Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
File: iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft (raw, json)
Hash identifier: NyrN0KnKwFYwPabPLb6r+3RCIoZyQWHvimlFJ6jW1bU=
Subject key identifier: 0C:30:16:93:7D:22:DD:12:6F:C9:14:2F:CE:1F:BE:02:D5:C6:69:07
Authority key identifier: 88:F0:C1:D1:0E:4E:5A:71:E3:CD:5C:5D:6B:EE:BF:77:8A:06:E3:04
Certificate issuer: /CN=88f0c1d10e4e5a71e3cd5c5d6beebf778a06e304
Certificate serial: 0199FDDA2ADD6E4197C22737AB517EBB369C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 19:02:37 +0000
Manifest this update: Sun 19 Oct 2025 19:02:37 +0000
Manifest next update: Mon 20 Oct 2025 19:02:37 +0000
Files and hashes: 1: iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl (hash: CPQxClO2vuGVdtkJIwqnj9BRrV8mh0dJG5gPR+vsi7g=)
2: y8a09sHjWHM5T2xCi9njj3ZdPYg.roa (hash: CAxwtV7q/TGnHiFNWAua77bFrVfKg4wLI65YyM+74Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:2a:dd:6e:41:97:c2:27:37:ab:51:7e:bb:36:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f0c1d10e4e5a71e3cd5c5d6beebf778a06e304
Validity
Not Before: Oct 19 19:02:37 2025 GMT
Not After : Oct 20 19:02:37 2025 GMT
Subject: CN=0c3016937d22dd126fc9142fce1fbe02d5c66907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:06:95:37:0e:2f:d9:82:f3:51:f2:f0:e2:75:
00:f9:fc:16:56:7f:8f:a9:d2:98:5e:f1:76:52:38:
de:64:07:1d:be:27:67:92:84:a7:8e:3a:16:3f:0c:
ac:17:1c:a9:d1:c1:50:83:f7:07:0b:88:f9:8e:9a:
a4:59:a1:7e:3f:63:22:bc:1f:eb:57:15:39:8a:f5:
cf:6d:5d:fb:2a:30:c2:25:48:c5:b7:6d:aa:de:f6:
6a:6d:86:39:c8:6a:c8:ac:0b:f1:e1:70:f2:0b:84:
95:48:89:5e:95:07:d7:f1:a7:53:2b:ea:18:a5:4f:
e7:11:4e:21:cd:a6:1d:a2:df:f4:75:3b:f4:3f:66:
3a:d8:02:05:0d:2a:05:65:fe:07:62:08:c2:fe:b8:
9f:33:eb:6b:9a:d9:ae:4c:4f:94:08:c7:61:ff:04:
6a:4c:bd:e7:04:5a:87:e6:03:e6:1b:7e:41:6e:56:
71:a4:cd:3b:ad:2a:0f:01:95:bc:ae:47:12:9d:24:
c7:0d:ef:62:09:07:f2:51:b2:9e:63:31:3e:61:4f:
13:61:12:a8:fe:b1:9d:a6:db:09:83:0b:1c:bd:97:
ae:72:68:12:42:1d:91:b5:61:38:85:94:80:db:57:
93:c5:e2:e0:c0:3b:ee:4d:7a:ef:d9:a5:3f:79:ff:
55:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:30:16:93:7D:22:DD:12:6F:C9:14:2F:CE:1F:BE:02:D5:C6:69:07
X509v3 Authority Key Identifier:
keyid:88:F0:C1:D1:0E:4E:5A:71:E3:CD:5C:5D:6B:EE:BF:77:8A:06:E3:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:79:cc:7b:87:87:b5:49:92:89:35:3e:b8:a0:e7:a3:bc:e0:
