Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
File: iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft (raw, json)
Hash identifier: YRbdr+2l7KlHyfhRXbG2WWm/VGSUZ1Lx4BldARbLBSQ=
Subject key identifier: CA:8C:56:5A:DE:2C:B5:26:3E:24:98:D1:73:81:04:52:46:56:0B:68
Authority key identifier: 88:F0:C1:D1:0E:4E:5A:71:E3:CD:5C:5D:6B:EE:BF:77:8A:06:E3:04
Certificate issuer: /CN=88f0c1d10e4e5a71e3cd5c5d6beebf778a06e304
Certificate serial: 0198D472E816E0A533B80DCF47EF09DC4E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:02:36 +0000
Manifest this update: Sat 23 Aug 2025 01:02:36 +0000
Manifest next update: Sun 24 Aug 2025 01:02:36 +0000
Files and hashes: 1: iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl (hash: Hql4MaPOwj74YguWhQJeWW0bDflUHd0nFAs0Wpz3DFQ=)
2: y8a09sHjWHM5T2xCi9njj3ZdPYg.roa (hash: CAxwtV7q/TGnHiFNWAua77bFrVfKg4wLI65YyM+74Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:e8:16:e0:a5:33:b8:0d:cf:47:ef:09:dc:4e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f0c1d10e4e5a71e3cd5c5d6beebf778a06e304
Validity
Not Before: Aug 23 01:02:36 2025 GMT
Not After : Aug 24 01:02:36 2025 GMT
Subject: CN=ca8c565ade2cb5263e2498d17381045246560b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:93:b4:fa:39:da:ea:45:7a:5a:05:18:6f:
20:85:23:ca:d6:12:c9:bf:dc:62:d8:72:88:da:b9:
e7:4c:07:51:49:c0:ee:71:e5:54:0d:06:49:8c:75:
3a:b5:85:16:a5:e8:1e:3a:c1:23:5a:78:0c:e1:d7:
8d:02:95:cd:ff:65:e0:45:ab:59:ed:6b:7f:e3:a7:
40:c9:e8:f9:4c:98:44:55:5f:e4:f3:cf:eb:7a:e7:
58:24:2a:5f:73:cb:b3:36:2d:79:4e:bd:13:d9:0e:
54:88:4d:6a:b7:85:1a:6a:a5:d1:d4:5f:a5:95:35:
02:a5:c3:4e:f6:ae:4d:8f:21:b3:cf:50:aa:f6:2c:
2e:33:94:32:6a:12:98:ea:e0:78:df:e6:d3:c2:73:
96:9d:be:8e:6f:d3:ec:18:bb:cb:e9:20:9b:b9:e3:
e0:70:86:87:bf:74:dc:da:54:1f:90:71:84:8b:cd:
14:85:3b:5a:45:af:e3:34:55:b5:10:db:e7:94:4d:
81:bd:60:85:c6:4d:cb:d9:9d:03:a4:0f:34:cf:41:
f2:8a:40:10:13:1e:92:29:82:f7:98:ca:d6:a5:87:
7c:76:cc:68:4d:76:f2:29:0b:12:6b:f7:e8:b3:13:
07:fb:11:43:bf:1d:47:c9:7d:78:53:bb:30:7a:26:
c8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8C:56:5A:DE:2C:B5:26:3E:24:98:D1:73:81:04:52:46:56:0B:68
X509v3 Authority Key Identifier:
keyid:88:F0:C1:D1:0E:4E:5A:71:E3:CD:5C:5D:6B:EE:BF:77:8A:06:E3:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f6:0c:5f:d3:40:b8:bd:2c:09:ac:77:de:89:0f:20:39:4b:
