Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
File: iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft (raw, json)
Hash identifier: 4NDACCC1sKiD+BZMYEgN5wTGLpNvWjVKsFEao/9y9h0=
Subject key identifier: 99:4C:C6:E3:6C:63:02:BA:78:D5:29:8B:45:31:F4:34:1F:AF:F9:A1
Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
Certificate issuer: /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Certificate serial: 0198D661024187416B5D148472CBDBD1F1B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
Manifest number: 0CB7
Signing time: Sat 23 Aug 2025 10:02:18 +0000
Manifest this update: Sat 23 Aug 2025 10:02:18 +0000
Manifest next update: Sun 24 Aug 2025 10:02:18 +0000
Files and hashes: 1: 8l1JGPKaxK0LdzidLYE5O7KO7uc.roa (hash: iLVJNEHjRSQZgufW9Xco39laNybFCSoPb4TytjD2nas=)
2: ZaUvqR58Anq8vLQipN0wr5eky28.roa (hash: SPNO6fIwJVYF/onFgsSackS0wfwUe38bLzIxAklnkrs=)
3: dXGr5BqS128mRLd0J3At49a2qzg.roa (hash: wuoQDj1SJzE/S7y91rkdzuUmyIzNX+hGJtJoYwKPBvU=)
4: iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl (hash: 9g9ro62ENURGXZ/rhaR5s3atrJcbktjhberEhJu3Lo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:02:41:87:41:6b:5d:14:84:72:cb:db:d1:f1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Validity
Not Before: Aug 23 10:02:18 2025 GMT
Not After : Aug 24 10:02:18 2025 GMT
Subject: CN=994cc6e36c6302ba78d5298b4531f4341faff9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f9:f1:67:c2:d5:5b:0c:de:64:54:7f:35:c1:
77:58:bc:db:49:a8:83:24:91:a0:67:19:8c:a6:92:
7c:a7:ad:3a:85:be:fa:10:8f:8e:33:10:29:71:fa:
8d:ae:93:2c:ce:5b:34:35:47:a2:cd:3b:3a:d0:dd:
d1:dd:1e:a2:94:aa:59:0f:26:f9:51:0b:c3:43:8f:
71:33:2d:fb:80:88:08:d2:84:ce:ea:3a:41:aa:f7:
e8:1b:1e:b4:c0:13:24:69:3f:58:fc:d8:9f:4e:bb:
14:10:3d:14:b1:64:ae:fb:2d:e7:46:bf:b9:3c:bc:
78:a5:38:9d:36:fa:af:db:75:c9:75:c0:96:eb:b4:
7e:cb:56:44:8c:94:8c:e3:37:14:d2:c4:a9:d9:4a:
9f:b9:bf:15:16:e6:eb:56:df:e4:4a:2a:b3:cb:bd:
c2:57:83:6c:3a:42:79:2c:66:92:a2:d5:2e:40:4f:
1a:ac:c9:d3:ed:56:53:bc:35:bc:86:9d:92:16:83:
e5:09:da:89:c8:c1:06:0c:95:a6:a0:3b:fc:32:23:
b3:9c:30:a5:54:98:29:0b:98:8e:28:db:41:e3:65:
a2:12:e6:35:86:75:89:38:5c:12:42:cf:ad:8c:40:
fc:f6:98:d9:57:97:ec:1b:c5:cc:e3:74:94:0a:b0:
b9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4C:C6:E3:6C:63:02:BA:78:D5:29:8B:45:31:F4:34:1F:AF:F9:A1
X509v3 Authority Key Identifier:
keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:01:59:1f:1a:96:c6:41:08:b8:36:80:a2:3b:ed:aa:1d:db:
