Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
File: iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft (raw, json)
Hash identifier: bdVaay/DySpH+Ghnhs8Ecy/hF8VgGXjkWvpkYt02BkM=
Subject key identifier: F3:47:80:62:AB:D5:59:5B:07:CD:76:A1:6F:2A:F9:DC:8C:5A:E2:1B
Authority key identifier: 88:F0:C1:D1:0E:4E:5A:71:E3:CD:5C:5D:6B:EE:BF:77:8A:06:E3:04
Certificate issuer: /CN=88f0c1d10e4e5a71e3cd5c5d6beebf778a06e304
Certificate serial: 019748558D8745DA99AD52BEF5923E06511C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 03:00:55 +0000
Manifest this update: Sat 07 Jun 2025 03:00:55 +0000
Manifest next update: Sun 08 Jun 2025 03:00:55 +0000
Files and hashes: 1: iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl (hash: GnkanTCNkDG8PDvY24jyMFg0cunS3NCSnhj5G5BeTQM=)
2: y8a09sHjWHM5T2xCi9njj3ZdPYg.roa (hash: CAxwtV7q/TGnHiFNWAua77bFrVfKg4wLI65YyM+74Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:8d:87:45:da:99:ad:52:be:f5:92:3e:06:51:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f0c1d10e4e5a71e3cd5c5d6beebf778a06e304
Validity
Not Before: Jun 7 03:00:55 2025 GMT
Not After : Jun 8 03:00:55 2025 GMT
Subject: CN=f3478062abd5595b07cd76a16f2af9dc8c5ae21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e8:ab:ba:e6:9c:6d:2b:07:99:36:1c:2f:0c:
74:31:10:9b:64:59:c4:44:f7:ce:c7:01:9e:69:c2:
0e:9d:59:37:cb:a7:25:79:1d:10:41:97:04:a1:48:
89:ff:2d:82:89:8e:6a:92:4d:72:a6:b2:b0:d8:89:
93:73:07:7a:a4:1b:db:5c:18:7d:a1:43:9c:56:d7:
af:e5:81:24:2f:67:0a:52:15:da:a8:69:59:af:d6:
95:04:65:6b:4b:0d:4d:21:50:dc:fa:8b:6c:4b:3b:
94:ea:d3:f6:04:6b:b2:35:78:87:00:67:9d:1a:20:
fe:63:05:70:88:db:f4:1b:f9:9a:82:3a:13:bb:7f:
2f:fa:e8:da:07:13:07:67:8c:60:6c:3e:2e:03:db:
07:c5:69:d6:1e:ce:20:a3:41:c7:1e:79:4d:17:15:
e5:69:88:a7:62:b4:92:e9:cf:82:66:b4:4b:02:9b:
c9:99:4a:bf:c2:04:5a:5d:12:fb:22:77:ca:0b:ae:
04:39:14:6c:f9:67:f9:a5:32:a7:54:4b:3b:fa:86:
78:c8:5f:d3:07:04:64:76:62:91:0f:00:46:c9:7f:
70:dc:ff:e2:98:46:64:0a:75:90:e0:08:f8:0d:30:
03:ff:6b:38:d3:08:94:1a:19:07:26:4f:a2:a5:78:
0b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:47:80:62:AB:D5:59:5B:07:CD:76:A1:6F:2A:F9:DC:8C:5A:E2:1B
X509v3 Authority Key Identifier:
keyid:88:F0:C1:D1:0E:4E:5A:71:E3:CD:5C:5D:6B:EE:BF:77:8A:06:E3:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:fd:47:d4:a8:71:11:de:4f:a1:21:82:3f:73:d0:8d:c1:06:
c6:80:21:5d:28:29:bb:09:c4:4f:10:d0:61:79:0f:62:70:a8:
5a:00:fa:27:b6:de:f5:c3:b4:30:eb:bc:dc:56:4b:0a:2a:57:
12:39:31:c8:a6:cb:74:e6:8b:7e:c8:2d:c9:cd:b1:3e:27:e2:
23:4b:5c:0b:d0:02:90:92:dd:6f:a7:73:ff:af:94:a8:bd:c7:
c8:f5:8f:97:d0:0a:0c:e0:48:e8:b9:56:16:7f:ab:36:f5:2f:
5c:76:64:fa:cd:cf:93:27:7d:82:fe:e6:9b:69:88:34:ec:b7:
79:8b:68:6f:07:31:11:52:01:71:c8:28:8d:eb:29:36:8e:e3:
b6:8d:88:e1:00:32:b2:6d:2e:0a:17:34:d1:08:84:0f:7a:3d:
2a:d4:9c:3c:f9:77:90:e4:d0:fb:0f:4d:11:d8:a4:71:de:33:
10:f4:a7:58:9e:bc:2b:c6:72:3b:6d:dc:83:33:51:47:e5:cc:
0b:91:a9:7f:de:50:9b:27:b2:35:14:6a:1e:69:64:7a:78:16:
91:3a:59:38:73:c9:95:3c:08:1b:5f:67:21:65:fb:b7:f9:51:
cc:ae:82:8c:9c:00:a5:dd:f7:b7:61:4c:0f:75:84:4b:9a:83:
2d:dd:05:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:33:46 2025 by rpki-client