Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
File: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft (raw, json)
Hash identifier: O6804n1Ippn/HlP5IzkFCo7pDw1do5kMmXw9HrIv0lQ=
Subject key identifier: F7:5F:63:26:C9:3C:15:F0:F5:94:5D:B8:B1:27:BA:8E:E3:93:09:FD
Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
Certificate issuer: /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Certificate serial: 0197488CB6EEE9B9645672319191260757B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
Manifest number: 0C4D
Signing time: Sat 07 Jun 2025 04:01:10 +0000
Manifest this update: Sat 07 Jun 2025 04:01:10 +0000
Manifest next update: Sun 08 Jun 2025 04:01:10 +0000
Files and hashes: 1: N-nPI1g49f7ETAzdIo5yjbOdZtM.roa (hash: qC00kLedLYSFjjH9iYQzP0HBmWb73ml/Yv/mqD1i4KU=)
2: fv0GFD_AZHwLWR5yvJcFyEMzZds.roa (hash: +P74mB+NlndUj38u1gR6So/MVR2zQW1aNy+V6Ba/PBg=)
3: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl (hash: S12wMq1MvHZwkdWv0wCxMg36nRt+9TVjzut0IUb7Umk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:b6:ee:e9:b9:64:56:72:31:91:91:26:07:57:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Validity
Not Before: Jun 7 04:01:10 2025 GMT
Not After : Jun 8 04:01:10 2025 GMT
Subject: CN=f75f6326c93c15f0f5945db8b127ba8ee39309fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:26:08:9c:4f:9e:e1:72:d9:57:e7:f7:42:19:
60:01:9a:1e:ec:1f:c2:fe:dc:d2:2c:5e:8b:27:29:
9c:7f:99:ab:51:f1:e5:5b:30:b8:8d:de:d5:72:f2:
23:cb:bf:d0:7f:21:89:b4:24:4f:fa:9d:6e:86:78:
7e:9d:eb:e4:ae:04:81:66:8b:3b:ad:ef:a1:f3:f7:
cb:f7:80:04:48:e0:6d:58:12:26:d3:7d:2b:6b:76:
d5:5b:e4:eb:98:5a:c4:c7:27:0a:d6:ff:a1:75:d1:
4e:5e:fe:7d:72:17:13:0e:5a:d7:cb:30:bb:10:24:
f0:72:f9:b0:8d:54:39:18:5e:d5:56:d8:e5:26:b2:
df:13:c7:59:43:7a:db:78:2e:12:5b:fa:1b:b0:f3:
0a:77:f2:62:8f:6d:48:0f:35:b5:36:7f:2c:e2:87:
59:ae:fe:92:0a:e1:30:99:11:02:2c:fa:8f:f6:31:
79:38:cc:fb:05:da:2b:9c:07:8a:14:ab:16:a1:87:
83:fe:13:63:73:09:be:74:21:c1:24:cf:4c:a6:44:
d0:8b:77:8c:63:ee:1c:c7:b5:38:59:fc:e2:86:75:
85:3a:44:7b:66:62:da:27:2d:01:75:df:b1:df:37:
4f:68:05:f9:93:25:74:f2:49:b7:27:53:56:51:a3:
3d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5F:63:26:C9:3C:15:F0:F5:94:5D:B8:B1:27:BA:8E:E3:93:09:FD
X509v3 Authority Key Identifier:
keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:71:92:1b:7a:f8:95:b8:04:24:61:12:93:df:6a:1d:f5:17:
21:18:b4:e4:bc:61:f0:55:ea:da:45:20:f2:95:ab:da:47:19:
32:94:74:39:a5:86:e3:e4:00:e4:1d:ea:e0:89:84:3f:aa:fd:
38:b0:70:f2:48:01:4a:80:a2:06:a2:72:9f:29:df:cb:52:d1:
ae:b0:c1:48:72:12:63:3f:5d:af:00:b8:c3:bc:74:a4:70:99:
92:f7:a6:29:ed:59:ac:a3:28:64:9b:45:2a:00:45:b0:7c:11:
60:8f:c1:cf:e9:b5:28:91:b8:d2:a8:54:e5:5a:c3:30:e9:ed:
0c:cb:23:a1:f8:de:3c:5a:30:17:a3:22:91:c5:48:d0:2b:5d:
46:75:f4:c6:2c:75:33:9e:81:61:b7:44:76:dd:a0:70:7b:4a:
97:ee:62:dd:d3:d2:00:ad:a8:fb:d9:4b:25:11:8a:4a:fe:4c:
fd:2e:aa:0a:a0:b8:a8:12:5b:d7:06:48:e7:f5:43:36:ed:cd:
e7:d8:63:30:fe:0e:a4:08:36:d2:5f:92:09:9d:a3:ed:0b:a2:
e6:db:4f:9f:c6:76:70:84:8c:c7:3c:c0:bc:3f:57:cb:92:99:
b0:10:d1:f5:35:fa:da:5d:47:fb:97:01:c3:4c:25:3e:de:84:
ad:67:a1:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjLbu6blkVnIxkZEmB1e3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4Nzc1MDAzZjdkOWU4ZTZlMWVmNDhkYjA2NzI4ZTY2OGVk
MTg3YmMwHhcNMjUwNjA3MDQwMTEwWhcNMjUwNjA4MDQwMTEwWjAzMTEwLwYDVQQD
EyhmNzVmNjMyNmM5M2MxNWYwZjU5NDVkYjhiMTI3YmE4ZWUzOTMwOWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCYInE+e4XLZV+f3QhlgAZoe7B/C
/tzSLF6LJymcf5mrUfHlWzC4jd7VcvIjy7/QfyGJtCRP+p1uhnh+nevkrgSBZos7
re+h8/fL94AESOBtWBIm030ra3bVW+TrmFrExycK1v+hddFOXv59chcTDlrXyzC7
ECTwcvmwjVQ5GF7VVtjlJrLfE8dZQ3rbeC4SW/obsPMKd/Jij21IDzW1Nn8s4odZ
rv6SCuEwmRECLPqP9jF5OMz7BdornAeKFKsWoYeD/hNjcwm+dCHBJM9MpkTQi3eM
Y+4cx7U4WfzihnWFOkR7ZmLaJy0Bdd+x3zdPaAX5kyV08km3J1NWUaM93wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdfYybJPBXw9ZRduLEnuo7jkwn9MB8GA1UdIwQY
MBaAFIh3UAP32ejm4e9I2wZyjmaO0Ye8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi85YjhkM2ItMGMwMy00NTkxLWJkMGYt
ODc3NTBkNmY3N2E4LzEvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi85YjhkM2ItMGMwMy00NTkxLWJkMGYtODc3NTBkNmY3N2E4
LzEvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkXGSG3r4
lbgEJGESk99qHfUXIRi05Lxh8FXq2kUg8pWr2kcZMpR0OaWG4+QA5B3q4ImEP6r9
OLBw8kgBSoCiBqJynynfy1LRrrDBSHISYz9drwC4w7x0pHCZkvemKe1ZrKMoZJtF
KgBFsHwRYI/Bz+m1KJG40qhU5VrDMOntDMsjofjePFowF6MikcVI0CtdRnX0xix1
M56BYbdEdt2gcHtKl+5i3dPSAK2o+9lLJRGKSv5M/S6qCqC4qBJb1wZI5/VDNu3N
59hjMP4OpAg20l+SCZ2j7Qui5ttPn8Z2cISMxzzAvD9Xy5KZsBDR9TX62l1H+5cB
w0wlPt6ErWehIw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:18:14 2025 by rpki-client