9a:45:62:b7:3e:0f:fe:93:f2:de:fd:7b:f3:0d:f5:5f:f6:00:
2d:74:40:ba:30:51:88:9a:4c:b9:b4:22:17:5f:4f:d0:ed:ec:
6e:08:51:e7:f8:72:6b:df:5c:54:a7:bd:6c:c8:6d:40:86:6c:
54:12:78:8c:ce:74:94:ff:58:15:c2:6b:d5:3f:ab:45:a7:4b:
ec:6c:91:3e:07:38:8a:c4:96:50:42:72:89:c0:99:67:89:c6:
90:02:d3:13:d1:cb:f2:b2:1a:91:de:25:f4:d3:8d:75:98:6c:
6f:f5:ea:9b:de:b3:e8:73:97:8c:d5:1e:33:d1:87:af:50:ee:
f6:2a:8e:b9:dd:b2:a0:04:94:60:b1:d0:4d:bf:5c:b9:a6:99:
db:90:77:0f:56:3e:06:18:0b:3e:ff:76:a7:d5:8e:d1:61:85:
61:98:be:cd:2b:b4:6f:b2:95:76:db:9b:39:9b:b7:22:f5:ea:
70:cb:fc:b3:99:71:7a:89:b3:84:a2:f1:b8:cc:40:13:73:ca:
4c:f1:10:d3:38:26:03:d6:df:d9:9a:64:de:2d:7a:59:98:f5:
f4:f2:2a:cf:40:33:38:8f:20:99:5d:78:31:4a:93:da:22:e6:
9a:91:d9:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYQJBh0FrXRSEcsvb0fG1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YTVhYjY2OWZhYmU3MmRlYzJlODM3ODQ3NmE3ZTkxNWMy
NGVkY2YwHhcNMjUwODIzMTAwMjE4WhcNMjUwODI0MTAwMjE4WjAzMTEwLwYDVQQD
Eyg5OTRjYzZlMzZjNjMwMmJhNzhkNTI5OGI0NTMxZjQzNDFmYWZmOWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPnxZ8LVWwzeZFR/NcF3WLzbSaiD
JJGgZxmMppJ8p606hb76EI+OMxApcfqNrpMszls0NUeizTs60N3R3R6ilKpZDyb5
UQvDQ49xMy37gIgI0oTO6jpBqvfoGx60wBMkaT9Y/NifTrsUED0UsWSu+y3nRr+5
PLx4pTidNvqv23XJdcCW67R+y1ZEjJSM4zcU0sSp2Uqfub8VFubrVt/kSiqzy73C
V4NsOkJ5LGaSotUuQE8arMnT7VZTvDW8hp2SFoPlCdqJyMEGDJWmoDv8MiOznDCl
VJgpC5iOKNtB42WiEuY1hnWJOFwSQs+tjED89pjZV5fsG8XM43SUCrC5sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlMxuNsYwK6eNUpi0Ux9DQfr/mhMB8GA1UdIwQY
MBaAFIilq2afq+ct7C6DeEdqfpFcJO3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUtXclpwLXI1eTNzTG9ONFIycC1rVndrN2M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82OGNkMTAtZTVjYy00ZjQ3LTg0YTkt
MTVhMDIwN2Q0NjA5LzEvaUtXclpwLXI1eTNzTG9ONFIycC1rVndrN2M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy82OGNkMTAtZTVjYy00ZjQ3LTg0YTktMTVhMDIwN2Q0NjA5
LzEvaUtXclpwLXI1eTNzTG9ONFIycC1rVndrN2M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiAFZHxqW
xkEIuDaAojvtqh3bmkVitz4P/pPy3v178w31X/YALXRAujBRiJpMubQiF19P0O3s
bghR5/hya99cVKe9bMhtQIZsVBJ4jM50lP9YFcJr1T+rRadL7GyRPgc4isSWUEJy
icCZZ4nGkALTE9HL8rIakd4l9NONdZhsb/Xqm96z6HOXjNUeM9GHr1Du9iqOud2y
oASUYLHQTb9cuaaZ25B3D1Y+BhgLPv92p9WO0WGFYZi+zSu0b7KVdtubOZu3IvXq
cMv8s5lxeomzhKLxuMxAE3PKTPEQ0zgmA9bf2Zpk3i16WZj19PIqz0AzOI8gmV14
MUqT2iLmmpHZeA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:45:26 2025 by rpki-client