Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
File: iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft (raw, json)
Hash identifier: 51EuVTpa9bKKfVJL7yleDaVf193yVIePX8Ho25rFqD4=
Subject key identifier: 6F:FA:ED:18:8A:9B:85:E6:8F:DB:92:41:75:B6:61:D9:FF:3F:0D:15
Authority key identifier: 88:F0:C1:D1:0E:4E:5A:71:E3:CD:5C:5D:6B:EE:BF:77:8A:06:E3:04
Certificate issuer: /CN=88f0c1d10e4e5a71e3cd5c5d6beebf778a06e304
Certificate serial: 01987F78FAFBC911B018AE69EB3856137ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 13:01:31 +0000
Manifest this update: Wed 06 Aug 2025 13:01:31 +0000
Manifest next update: Thu 07 Aug 2025 13:01:31 +0000
Files and hashes: 1: iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl (hash: 6Kd8RsEhLUJ2WUUQyW3SKw3z0zp9ZYRRvUpyyQxlW08=)
2: y8a09sHjWHM5T2xCi9njj3ZdPYg.roa (hash: CAxwtV7q/TGnHiFNWAua77bFrVfKg4wLI65YyM+74Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:78:fa:fb:c9:11:b0:18:ae:69:eb:38:56:13:7a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f0c1d10e4e5a71e3cd5c5d6beebf778a06e304
Validity
Not Before: Aug 6 13:01:31 2025 GMT
Not After : Aug 7 13:01:31 2025 GMT
Subject: CN=6ffaed188a9b85e68fdb924175b661d9ff3f0d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:86:74:c9:ea:44:db:46:74:a6:ef:26:d6:f9:
26:6c:88:bd:5d:05:83:3e:ca:fa:88:59:a3:0d:e4:
dd:87:c3:a1:62:ea:da:95:5e:8a:b9:5e:f4:19:59:
b5:58:49:74:d2:98:f0:a1:75:9f:33:ed:c8:e5:7c:
70:0c:85:0f:b0:b6:ca:6f:a2:fe:c9:bc:74:bd:94:
05:41:90:0c:db:4b:59:18:8d:00:28:52:a0:c6:ec:
49:76:9c:bd:fc:d9:f6:de:99:31:07:a5:eb:03:91:
2e:9e:23:6f:7d:76:0a:0c:36:16:86:40:af:27:11:
cf:46:5d:2f:68:47:b3:b2:ca:ad:e5:97:61:92:93:
17:bd:07:74:4c:bd:3d:bf:ed:bc:3a:14:ab:e3:f1:
39:22:2f:36:c3:04:2b:00:b4:80:5c:b5:36:a5:51:
6d:6a:5c:dc:45:a4:d7:d4:b3:6f:d9:eb:09:c5:50:
30:53:e4:54:8f:4a:88:b7:8d:68:bc:c4:ee:5c:f2:
9f:37:a1:96:0e:be:a0:fc:87:27:05:b7:9d:76:e3:
9e:d1:f8:ff:f4:a4:81:c3:08:27:03:d4:49:f5:a9:
d7:a8:c8:0f:b0:29:6c:bb:12:46:59:52:a8:f3:a8:
9f:7f:5c:c6:af:3a:2b:26:c3:a4:f8:5c:44:ef:71:
6e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FA:ED:18:8A:9B:85:E6:8F:DB:92:41:75:B6:61:D9:FF:3F:0D:15
X509v3 Authority Key Identifier:
keyid:88:F0:C1:D1:0E:4E:5A:71:E3:CD:5C:5D:6B:EE:BF:77:8A:06:E3:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:11:5e:cc:a7:3f:d9:1c:b7:c9:59:41:93:ee:d5:4a:eb:d5:
7a:2b:42:59:ad:68:7a:fb:a9:9e:26:41:a6:cf:15:c1:42:56:
c4:8a:97:8c:ef:36:2b:fa:4d:4c:4d:ba:17:2c:ed:ae:82:f1:
0c:f4:2e:e4:13:a1:28:17:fa:72:e6:90:7c:fa:f4:17:37:50:
da:58:95:a9:31:22:4d:b1:6d:46:e9:32:a1:94:44:af:94:85:
a8:4c:ea:fa:8e:e3:33:36:16:54:73:5d:30:ef:66:dd:7c:e3:
b3:08:60:53:d4:45:9e:88:66:4d:52:c1:3c:19:8f:ad:54:7b:
21:dc:a9:96:76:d5:a3:6e:a4:d7:c9:05:b4:d3:6c:07:75:e3:
81:49:58:25:10:82:b2:16:4a:18:f4:0f:fc:54:c1:de:10:96:
a7:12:97:32:dd:27:be:77:c6:3e:1b:2d:2a:dc:30:8a:33:9e:
e0:4e:f7:b8:25:9e:8f:26:c4:38:8b:a2:db:f3:41:d9:3a:1d:
c2:a6:c1:a4:d3:63:88:ec:b9:9e:21:05:65:50:ba:76:81:e9:
ad:51:62:38:37:16:32:fc:57:d4:67:db:92:81:6d:b8:5f:63:
c0:fb:19:75:cf:fa:db:6a:68:dc:37:54:70:2c:39:0e:79:e0:
c6:59:90:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:14:50 2025 by rpki-client