Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
File: iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft (raw, json)
Hash identifier: tyZ+fxAs1VB+loyvQfD0/jCUn5b70s3Af3BtDByXHhw=
Subject key identifier: 41:4D:95:E0:17:2B:39:FB:5E:BB:40:C2:ED:B3:6F:92:F7:18:95:06
Authority key identifier: 88:F0:C1:D1:0E:4E:5A:71:E3:CD:5C:5D:6B:EE:BF:77:8A:06:E3:04
Certificate issuer: /CN=88f0c1d10e4e5a71e3cd5c5d6beebf778a06e304
Certificate serial: 0196BF3803ED1CDA82521C6C969B93A0BBBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 12:00:41 +0000
Manifest this update: Sun 11 May 2025 12:00:41 +0000
Manifest next update: Mon 12 May 2025 12:00:41 +0000
Files and hashes: 1: iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl (hash: LIty1Zf3z4RW8H5CxLDbYaBQrwr74IRxwcDjXdxzKpU=)
2: y8a09sHjWHM5T2xCi9njj3ZdPYg.roa (hash: CAxwtV7q/TGnHiFNWAua77bFrVfKg4wLI65YyM+74Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:38:03:ed:1c:da:82:52:1c:6c:96:9b:93:a0:bb:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f0c1d10e4e5a71e3cd5c5d6beebf778a06e304
Validity
Not Before: May 11 12:00:41 2025 GMT
Not After : May 12 12:00:41 2025 GMT
Subject: CN=414d95e0172b39fb5ebb40c2edb36f92f7189506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ee:65:ea:dc:a0:ec:5f:00:9c:b6:de:11:2e:
16:5b:40:1e:fa:8f:1c:01:0e:de:7b:6e:50:5a:98:
a8:7c:51:a4:69:a9:5b:3c:df:df:cc:ff:39:55:fb:
17:b0:c9:8e:33:fe:72:fd:7a:fb:c2:35:3c:de:be:
f5:6f:4e:4d:57:cf:5f:fa:ae:8e:c5:f9:22:d1:43:
61:03:29:45:b8:3e:29:11:66:74:54:f7:d0:1d:42:
fd:85:3e:60:a2:bc:c7:06:d2:d5:88:aa:23:d8:80:
89:22:75:71:d2:9c:a7:b7:d1:bd:e8:f1:bc:cb:6b:
51:ec:6d:a4:58:9b:73:d2:da:b6:c5:e5:2e:85:4d:
ed:88:bd:93:56:9c:e5:fa:96:53:13:b1:eb:bd:46:
88:79:55:41:53:67:88:5d:e1:62:f4:4e:ff:3b:b0:
f0:5d:28:0c:cd:1a:aa:aa:a8:e1:d2:c7:57:af:ac:
5b:a9:fa:c2:9a:ae:05:02:f1:3e:a3:66:33:7b:0e:
d6:9e:c7:8c:b1:5c:8a:ef:1a:29:45:a6:ae:5d:36:
75:1e:0f:cb:8d:fe:c9:be:26:a1:9f:ca:37:49:67:
fe:44:70:22:c5:fd:5b:69:ac:93:f7:8f:a2:34:05:
9e:76:9b:de:1a:66:64:45:f6:19:a2:43:33:6f:c7:
1d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4D:95:E0:17:2B:39:FB:5E:BB:40:C2:ED:B3:6F:92:F7:18:95:06
X509v3 Authority Key Identifier:
keyid:88:F0:C1:D1:0E:4E:5A:71:E3:CD:5C:5D:6B:EE:BF:77:8A:06:E3:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:0f:8d:6c:02:fa:43:be:27:e9:09:4e:8f:da:c6:ee:60:7a:
