Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
File: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft (raw, json)
Hash identifier: EHy7otLzEbw+dzciBoR4AWV11pHEiyjfpLJYetfH1Fc=
Subject key identifier: DB:F9:E9:F5:E6:B4:87:7A:30:05:CE:81:C9:36:8A:A6:18:1D:A6:0F
Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
Certificate issuer: /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Certificate serial: 019A13160CCD1A70677BF0AC660375E3DE04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
Manifest number: 0DBF
Signing time: Thu 23 Oct 2025 22:00:03 +0000
Manifest this update: Thu 23 Oct 2025 22:00:03 +0000
Manifest next update: Fri 24 Oct 2025 22:00:03 +0000
Files and hashes: 1: N-nPI1g49f7ETAzdIo5yjbOdZtM.roa (hash: qC00kLedLYSFjjH9iYQzP0HBmWb73ml/Yv/mqD1i4KU=)
2: fv0GFD_AZHwLWR5yvJcFyEMzZds.roa (hash: +P74mB+NlndUj38u1gR6So/MVR2zQW1aNy+V6Ba/PBg=)
3: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl (hash: Go3tL4714kA4r129VZ/Y0DEflicagVQasi3deDlInwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:16:0c:cd:1a:70:67:7b:f0:ac:66:03:75:e3:de:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Validity
Not Before: Oct 23 22:00:03 2025 GMT
Not After : Oct 24 22:00:03 2025 GMT
Subject: CN=dbf9e9f5e6b4877a3005ce81c9368aa6181da60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:06:93:be:fe:9b:87:51:e1:b2:7f:81:ce:c1:
a0:6a:05:a5:7f:f5:5d:cd:d3:e9:fa:09:66:01:3e:
5c:de:da:a8:70:e5:de:17:40:b0:ff:0b:f4:ff:e5:
20:8e:b0:42:1a:0e:c5:c4:07:ce:65:6c:28:97:f2:
54:c0:58:0d:1d:d1:9f:0d:49:bc:57:ad:a3:87:f7:
57:a5:ee:ce:09:09:ea:95:f2:49:42:e6:a8:cd:78:
fb:41:21:88:c8:cf:d1:1b:0c:2c:ab:7b:8d:b1:3c:
b7:0e:eb:f8:83:28:3b:bf:f1:41:7d:18:fc:27:b9:
bb:48:a0:99:e4:a2:1b:59:f0:0e:23:14:66:15:dd:
c6:3f:a4:c8:a4:19:af:3c:b5:87:84:34:e5:4f:0d:
d4:7c:64:87:7d:df:7f:14:20:e0:bc:9f:1c:6c:dd:
13:d0:5b:71:94:53:fd:ea:1d:7f:d7:93:b5:72:de:
78:8e:20:53:ed:82:44:79:f7:4f:b5:34:f4:92:9c:
08:c7:8e:bf:88:37:04:f8:1f:53:95:a7:af:bb:e3:
45:e8:4a:55:3c:66:f8:4e:71:14:17:2a:19:e3:24:
98:0d:8d:4a:e4:cb:b8:d4:9d:34:b4:87:72:89:cc:
fc:b4:f0:d3:12:30:d7:8a:3b:e7:63:61:44:d3:a7:
8c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F9:E9:F5:E6:B4:87:7A:30:05:CE:81:C9:36:8A:A6:18:1D:A6:0F
X509v3 Authority Key Identifier:
keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b0:2b:98:11:8a:26:d1:6a:ba:d5:ba:b0:e9:af:f0:42:e2:
23:ce:52:7f:c1:ec:bd:1f:b2:5d:a0:c3:79:74:94:73:da:84:
f7:15:b0:73:7a:27:d5:ba:e1:8d:a4:60:5d:98:83:af:1f:bf:
bd:f8:91:2a:bb:91:80:18:46:59:b9:c4:7e:ba:8e:d3:97:0e:
7e:7a:9c:92:00:72:ee:ca:98:c8:75:14:da:0a:c2:d5:9a:ec:
f8:a4:23:6a:8a:3c:8c:37:a7:46:ad:a2:82:7b:de:7e:1b:7b:
d1:6a:f5:08:ad:1a:63:20:c2:ef:97:07:a0:9c:77:04:01:12:
0c:6f:55:64:b5:ad:f2:b5:91:18:be:2c:ff:20:03:c4:eb:8b:
6d:ae:b6:40:9e:9a:75:7a:52:b8:3e:10:f3:af:66:b3:f0:1a:
dc:79:a7:d8:c1:b3:39:9c:9d:f9:56:51:60:a0:57:5b:25:53:
61:04:58:c3:13:ed:4b:9c:90:dc:97:54:a0:8e:19:84:27:03:
0a:d1:a1:78:e7:43:db:fc:07:c8:79:2d:0e:1f:d8:91:ec:d7:
a9:1c:85:ac:82:00:56:ef:bd:9a:c8:2b:9f:85:34:0b:dd:ed:
98:dc:63:11:6b:77:fb:40:59:b4:e0:44:db:25:35:c3:19:6b:
3d:97:1f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:30:18 2025 by rpki-client