Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
File: iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft (raw, json)
Hash identifier: jgrz3VTrdkytPXU2hgLkHi2SNZFVXENboKD2NWUAcUk=
Subject key identifier: F3:55:E5:E1:13:2E:89:E8:CF:1E:20:F8:32:0C:50:15:86:AD:21:C0
Authority key identifier: 88:F0:C1:D1:0E:4E:5A:71:E3:CD:5C:5D:6B:EE:BF:77:8A:06:E3:04
Certificate issuer: /CN=88f0c1d10e4e5a71e3cd5c5d6beebf778a06e304
Certificate serial: 01976929CD26CF1E2F677D130D278357262C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 12:00:36 +0000
Manifest this update: Fri 13 Jun 2025 12:00:36 +0000
Manifest next update: Sat 14 Jun 2025 12:00:36 +0000
Files and hashes: 1: iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl (hash: OIuCjt4ccvntenXWaNG5QSWX2sHa4Ud+TDQ6MmnAifE=)
2: y8a09sHjWHM5T2xCi9njj3ZdPYg.roa (hash: CAxwtV7q/TGnHiFNWAua77bFrVfKg4wLI65YyM+74Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:cd:26:cf:1e:2f:67:7d:13:0d:27:83:57:26:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f0c1d10e4e5a71e3cd5c5d6beebf778a06e304
Validity
Not Before: Jun 13 12:00:36 2025 GMT
Not After : Jun 14 12:00:36 2025 GMT
Subject: CN=f355e5e1132e89e8cf1e20f8320c501586ad21c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:80:9f:d7:e2:fb:c8:09:95:15:07:6b:71:3a:
11:24:6f:5f:e0:7e:bf:fd:de:3c:a8:ac:b7:3e:1f:
27:af:4a:cf:24:aa:f5:9c:f4:c0:af:d3:9d:9b:21:
64:af:27:bc:98:bd:d9:86:b9:68:8d:c0:ae:34:44:
15:2f:1a:75:85:67:3b:ce:3b:f9:d0:29:5d:bb:cc:
71:be:9c:5b:d8:64:cf:90:8b:76:c1:f9:1a:1b:b6:
42:ba:98:1d:04:03:dd:bd:df:91:dd:ad:79:0a:7c:
f8:ee:d2:a6:82:e4:8f:ef:82:05:31:5a:0d:73:7a:
f0:cb:92:b8:59:08:d0:a9:b9:20:04:15:ab:76:30:
c9:f2:eb:a5:1b:4e:c4:d1:53:2d:8e:55:c7:4f:ba:
8b:ed:59:90:1b:45:0f:aa:e0:54:e4:49:73:8e:0b:
55:1f:9c:29:3c:a8:7e:ab:82:32:10:b4:08:69:64:
f1:c9:cf:2b:0a:c8:37:3d:1e:67:c6:f5:53:fa:e4:
23:0a:c9:96:1f:30:1f:8d:b8:49:73:42:1e:09:76:
80:8f:01:c0:02:eb:d4:73:c4:43:73:15:e6:39:89:
aa:b5:0e:e7:68:3d:67:fc:0d:e8:ee:73:6d:c0:cf:
d8:00:73:a1:2e:21:86:ff:f3:f6:7f:fe:71:4e:be:
ab:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:55:E5:E1:13:2E:89:E8:CF:1E:20:F8:32:0C:50:15:86:AD:21:C0
X509v3 Authority Key Identifier:
keyid:88:F0:C1:D1:0E:4E:5A:71:E3:CD:5C:5D:6B:EE:BF:77:8A:06:E3:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e9:51:f0:3c:9f:44:64:b6:8a:db:d8:b9:b7:ed:77:36:83:
1d:26:98:ad:8d:e8:c6:84:0c:69:05:f0:f8:e8:77:66:03:62:
c8:b1:63:6c:7a:a0:d1:17:ad:62:a5:ce:14:4a:68:73:36:af:
c0:63:31:8b:64:fb:18:d7:ee:d3:44:34:61:2b:af:66:22:1b:
ec:aa:f3:b0:ab:36:c8:c3:f6:5d:5f:2c:e5:d7:a4:a9:b9:24:
3f:61:76:06:44:3a:b5:82:0e:46:29:57:99:4b:32:3c:8d:9e:
e0:43:bb:16:4a:49:4a:7d:e2:fb:b8:e9:b6:d6:ba:0b:34:c5:
5a:e6:ea:f5:31:22:c2:7c:bb:7f:92:1b:ef:18:ba:06:06:65:
89:84:21:91:c0:13:63:e1:44:c3:d0:2b:18:04:7a:4b:77:89:
55:3d:56:b2:fa:3b:8d:f4:25:e5:24:be:0b:4a:1d:8c:ea:26:
4c:86:71:56:29:4d:e7:46:21:cb:36:99:7d:12:d8:00:f2:65:
29:19:ef:41:59:b0:74:4c:96:aa:bb:1c:d8:cb:11:79:f1:fb:
04:8c:59:e8:66:bb:55:5e:92:40:7c:dc:a9:3c:35:09:f7:f1:
cc:1b:f5:85:6a:79:4e:5a:87:df:c7:eb:49:96:c3:8b:bd:b4:
ec:12:10:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:38:43 2025 by rpki-client