Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
File: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft (raw, json)
Hash identifier: /fs7YpmgEDOqq40b/jOeVv3xSff38sJFv6ID9MjwUJM=
Subject key identifier: 9F:83:16:25:57:F3:FF:3D:70:EE:BB:DA:93:93:B2:F1:A7:63:4E:B9
Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
Certificate issuer: /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Certificate serial: 01984965514B929B766C7FBB76DFBE986CAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
Manifest number: 0CD2
Signing time: Sun 27 Jul 2025 01:00:33 +0000
Manifest this update: Sun 27 Jul 2025 01:00:33 +0000
Manifest next update: Mon 28 Jul 2025 01:00:33 +0000
Files and hashes: 1: N-nPI1g49f7ETAzdIo5yjbOdZtM.roa (hash: qC00kLedLYSFjjH9iYQzP0HBmWb73ml/Yv/mqD1i4KU=)
2: fv0GFD_AZHwLWR5yvJcFyEMzZds.roa (hash: +P74mB+NlndUj38u1gR6So/MVR2zQW1aNy+V6Ba/PBg=)
3: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl (hash: tPCeJMWoWQecwgWI4496DSkkpVhqI+6/1/p/qa4qUw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:51:4b:92:9b:76:6c:7f:bb:76:df:be:98:6c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Validity
Not Before: Jul 27 01:00:33 2025 GMT
Not After : Jul 28 01:00:33 2025 GMT
Subject: CN=9f83162557f3ff3d70eebbda9393b2f1a7634eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:c8:df:7e:b8:82:f1:ac:69:76:dc:cd:12:
3f:5e:9a:77:ba:3e:95:cf:47:4c:c4:49:94:62:bf:
b2:80:f9:c9:1a:36:93:dc:97:15:f3:2f:90:8d:95:
ab:28:d3:62:7a:10:6a:68:50:d4:10:2e:bf:32:10:
01:2a:a7:64:27:13:31:59:65:eb:93:f8:10:84:b6:
d9:5b:63:17:d1:18:16:30:0b:ac:30:71:0d:3c:c8:
0e:51:10:77:4d:b7:b4:54:66:ba:48:5e:8b:68:c4:
f6:81:ba:27:9d:30:cc:8c:dc:97:77:c7:24:7b:8f:
e4:34:77:64:cb:92:7f:b3:93:8e:b6:17:c2:a2:90:
24:1e:99:25:30:58:e4:87:fe:d4:81:a4:0b:92:3b:
db:38:7d:0b:8d:5b:db:58:84:f1:89:f7:77:63:17:
7a:9f:76:f4:a6:02:ce:2a:1e:23:86:b1:bc:e0:93:
a7:9c:c4:42:2f:34:74:79:01:7f:b1:16:3c:a2:ad:
fc:ac:ba:55:21:6d:bb:d4:94:0f:fa:a4:7c:c3:32:
2b:93:73:5c:3f:92:72:a7:be:73:d1:8a:66:6f:23:
de:d5:45:d9:ee:95:db:f4:3e:e8:08:4d:1d:63:4a:
4e:1d:c9:4d:75:f9:42:61:c8:0c:29:30:aa:37:68:
db:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:83:16:25:57:F3:FF:3D:70:EE:BB:DA:93:93:B2:F1:A7:63:4E:B9
X509v3 Authority Key Identifier:
keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:88:28:33:77:00:1d:8a:64:6f:9d:97:59:29:4d:db:df:7c:
b0:c6:6a:de:63:60:54:36:48:d1:68:7e:ab:de:81:ca:a4:ed:
35:26:c1:01:9f:7b:d4:93:60:ec:69:4d:13:d7:92:72:c0:ca:
a5:e5:6a:02:4b:48:b4:9e:7c:f6:96:c5:f3:77:e0:90:23:7d:
40:64:f3:cf:a0:ce:cd:9d:6a:a6:d2:73:51:2d:68:a6:09:d7:
3a:5b:f1:24:ff:88:82:2a:6e:1e:4f:c4:19:48:9f:37:20:fc:
e3:6e:01:c9:83:ee:a6:33:f2:00:ba:d9:59:b0:cd:8b:e2:b3:
14:55:18:f7:32:9b:41:0d:67:08:d6:d7:98:dd:ca:c5:b6:54:
10:42:72:d0:76:7c:8e:0e:20:1c:2e:f5:72:cf:f3:ad:50:88:
19:f4:73:8a:01:b8:37:a8:44:80:f7:72:03:ea:46:96:db:13:
ca:44:a1:5c:ea:cd:5c:26:69:8b:fe:04:6a:5c:76:2f:a0:1b:
20:ea:08:0e:d2:14:0f:6e:e6:f2:24:b0:60:7c:d9:72:60:b3:
02:b6:db:73:e8:1e:66:d8:6b:26:c3:a3:ae:d5:5a:47:bf:6a:
4e:cc:b6:f2:ca:d5:da:0b:4e:45:a5:a3:5f:f2:17:03:ee:57:
03:0e:d5:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZVFLkpt2bH+7dt++mGyuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4Nzc1MDAzZjdkOWU4ZTZlMWVmNDhkYjA2NzI4ZTY2OGVk
MTg3YmMwHhcNMjUwNzI3MDEwMDMzWhcNMjUwNzI4MDEwMDMzWjAzMTEwLwYDVQQD
Eyg5ZjgzMTYyNTU3ZjNmZjNkNzBlZWJiZGE5MzkzYjJmMWE3NjM0ZWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+TI3364gvGsaXbczRI/Xpp3uj6V
z0dMxEmUYr+ygPnJGjaT3JcV8y+QjZWrKNNiehBqaFDUEC6/MhABKqdkJxMxWWXr
k/gQhLbZW2MX0RgWMAusMHENPMgOURB3Tbe0VGa6SF6LaMT2gbonnTDMjNyXd8ck
e4/kNHdky5J/s5OOthfCopAkHpklMFjkh/7UgaQLkjvbOH0LjVvbWITxifd3Yxd6
n3b0pgLOKh4jhrG84JOnnMRCLzR0eQF/sRY8oq38rLpVIW271JQP+qR8wzIrk3Nc
P5Jyp75z0YpmbyPe1UXZ7pXb9D7oCE0dY0pOHclNdflCYcgMKTCqN2jbRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+DFiVX8/89cO672pOTsvGnY065MB8GA1UdIwQY
MBaAFIh3UAP32ejm4e9I2wZyjmaO0Ye8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi85YjhkM2ItMGMwMy00NTkxLWJkMGYt
ODc3NTBkNmY3N2E4LzEvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi85YjhkM2ItMGMwMy00NTkxLWJkMGYtODc3NTBkNmY3N2E4
LzEvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWYgoM3cA
HYpkb52XWSlN2998sMZq3mNgVDZI0Wh+q96ByqTtNSbBAZ971JNg7GlNE9eScsDK
peVqAktItJ589pbF83fgkCN9QGTzz6DOzZ1qptJzUS1opgnXOlvxJP+IgipuHk/E
GUifNyD8424ByYPupjPyALrZWbDNi+KzFFUY9zKbQQ1nCNbXmN3KxbZUEEJy0HZ8
jg4gHC71cs/zrVCIGfRzigG4N6hEgPdyA+pGltsTykShXOrNXCZpi/4Ealx2L6Ab
IOoIDtIUD27m8iSwYHzZcmCzArbbc+geZthrJsOjrtVaR79qTsy28srV2gtORaWj
X/IXA+5XAw7VBQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:26:29 2025 by rpki-client