7c:8b:82:1f:67:f1:12:8e:d1:98:c9:6a:44:47:39:40:34:a1:
ca:d7:4d:02:07:1c:e7:c9:18:5a:e3:d7:b9:41:f7:c3:dc:49:
9e:88:89:4a:f1:3b:de:c3:b3:c7:b8:58:d5:31:ce:36:69:69:
ca:64:06:6f:10:44:37:01:de:5f:40:04:55:df:52:a8:17:6b:
5d:2d:52:6a:12:67:d7:89:01:8c:31:69:7b:5f:7c:b9:6f:c3:
f1:c8:c5:49:bb:ce:42:70:4b:99:4c:ea:8b:d1:ce:1c:5c:d0:
5c:d2:1d:54:5f:18:0d:7c:60:7e:30:e2:8a:56:ec:95:9e:4a:
e7:07:d3:c6:ba:af:3f:bc:d7:3e:d7:bf:04:05:6c:7b:5b:a3:
7a:7b:34:32:f2:fd:13:57:f1:ca:3c:a1:ba:44:05:a2:4c:8e:
29:8a:30:d2:1f:be:bf:d5:07:cc:1f:23:cf:95:dd:28:ff:84:
6a:af:10:c1:94:fc:2b:0d:8c:e2:c4:24:c5:68:eb:f6:ce:f7:
d7:48:d1:60:57:b8:c6:23:bf:73:98:27:33:c4:15:9f:83:09:
ba:ae:2a:79:cc:7b:92:ac:9a:1a:48:7d:8b:89:80:80:de:ff:
02:3c:1d:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92irdbkGXwic3q1F+uzacMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZjBjMWQxMGU0ZTVhNzFlM2NkNWM1ZDZiZWViZjc3OGEw
NmUzMDQwHhcNMjUxMDE5MTkwMjM3WhcNMjUxMDIwMTkwMjM3WjAzMTEwLwYDVQQD
EygwYzMwMTY5MzdkMjJkZDEyNmZjOTE0MmZjZTFmYmUwMmQ1YzY2OTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQaVNw4v2YLzUfLw4nUA+fwWVn+P
qdKYXvF2UjjeZAcdvidnkoSnjjoWPwysFxyp0cFQg/cHC4j5jpqkWaF+P2MivB/r
VxU5ivXPbV37KjDCJUjFt22q3vZqbYY5yGrIrAvx4XDyC4SVSIlelQfX8adTK+oY
pU/nEU4hzaYdot/0dTv0P2Y62AIFDSoFZf4HYgjC/rifM+trmtmuTE+UCMdh/wRq
TL3nBFqH5gPmG35BblZxpM07rSoPAZW8rkcSnSTHDe9iCQfyUbKeYzE+YU8TYRKo
/rGdptsJgwscvZeucmgSQh2RtWE4hZSA21eTxeLgwDvuTXrv2aU/ef9VXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwwFpN9It0Sb8kUL84fvgLVxmkHMB8GA1UdIwQY
MBaAFIjwwdEOTlpx481cXWvuv3eKBuMEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVBEQjBRNU9XbkhqelZ4ZGEtNl9kNG9HNHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80MjY2NGEtMGY0Ny00OWE2LWI3Mzct
YjI4ZGY4NTU5NTI5LzEvaVBEQjBRNU9XbkhqelZ4ZGEtNl9kNG9HNHdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC80MjY2NGEtMGY0Ny00OWE2LWI3MzctYjI4ZGY4NTU5NTI5
LzEvaVBEQjBRNU9XbkhqelZ4ZGEtNl9kNG9HNHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALHnMe4eH
tUmSiTU+uKDno7zgfIuCH2fxEo7RmMlqREc5QDShytdNAgcc58kYWuPXuUH3w9xJ
noiJSvE73sOzx7hY1THONmlpymQGbxBENwHeX0AEVd9SqBdrXS1SahJn14kBjDFp
e198uW/D8cjFSbvOQnBLmUzqi9HOHFzQXNIdVF8YDXxgfjDiilbslZ5K5wfTxrqv
P7zXPte/BAVse1ujens0MvL9E1fxyjyhukQFokyOKYow0h++v9UHzB8jz5XdKP+E
aq8QwZT8Kw2M4sQkxWjr9s7310jRYFe4xiO/c5gnM8QVn4MJuq4qecx7kqyaGkh9
i4mAgN7/Ajwd5w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:45:34 2025 by rpki-client