
Subject key identifier: EA:B2:34:5B:E8:0B:A4:F8:E1:BA:30:BC:7B:31:49:D0:F5:95:6B:B2
Authority key identifier: 90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3
Certificate issuer: /CN=90f76537ff745893e3142fa0984f449b725b8fd3
Certificate serial: 019A522CC7019F50E4A58ACA8D22664330C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 04:00:57 +0000
Manifest this update: Wed 05 Nov 2025 04:00:57 +0000
Manifest next update: Thu 06 Nov 2025 04:00:57 +0000
Files and hashes: 1: 4h8beUu4miiEn1n13esJcxX7gpc.roa (hash: 33+qj2eaRd7O8N5EQLS3e9QL955CTXDuq4VOYW0my7E=)
2: kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl (hash: JIcxwvrZ3GKmNEhL6pd3IqwaGStErLJRx2q8AXMCTlM=)
3: zcJuMPKqinNoidJ9rHaaDdmdVvA.roa (hash: 9UsWhn4/INB/JJvJuTs6CMag+GLrqc1ZuXSO78kkqu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:c7:01:9f:50:e4:a5:8a:ca:8d:22:66:43:30:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f76537ff745893e3142fa0984f449b725b8fd3
Validity
Not Before: Nov 5 04:00:57 2025 GMT
Not After : Nov 6 04:00:57 2025 GMT
Subject: CN=eab2345be80ba4f8e1ba30bc7b3149d0f5956bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a1:11:9b:e9:ed:12:9f:4b:81:49:9f:52:74:
c7:4d:95:20:5d:71:d5:80:1a:fc:70:71:95:27:b9:
e9:13:a0:3a:3b:dd:88:cb:43:2f:58:72:a1:3e:4c:
72:51:e7:38:db:12:45:fe:93:96:ac:31:56:73:90:
93:42:04:43:b7:5a:6c:6c:42:59:4a:0b:0a:30:25:
70:1b:20:4a:a0:78:70:45:b6:9d:c1:c5:65:16:14:
93:99:b4:51:28:56:28:a8:ad:af:17:d0:69:72:bb:
2f:f2:d1:88:17:c5:d0:5f:65:34:6f:44:7e:fc:48:
36:b7:32:ef:e7:1d:28:43:fd:7e:4a:f1:3f:44:6e:
7b:35:49:0c:ea:88:15:23:74:3c:91:45:20:ab:84:
f5:cd:35:8c:c5:6f:6f:93:5c:66:31:43:9d:ee:52:
11:38:3c:11:20:12:d1:f6:5c:58:49:d5:21:13:62:
c6:34:cf:3d:66:83:c1:88:eb:5a:88:0f:96:66:01:
7c:dc:05:58:e6:31:a5:86:6e:4a:9c:cb:35:4a:93:
4b:f7:45:ea:a8:35:ad:93:a3:9c:ba:11:cc:f6:28:
c4:b1:46:bd:d9:b5:6b:c0:6e:54:26:f7:1f:0d:55:
64:e9:3f:9a:e4:99:5d:a4:7b:68:d4:4f:08:24:cd:
6d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B2:34:5B:E8:0B:A4:F8:E1:BA:30:BC:7B:31:49:D0:F5:95:6B:B2
X509v3 Authority Key Identifier:
keyid:90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:1e:68:2d:22:ca:25:7e:e0:b2:65:7c:43:93:6e:e8:7a:0f:
23:9d:93:73:b3:78:d5:ce:80:f6:e6:93:f9:11:4f:81:36:cd:
76:d4:e9:9f:e3:a6:99:2a:39:05:b0:49:33:da:b7:60:58:00:
94:91:5e:d4:94:31:5d:ca:58:53:19:d3:13:5f:9d:f2:90:eb:
81:8e:f2:9e:1e:7a:9d:19:18:0c:7c:43:5f:a9:c7:ed:5b:1a:
3f:3d:71:78:3f:fa:d9:63:d8:38:8d:ae:10:c0:8b:b5:0a:09:
d5:71:5e:33:14:5e:32:e9:f6:40:25:33:a8:89:6f:75:1d:59:
79:a4:78:9c:e7:35:fc:26:cf:49:f7:b8:86:0b:4a:2d:c1:01:
53:40:9d:b3:09:88:2b:d6:b3:a5:10:de:58:6b:a2:a9:be:5b:
74:e9:25:3c:33:3d:0e:66:65:75:51:74:75:4a:57:4c:78:f7:
40:c6:a9:51:b0:20:a2:69:91:97:62:a6:b2:ef:93:89:c8:62:
4b:e1:6f:34:6f:05:e9:76:2e:a6:2b:1e:40:db:a6:57:7c:b9:
b1:b5:c4:39:3a:c4:b0:7e:6e:21:bb:1e:51:c6:7e:15:09:c1:
c5:a9:fa:38:c2:e1:a9:d3:25:3a:ff:dd:2c:dc:f0:32:63:4a:
b4:f0:f4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:56:11 2025 by rpki-client