Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
File: iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft (raw, json)
Hash identifier: mPPERzDuqpM6qjMZHLV2J3iwfYTcDcCAoz+n8LpRNsQ=
Subject key identifier: AA:C9:2F:36:6E:AF:73:7F:A3:20:5F:E5:61:FA:7B:F6:97:98:2E:9E
Authority key identifier: 88:F0:C1:D1:0E:4E:5A:71:E3:CD:5C:5D:6B:EE:BF:77:8A:06:E3:04
Certificate issuer: /CN=88f0c1d10e4e5a71e3cd5c5d6beebf778a06e304
Certificate serial: 01984964FD8CF85D089AF39272A73069F0AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 01:00:11 +0000
Manifest this update: Sun 27 Jul 2025 01:00:11 +0000
Manifest next update: Mon 28 Jul 2025 01:00:11 +0000
Files and hashes: 1: iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl (hash: ERKFwzEVBlRYJaT7/rf9uUFfQ5hOVicX9P6xFcerktk=)
2: y8a09sHjWHM5T2xCi9njj3ZdPYg.roa (hash: CAxwtV7q/TGnHiFNWAua77bFrVfKg4wLI65YyM+74Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:64:fd:8c:f8:5d:08:9a:f3:92:72:a7:30:69:f0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f0c1d10e4e5a71e3cd5c5d6beebf778a06e304
Validity
Not Before: Jul 27 01:00:11 2025 GMT
Not After : Jul 28 01:00:11 2025 GMT
Subject: CN=aac92f366eaf737fa3205fe561fa7bf697982e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7a:7e:b2:ce:56:dc:70:0d:6c:b0:1d:23:0d:
06:c3:81:45:d1:5d:4e:8d:46:2c:6d:8c:2b:3e:7f:
0d:a6:29:44:9a:6d:9a:fd:78:ce:5e:d2:d3:bf:b4:
1c:87:5d:95:bb:a3:f1:af:58:1e:73:04:5f:2e:b4:
cd:a0:04:fc:67:37:78:d4:39:b6:a7:f0:f3:42:38:
6f:50:0a:25:3e:91:59:e2:25:c2:e2:3e:d0:d5:47:
6b:b9:62:b2:f1:96:b3:c2:cf:7a:8c:55:5d:7b:f4:
80:25:39:d0:fb:93:71:e1:d2:16:29:06:45:e3:dc:
cc:17:7f:cf:95:96:fd:39:71:f9:4e:bf:ee:c3:55:
6c:39:7f:7a:ea:bb:5b:cc:ac:99:20:6a:75:5c:d9:
5f:48:9d:c6:53:ef:df:72:22:b6:2a:65:d4:47:8c:
76:3a:7b:af:1d:db:8a:67:76:4d:4e:68:b9:65:46:
a4:7e:b2:65:61:62:82:62:69:3b:c2:ec:c5:6a:0a:
ad:64:b2:4d:9d:f7:9f:28:b9:5c:46:ad:2d:16:ef:
13:01:7d:4b:5a:0e:42:74:46:43:2a:99:5c:40:40:
29:dd:b6:b2:cf:5d:ad:6a:82:b5:38:ce:4a:d7:cc:
b0:6a:53:5d:b9:e0:fa:17:ff:4b:ea:55:a9:a3:55:
19:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C9:2F:36:6E:AF:73:7F:A3:20:5F:E5:61:FA:7B:F6:97:98:2E:9E
X509v3 Authority Key Identifier:
keyid:88:F0:C1:D1:0E:4E:5A:71:E3:CD:5C:5D:6B:EE:BF:77:8A:06:E3:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:3d:5b:6b:3a:3d:25:c9:5f:b5:0a:92:51:4f:a1:73:16:43:
52:35:f7:fd:29:23:30:fa:a6:49:5e:f7:5a:9a:46:bc:6b:7f:
b8:c8:ea:16:45:11:65:50:b9:df:b9:e3:0f:e1:ae:8e:2c:27:
15:ee:4e:8f:e0:d6:b9:a7:ef:48:74:f7:97:c8:4c:48:fb:60:
70:67:90:71:af:53:3f:c9:73:56:09:e0:8d:f0:fe:db:3a:f5:
aa:75:3c:1b:f7:8b:e9:67:41:a1:d2:e3:d7:29:66:cc:8f:2a:
97:f3:4e:6e:06:c0:e6:39:f6:8e:6c:0e:b8:b5:4d:ed:aa:b0:
27:a9:b7:7b:af:94:04:d6:c7:0c:29:86:ae:00:5d:76:24:02:
7c:a1:9a:b7:2f:c8:36:57:c8:30:a3:d6:cd:45:3d:27:28:80:
90:8f:57:b6:dd:7a:e0:ad:ae:50:f9:5b:b2:21:cf:e1:f5:f1:
65:28:a2:47:0a:0a:b9:76:8e:f9:18:d7:c8:c7:a8:43:4e:fb:
32:1b:72:45:7b:39:d5:55:5f:ff:4e:32:89:cb:dd:7f:19:1e:
7a:83:d1:0a:a1:ea:2d:d6:f9:8e:f1:21:6d:a3:32:e5:e4:30:
0e:2a:f4:83:73:28:66:84:35:63:b9:82:c9:0c:2f:ad:3c:d3:
c8:86:92:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:34:47 2025 by rpki-client