Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
File: iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft (raw, json)
Hash identifier: DyRrAOXUfU7woHiPKFf1FVjWHcfl82BehlSyS2IJPW8=
Subject key identifier: 51:F5:C7:62:06:B2:E5:56:72:D2:EF:1F:D8:61:AE:50:FC:42:09:23
Authority key identifier: 88:A6:2C:F8:10:0E:8C:1B:47:54:43:FD:94:CD:58:D8:EF:2A:33:AE
Certificate issuer: /CN=88a62cf8100e8c1b475443fd94cd58d8ef2a33ae
Certificate serial: 0198D65FCB83B754247550D1967B6654B8EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:00:58 +0000
Manifest this update: Sat 23 Aug 2025 10:00:58 +0000
Manifest next update: Sun 24 Aug 2025 10:00:58 +0000
Files and hashes: 1: iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl (hash: K/FqBFfkCwxuPla1k1kC7klJxB8ezNzESnX7pzwRLhE=)
2: qvYpsZQGhS3eiJYFcpoDInx2DkE.roa (hash: AzKXVpJ7rQhInqcKxYMIE20bjXuo9eJ0x8CLUXTV+A0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:cb:83:b7:54:24:75:50:d1:96:7b:66:54:b8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a62cf8100e8c1b475443fd94cd58d8ef2a33ae
Validity
Not Before: Aug 23 10:00:58 2025 GMT
Not After : Aug 24 10:00:58 2025 GMT
Subject: CN=51f5c76206b2e55672d2ef1fd861ae50fc420923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a8:d9:14:c6:1d:5c:5a:9e:44:38:8c:6e:ec:
26:ac:76:cd:5e:53:43:15:50:af:9b:83:15:4d:20:
74:f7:80:d0:57:e5:b0:31:f3:f2:3c:19:ff:d0:83:
4c:aa:4f:c6:51:26:a6:b6:c4:78:12:bb:16:54:f2:
89:b8:ab:9b:cc:15:a9:3b:be:b9:17:a2:a1:9c:b7:
50:a1:26:b7:ae:5f:13:ab:db:57:29:c6:fb:62:66:
54:e8:da:76:13:ac:1a:d0:c1:81:38:38:93:79:3e:
08:fb:82:13:d3:94:0c:96:89:6e:73:e6:50:52:6f:
72:53:02:43:5d:65:04:d4:e3:aa:87:a1:e6:13:c6:
fd:a6:60:b9:85:2d:fb:b5:31:ae:6f:60:38:01:e9:
ce:7b:2c:ce:34:b4:00:4d:b4:ec:21:e0:98:40:17:
88:54:19:fd:46:c6:60:36:a2:e2:64:28:38:be:63:
75:94:d2:10:f0:6c:ec:16:5b:98:33:22:3a:59:cc:
93:59:7c:ba:97:3d:2f:59:6b:34:df:7a:ed:15:e4:
e5:c2:39:f5:4c:10:e3:87:c9:a0:e4:b7:e5:92:de:
86:c7:d0:75:e2:11:3e:1c:8e:c4:54:a7:85:81:06:
4f:2e:a7:cb:dc:de:ac:36:f7:c7:b4:72:6e:85:6b:
f8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F5:C7:62:06:B2:E5:56:72:D2:EF:1F:D8:61:AE:50:FC:42:09:23
X509v3 Authority Key Identifier:
keyid:88:A6:2C:F8:10:0E:8C:1B:47:54:43:FD:94:CD:58:D8:EF:2A:33:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:19:6c:f3:09:01:39:2f:1b:93:94:fc:3f:df:0c:7d:c2:81:
98:1d:85:fe:f2:e3:94:e1:6d:1e:28:d0:e6:4c:97:c5:ee:2a:
09:9a:3f:cf:03:06:fc:aa:ab:fc:5b:43:18:75:81:46:ca:9a:
8b:2c:7b:51:44:69:bd:11:ba:42:22:01:84:fd:dd:33:35:24:
9b:fa:45:11:88:88:3d:3a:59:4b:1c:6f:5c:1a:b3:40:26:50:
7e:9a:6c:a2:8b:37:ea:d3:aa:08:89:98:81:42:b0:04:1b:9a:
d1:ec:a4:a3:5c:39:da:ef:54:31:a3:05:3e:87:5e:e7:49:cf:
38:23:88:b8:b2:ed:0d:dd:7b:b2:d0:9e:8f:44:1a:ee:51:4b:
24:da:a7:e3:58:c9:f3:ea:35:20:45:86:54:44:32:21:e5:92:
45:b8:8b:43:58:a3:76:9b:53:29:e0:d9:be:ad:64:ac:f8:e3:
8b:1c:37:0b:f6:fd:75:81:d4:4f:73:bd:34:cf:cc:2d:c1:f9:
ea:d8:23:cf:97:37:b6:a9:87:02:1d:4e:14:73:73:db:80:a6:
cb:a6:9f:8e:87:64:de:fe:78:fe:21:b6:d0:60:4b:64:df:77:
a9:11:ac:9c:87:c7:17:16:de:ee:f4:9a:2f:f9:3b:3c:b5:bc:
80:f3:3a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:18:00 2025 by rpki-client