c2:22:3d:d6:48:43:33:21:7c:be:b2:82:ce:0f:0f:aa:e1:46:
61:e9:1c:61:8b:3a:48:bd:72:d3:4b:87:18:d2:ee:56:4c:7e:
e5:3a:9d:cf:e0:37:e5:63:cf:5b:ff:01:14:32:80:3d:36:2a:
a5:3e:71:85:cb:db:f7:e5:64:4d:7d:bd:b5:7a:8a:16:b9:c8:
93:d9:6a:c3:6c:01:e1:16:c7:c8:2f:bb:82:27:77:d9:25:2a:
96:7b:17:0a:36:d9:83:e6:3c:1e:05:76:7e:76:63:70:d7:ac:
22:69:76:b9:ce:29:85:e5:c7:c1:66:af:74:63:6e:6c:78:23:
6a:78:71:0c:93:fa:2d:1e:6b:25:dd:57:4b:b5:74:1f:d9:e6:
a0:d7:b1:02:19:a0:b8:2c:a4:51:7f:96:89:a0:d2:51:a6:91:
b2:a3:4a:59:9b:42:ee:b0:f9:43:54:75:dd:9b:c2:19:e8:4c:
fb:ca:b9:39:1f:65:a1:8f:bd:9b:a5:c0:36:4c:7e:9a:56:fb:
dd:d3:68:2c:bc:b7:d2:20:b8:b4:35:96:c2:a2:7b:cf:62:00:
bc:52:86:89:ea:0e:e0:eb:59:bd:ee:70:f6:78:a4:9f:83:b4:
17:89:29:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/OAPtHNqCUhxslpuToLu7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZjBjMWQxMGU0ZTVhNzFlM2NkNWM1ZDZiZWViZjc3OGEw
NmUzMDQwHhcNMjUwNTExMTIwMDQxWhcNMjUwNTEyMTIwMDQxWjAzMTEwLwYDVQQD
Eyg0MTRkOTVlMDE3MmIzOWZiNWViYjQwYzJlZGIzNmY5MmY3MTg5NTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O5l6tyg7F8AnLbeES4WW0Ae+o8c
AQ7ee25QWpiofFGkaalbPN/fzP85VfsXsMmOM/5y/Xr7wjU83r71b05NV89f+q6O
xfki0UNhAylFuD4pEWZ0VPfQHUL9hT5gorzHBtLViKoj2ICJInVx0pynt9G96PG8
y2tR7G2kWJtz0tq2xeUuhU3tiL2TVpzl+pZTE7HrvUaIeVVBU2eIXeFi9E7/O7Dw
XSgMzRqqqqjh0sdXr6xbqfrCmq4FAvE+o2Yzew7WnseMsVyK7xopRaauXTZ1Hg/L
jf7Jviahn8o3SWf+RHAixf1baayT94+iNAWedpveGmZkRfYZokMzb8cdVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFNleAXKzn7XrtAwu2zb5L3GJUGMB8GA1UdIwQY
MBaAFIjwwdEOTlpx481cXWvuv3eKBuMEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVBEQjBRNU9XbkhqelZ4ZGEtNl9kNG9HNHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80MjY2NGEtMGY0Ny00OWE2LWI3Mzct
YjI4ZGY4NTU5NTI5LzEvaVBEQjBRNU9XbkhqelZ4ZGEtNl9kNG9HNHdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC80MjY2NGEtMGY0Ny00OWE2LWI3MzctYjI4ZGY4NTU5NTI5
LzEvaVBEQjBRNU9XbkhqelZ4ZGEtNl9kNG9HNHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZA+NbAL6
Q74n6QlOj9rG7mB6wiI91khDMyF8vrKCzg8PquFGYekcYYs6SL1y00uHGNLuVkx+
5Tqdz+A35WPPW/8BFDKAPTYqpT5xhcvb9+VkTX29tXqKFrnIk9lqw2wB4RbHyC+7
gid32SUqlnsXCjbZg+Y8HgV2fnZjcNesIml2uc4pheXHwWavdGNubHgjanhxDJP6
LR5rJd1XS7V0H9nmoNexAhmguCykUX+WiaDSUaaRsqNKWZtC7rD5Q1R13ZvCGehM
+8q5OR9loY+9m6XANkx+mlb73dNoLLy30iC4tDWWwqJ7z2IAvFKGieoO4OtZve5w
9nikn4O0F4kp9w==
-----END CERTIFICATE-----
Generated at Sun May 11 21:22:32 2025 by rpki-client