a3:62:71:01:a7:8f:4c:00:c0:c9:c8:16:5d:a3:86:c6:84:0d:
39:2b:07:57:30:b2:d3:5c:e3:38:e9:02:8a:97:bc:62:fe:16:
33:be:e7:08:b6:59:1f:1e:f6:3c:ab:a1:e6:a4:8c:0a:51:a5:
61:bf:12:0c:ab:ca:81:c1:cd:cf:31:4e:0d:01:7e:63:c1:76:
84:73:10:3e:c8:0c:91:e0:26:75:80:1f:d4:eb:f2:b0:c5:e8:
c0:d2:b4:96:a3:a2:e5:5e:37:1e:f5:92:e3:6c:c7:35:83:0e:
31:dc:09:af:90:dd:66:40:78:d9:b8:92:7c:fb:2b:f0:9b:a4:
fa:dd:92:ed:17:e1:0b:e7:c8:d6:58:62:78:b8:6a:59:e0:75:
f7:e7:8d:51:8b:63:ab:7d:72:da:9d:b8:1a:bf:d3:d7:75:c4:
a5:32:fe:e7:c9:b0:4b:3e:f4:14:7e:32:ad:3b:ab:fe:86:6f:
9f:13:34:1c:20:a0:23:6a:cd:51:5c:9b:29:45:af:60:51:df:
3f:c5:f3:b5:05:d9:4e:39:0e:55:fe:26:ba:29:ea:e3:7f:ec:
cc:67:fa:25:46:02:f1:39:8b:a8:9e:2a:50:c3:e0:7d:e7:a2:
93:97:5c:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcugW4KUzuA3PR+8J3E4LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZjBjMWQxMGU0ZTVhNzFlM2NkNWM1ZDZiZWViZjc3OGEw
NmUzMDQwHhcNMjUwODIzMDEwMjM2WhcNMjUwODI0MDEwMjM2WjAzMTEwLwYDVQQD
EyhjYThjNTY1YWRlMmNiNTI2M2UyNDk4ZDE3MzgxMDQ1MjQ2NTYwYjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPiTtPo52upFeloFGG8ghSPK1hLJ
v9xi2HKI2rnnTAdRScDuceVUDQZJjHU6tYUWpegeOsEjWngM4deNApXN/2XgRatZ
7Wt/46dAyej5TJhEVV/k88/reudYJCpfc8uzNi15Tr0T2Q5UiE1qt4UaaqXR1F+l
lTUCpcNO9q5NjyGzz1Cq9iwuM5QyahKY6uB43+bTwnOWnb6Ob9PsGLvL6SCbuePg
cIaHv3Tc2lQfkHGEi80UhTtaRa/jNFW1ENvnlE2BvWCFxk3L2Z0DpA80z0HyikAQ
Ex6SKYL3mMrWpYd8dsxoTXbyKQsSa/fosxMH+xFDvx1HyX14U7sweibIwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqMVlreLLUmPiSY0XOBBFJGVgtoMB8GA1UdIwQY
MBaAFIjwwdEOTlpx481cXWvuv3eKBuMEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVBEQjBRNU9XbkhqelZ4ZGEtNl9kNG9HNHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80MjY2NGEtMGY0Ny00OWE2LWI3Mzct
YjI4ZGY4NTU5NTI5LzEvaVBEQjBRNU9XbkhqelZ4ZGEtNl9kNG9HNHdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC80MjY2NGEtMGY0Ny00OWE2LWI3MzctYjI4ZGY4NTU5NTI5
LzEvaVBEQjBRNU9XbkhqelZ4ZGEtNl9kNG9HNHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/YMX9NA
uL0sCax33okPIDlLo2JxAaePTADAycgWXaOGxoQNOSsHVzCy01zjOOkCipe8Yv4W
M77nCLZZHx72PKuh5qSMClGlYb8SDKvKgcHNzzFODQF+Y8F2hHMQPsgMkeAmdYAf
1OvysMXowNK0lqOi5V43HvWS42zHNYMOMdwJr5DdZkB42biSfPsr8Juk+t2S7Rfh
C+fI1lhieLhqWeB19+eNUYtjq31y2p24Gr/T13XEpTL+58mwSz70FH4yrTur/oZv
nxM0HCCgI2rNUVybKUWvYFHfP8XztQXZTjkOVf4muinq43/szGf6JUYC8TmLqJ4q
UMPgfeeik5dcHg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:09 2025 by rpki-client