Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
File: iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft (raw, json)
Hash identifier: JFTzXN3FRdZXHAphvo8u1Tslt8cd5JAZPdXXdPgAus4=
Subject key identifier: 73:8C:AC:A2:A0:0F:1B:48:7F:AA:DE:09:12:23:8B:34:85:29:28:9A
Authority key identifier: 88:A6:2C:F8:10:0E:8C:1B:47:54:43:FD:94:CD:58:D8:EF:2A:33:AE
Certificate issuer: /CN=88a62cf8100e8c1b475443fd94cd58d8ef2a33ae
Certificate serial: 0199FFC87947C7AD3FB6E15ECF4C5B0F33FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 04:02:32 +0000
Manifest this update: Mon 20 Oct 2025 04:02:32 +0000
Manifest next update: Tue 21 Oct 2025 04:02:32 +0000
Files and hashes: 1: iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl (hash: iZUFX6qBdyEkBM7HudO74w+IxDuKJ4Lm0U3To7RzP70=)
2: qvYpsZQGhS3eiJYFcpoDInx2DkE.roa (hash: AzKXVpJ7rQhInqcKxYMIE20bjXuo9eJ0x8CLUXTV+A0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:79:47:c7:ad:3f:b6:e1:5e:cf:4c:5b:0f:33:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a62cf8100e8c1b475443fd94cd58d8ef2a33ae
Validity
Not Before: Oct 20 04:02:32 2025 GMT
Not After : Oct 21 04:02:32 2025 GMT
Subject: CN=738caca2a00f1b487faade0912238b348529289a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:4e:76:f3:32:f9:cd:49:c8:17:77:b4:ec:
76:34:5e:49:d0:74:3c:b6:be:bb:e1:69:d0:f5:6d:
5b:dd:d9:14:0d:ff:e1:bb:6f:1e:59:15:33:57:ab:
b6:61:13:d3:38:c7:8e:b8:5d:54:76:c3:82:71:b2:
9a:ac:8f:8a:b4:52:66:4b:44:2d:05:d9:0d:62:71:
f1:4e:98:7b:69:24:a5:d9:7e:13:ca:9d:7c:f8:2d:
37:44:0b:33:7f:e7:8d:20:62:62:42:e8:cc:b3:55:
a9:f9:cc:53:b3:5a:8f:47:a0:b3:97:d9:8a:38:ea:
07:d2:32:17:31:2b:1d:e8:02:0f:93:ed:c6:1c:65:
a9:98:af:cb:a6:96:48:f9:6e:2d:0a:20:55:de:5a:
7c:ea:f5:40:71:1e:13:fd:1b:7a:ab:2a:dc:50:63:
13:cc:02:a0:ff:1d:c1:0d:cc:c9:01:1f:b3:0f:e5:
0a:e1:e4:96:3a:46:d1:d7:65:18:27:d2:3e:f9:a6:
07:44:e3:79:12:9d:b3:b4:c9:e5:a2:f2:2d:b9:a9:
96:81:2a:7f:42:35:a5:f2:09:5f:6a:72:23:dc:13:
f1:66:70:fe:2d:70:dd:98:ea:c4:28:dd:fd:46:61:
9d:d7:bd:44:cf:a5:e5:2f:a6:6d:86:ca:88:a3:6c:
82:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8C:AC:A2:A0:0F:1B:48:7F:AA:DE:09:12:23:8B:34:85:29:28:9A
X509v3 Authority Key Identifier:
keyid:88:A6:2C:F8:10:0E:8C:1B:47:54:43:FD:94:CD:58:D8:EF:2A:33:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ea:9a:a8:ea:62:8e:e4:f5:66:76:f6:e6:60:84:92:af:da:
63:1a:07:6e:35:b9:9a:96:d1:a1:9b:c9:db:9f:1c:ca:0c:ad:
94:64:01:63:ef:8f:4d:b3:c6:be:30:78:a4:62:c3:f1:b4:64:
e3:70:b4:38:69:1f:93:b4:e7:00:61:f7:35:0c:c5:86:76:c3:
4d:9b:59:16:00:2e:8d:9a:48:25:00:c9:17:37:20:76:e0:9c:
29:d4:c7:e8:5a:1c:86:88:b7:34:01:86:d2:22:61:1a:4f:2b:
8e:f3:7e:d4:8c:dc:97:47:a1:a6:55:47:ef:8c:d4:a4:40:47:
b8:56:c0:26:9b:b4:e7:8e:a7:a2:ee:1a:c0:3b:24:73:a6:ff:
22:c8:1c:58:48:b5:8a:10:42:de:0b:11:cd:80:bc:d8:fd:df:
c0:36:4b:a1:8e:65:9e:67:60:3d:bd:01:41:81:f5:dd:ed:c6:
9c:16:f0:7f:bb:9f:1e:9f:cf:76:4a:e5:ba:17:0a:08:50:95:
e8:1f:92:aa:4b:66:48:a1:9b:1c:45:4e:9d:42:af:ca:d0:8f:
cb:ef:0e:82:e3:4f:9e:31:85:8a:60:22:cb:fb:41:46:a5:25:
91:4c:29:1f:9e:82:61:da:29:cb:cc:32:34:54:16:ad:a8:83:
bf:cc:b1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:21:36 2025 by rpki-client