Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
File: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft (raw, json)
Hash identifier: PhsjgOe5DeIiW171gzQj2QhmivJ+whpJkXjPStylp8o=
Subject key identifier: B7:3E:02:DF:77:9E:4D:34:65:70:51:02:B6:C0:5C:68:C1:71:0C:03
Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
Certificate issuer: /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Certificate serial: 019A4F9933A9F246A0A340538B15836BBA79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
Manifest number: 0DDF
Signing time: Tue 04 Nov 2025 16:00:31 +0000
Manifest this update: Tue 04 Nov 2025 16:00:31 +0000
Manifest next update: Wed 05 Nov 2025 16:00:31 +0000
Files and hashes: 1: N-nPI1g49f7ETAzdIo5yjbOdZtM.roa (hash: qC00kLedLYSFjjH9iYQzP0HBmWb73ml/Yv/mqD1i4KU=)
2: S3WGMPY-OzezhDsk-gOqjIT9wqE.roa (hash: B0hQgvaTLIn8DwMEJturhomMZwtDUgE45NKruZhEvSo=)
3: fv0GFD_AZHwLWR5yvJcFyEMzZds.roa (hash: +P74mB+NlndUj38u1gR6So/MVR2zQW1aNy+V6Ba/PBg=)
4: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl (hash: bE5VPx/Qox+dNhh17VyDaRIz1q6lFBB39+MOIWv34gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:33:a9:f2:46:a0:a3:40:53:8b:15:83:6b:ba:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Validity
Not Before: Nov 4 16:00:31 2025 GMT
Not After : Nov 5 16:00:31 2025 GMT
Subject: CN=b73e02df779e4d3465705102b6c05c68c1710c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:56:ce:7c:8c:cf:a8:f6:3b:80:fd:96:62:3d:
67:88:8b:b8:1b:bf:c4:56:ae:0e:4f:0d:01:f3:95:
17:e8:71:65:40:f2:15:de:79:55:5b:c0:d3:af:77:
0d:96:3b:bf:76:73:65:0c:50:3d:f5:66:6a:9a:75:
3a:37:fb:e4:9d:bf:cf:ea:6f:7f:1c:37:b6:73:98:
fd:7a:a9:bf:9f:49:74:7f:d6:b9:52:61:17:24:a2:
02:27:59:00:c7:80:52:60:9e:7e:80:2b:93:33:63:
a2:f6:f8:30:d8:d3:e1:59:b5:b4:09:c1:5d:51:f9:
22:b3:e3:b0:64:49:85:ea:bd:00:3e:d5:57:d9:c8:
54:e3:55:41:fe:49:cc:64:64:60:69:0f:7f:e8:23:
e4:e4:1e:67:a2:75:f5:60:6e:ab:83:b4:74:0e:d4:
e0:d6:24:a9:38:a9:3a:80:e8:65:f5:c7:f0:83:13:
cf:e8:9e:c8:6f:98:b4:43:48:b9:28:ea:6d:cb:f9:
7f:56:61:87:e5:a4:6e:8a:3c:fa:7d:4c:59:ca:35:
e3:d0:fd:15:7f:ca:1c:8a:e8:5b:f1:74:1d:cb:05:
31:21:d0:21:43:9b:57:a2:45:42:9b:9d:82:5f:34:
dd:ce:0d:28:87:00:b1:b8:a6:c3:a9:ed:ec:bf:88:
d3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3E:02:DF:77:9E:4D:34:65:70:51:02:B6:C0:5C:68:C1:71:0C:03
X509v3 Authority Key Identifier:
keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:8f:a6:b2:e3:9a:18:7d:bb:a4:0c:02:1f:16:d0:a2:8c:28:
31:0d:bd:a2:c4:b0:57:92:41:ab:e9:ae:d1:90:13:36:b9:b9:
35:1b:f2:e5:d9:aa:39:44:c6:36:98:7b:b5:00:29:cb:73:33:
6a:03:4b:a7:dd:8c:17:de:92:20:47:c5:3a:03:80:a4:2f:49:
0f:ff:40:93:36:f9:7e:99:bc:ea:90:e3:a5:93:e2:18:9f:60:
43:71:3c:46:29:1f:3e:30:b0:bc:73:02:f6:97:7e:59:98:93:
6d:bb:29:a3:fc:35:2f:94:f4:eb:dd:a5:c8:66:46:cd:a8:17:
71:5d:38:16:b3:1b:71:11:19:50:95:2c:93:29:5d:8b:e0:18:
39:fc:d6:67:43:0e:a8:15:d8:14:2f:03:5f:bc:de:71:12:98:
d4:5a:6c:63:07:f6:16:2b:5a:51:4f:b7:56:b2:7d:b2:6d:c8:
cf:e7:04:f5:ec:30:4b:f0:41:c7:6b:23:70:ba:a5:64:46:d2:
ad:34:6c:a4:3c:48:05:a3:9a:0a:87:b0:2c:2a:d5:64:5c:c2:
55:04:9a:74:74:00:dc:06:c2:53:67:d4:e7:8a:89:ec:55:16:
00:c6:57:0a:96:7a:20:dd:3d:84:b0:56:f8:41:4b:d2:f7:2a:
fb:11:ed:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmTOp8kago0BTixWDa7p5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4Nzc1MDAzZjdkOWU4ZTZlMWVmNDhkYjA2NzI4ZTY2OGVk
MTg3YmMwHhcNMjUxMTA0MTYwMDMxWhcNMjUxMTA1MTYwMDMxWjAzMTEwLwYDVQQD
EyhiNzNlMDJkZjc3OWU0ZDM0NjU3MDUxMDJiNmMwNWM2OGMxNzEwYzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVbOfIzPqPY7gP2WYj1niIu4G7/E
Vq4OTw0B85UX6HFlQPIV3nlVW8DTr3cNlju/dnNlDFA99WZqmnU6N/vknb/P6m9/
HDe2c5j9eqm/n0l0f9a5UmEXJKICJ1kAx4BSYJ5+gCuTM2Oi9vgw2NPhWbW0CcFd
Ufkis+OwZEmF6r0APtVX2chU41VB/knMZGRgaQ9/6CPk5B5nonX1YG6rg7R0DtTg
1iSpOKk6gOhl9cfwgxPP6J7Ib5i0Q0i5KOpty/l/VmGH5aRuijz6fUxZyjXj0P0V
f8ociuhb8XQdywUxIdAhQ5tXokVCm52CXzTdzg0ohwCxuKbDqe3sv4jT3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLc+At93nk00ZXBRArbAXGjBcQwDMB8GA1UdIwQY
MBaAFIh3UAP32ejm4e9I2wZyjmaO0Ye8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi85YjhkM2ItMGMwMy00NTkxLWJkMGYt
ODc3NTBkNmY3N2E4LzEvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi85YjhkM2ItMGMwMy00NTkxLWJkMGYtODc3NTBkNmY3N2E4
LzEvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANo+msuOa
GH27pAwCHxbQoowoMQ29osSwV5JBq+mu0ZATNrm5NRvy5dmqOUTGNph7tQApy3Mz
agNLp92MF96SIEfFOgOApC9JD/9Akzb5fpm86pDjpZPiGJ9gQ3E8RikfPjCwvHMC
9pd+WZiTbbspo/w1L5T0692lyGZGzagXcV04FrMbcREZUJUskyldi+AYOfzWZ0MO
qBXYFC8DX7zecRKY1FpsYwf2FitaUU+3VrJ9sm3Iz+cE9ewwS/BBx2sjcLqlZEbS
rTRspDxIBaOaCoewLCrVZFzCVQSadHQA3AbCU2fU54qJ7FUWAMZXCpZ6IN09hLBW
+EFL0vcq+xHtOQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:45 2025 by rpki-client