Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft
File: iKVZ3N1bxLZssklvLm-w6PlUqus.mft (raw, json)
Hash identifier: 5+NGuXhYqf8er481zGnoiybLnZFG+fDbULMCqBwp7p4=
Subject key identifier: DB:6A:07:8B:FE:32:A0:B9:DB:1C:69:B6:CB:76:42:CF:0F:8E:34:78
Authority key identifier: 88:A5:59:DC:DD:5B:C4:B6:6C:B2:49:6F:2E:6F:B0:E8:F9:54:AA:EB
Certificate issuer: /CN=88a559dcdd5bc4b66cb2496f2e6fb0e8f954aaeb
Certificate serial: 0199FE103263C43344751C3684BA13B43C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft
Manifest number: 104B
Signing time: Sun 19 Oct 2025 20:01:38 +0000
Manifest this update: Sun 19 Oct 2025 20:01:38 +0000
Manifest next update: Mon 20 Oct 2025 20:01:38 +0000
Files and hashes: 1: iKVZ3N1bxLZssklvLm-w6PlUqus.crl (hash: BF8KwJ9q+s6m7y66QoBtGOKuddbbhZNQGB7uIpv6Ivk=)
2: oGUzs3HriURmMyvP-1mM3ixvd88.roa (hash: U9dJ3cn9/4GeEgNWQhNTsFuWjpySklwjtb60dseGPO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:32:63:c4:33:44:75:1c:36:84:ba:13:b4:3c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a559dcdd5bc4b66cb2496f2e6fb0e8f954aaeb
Validity
Not Before: Oct 19 20:01:38 2025 GMT
Not After : Oct 20 20:01:38 2025 GMT
Subject: CN=db6a078bfe32a0b9db1c69b6cb7642cf0f8e3478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ba:44:db:e0:a2:f4:8c:91:03:55:0a:47:92:
cc:c3:1f:33:6c:6c:05:e1:9f:b9:b1:2d:a7:6c:2d:
be:59:f5:7e:02:cd:b3:64:db:ed:37:d8:88:a7:2d:
e5:8b:7f:1c:77:ec:9e:85:b6:9e:82:26:b1:f9:92:
92:7e:f3:aa:cd:ea:7d:6f:a4:23:a9:d0:e5:f5:b7:
a5:30:53:e7:4f:88:29:2c:1b:64:97:c0:8b:9e:4b:
a5:01:c3:bc:82:b4:7c:18:53:dd:15:bd:55:59:58:
bd:f4:c4:54:01:34:95:c1:b1:65:b4:cb:b3:6c:90:
13:7a:77:1e:33:8d:54:c2:8a:18:ac:6c:49:1a:fc:
ed:28:47:e2:1c:b7:22:87:69:7e:9c:ed:81:0a:08:
f4:b4:db:7a:f4:9f:07:61:39:33:14:ea:56:9d:7b:
46:34:ec:e0:6c:0f:df:26:34:bc:7a:72:bd:3c:ed:
07:e6:ba:6b:7e:77:e3:27:9f:cf:4e:d4:f3:11:38:
df:69:28:d8:80:a7:70:3c:15:4a:83:e6:c0:60:f4:
1c:e4:1c:c6:94:a2:dd:2d:b4:a7:1e:ab:4f:ba:63:
75:34:9f:d1:4d:3c:2c:93:01:1b:17:82:32:fc:f4:
f0:e1:a4:3d:c8:20:53:9c:2b:54:21:ca:0d:63:7c:
d8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6A:07:8B:FE:32:A0:B9:DB:1C:69:B6:CB:76:42:CF:0F:8E:34:78
X509v3 Authority Key Identifier:
keyid:88:A5:59:DC:DD:5B:C4:B6:6C:B2:49:6F:2E:6F:B0:E8:F9:54:AA:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:53:e5:ed:ff:38:26:cf:f9:a6:06:53:36:27:dd:3a:8b:8e:
75:5f:36:44:44:73:11:6b:e2:24:71:95:51:5b:e2:ed:69:7a:
9b:0e:fb:ff:80:e1:8d:8f:a7:7e:ce:7b:64:41:c7:22:99:af:
e6:a8:ba:b6:1b:2c:c6:6f:5d:4a:50:83:67:cd:52:23:6b:55:
cf:74:a5:50:40:2c:35:2c:60:8b:f2:63:7f:e4:fe:ce:d0:2a:
6e:24:90:7f:d1:53:8f:06:59:89:be:ac:88:95:29:8a:25:89:
b8:4c:6e:98:aa:28:cf:6d:e3:7e:d4:7b:0f:1f:6f:8d:f2:82:
30:ec:c6:3e:fa:12:81:7e:c3:c9:5c:62:62:b3:ef:f0:67:47:
94:1b:b4:a6:de:9d:1a:48:d6:d4:f1:fd:7d:fd:b1:1f:3d:c3:
af:8d:0d:ea:de:2a:2f:04:f1:aa:7e:e2:93:9d:5a:36:dd:06:
c6:2c:f5:3c:f9:5e:98:19:dd:c8:18:2b:4e:17:55:24:4d:32:
89:af:08:cc:96:cc:e9:52:3b:69:10:7b:26:c3:ae:33:94:1b:
57:2b:e1:2d:2a:51:72:1c:d6:6b:6c:fb:aa:cf:94:af:52:a2:
18:13:e8:91:40:c5:03:9b:9e:5a:cb:d9:28:63:6a:27:cd:2e:
56:4b:99:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+EDJjxDNEdRw2hLoTtDw+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YTU1OWRjZGQ1YmM0YjY2Y2IyNDk2ZjJlNmZiMGU4Zjk1
NGFhZWIwHhcNMjUxMDE5MjAwMTM4WhcNMjUxMDIwMjAwMTM4WjAzMTEwLwYDVQQD
EyhkYjZhMDc4YmZlMzJhMGI5ZGIxYzY5YjZjYjc2NDJjZjBmOGUzNDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobpE2+Ci9IyRA1UKR5LMwx8zbGwF
4Z+5sS2nbC2+WfV+As2zZNvtN9iIpy3li38cd+yehbaegiax+ZKSfvOqzep9b6Qj
qdDl9belMFPnT4gpLBtkl8CLnkulAcO8grR8GFPdFb1VWVi99MRUATSVwbFltMuz
bJATenceM41UwooYrGxJGvztKEfiHLcih2l+nO2BCgj0tNt69J8HYTkzFOpWnXtG
NOzgbA/fJjS8enK9PO0H5rprfnfjJ5/PTtTzETjfaSjYgKdwPBVKg+bAYPQc5BzG
lKLdLbSnHqtPumN1NJ/RTTwskwEbF4Iy/PTw4aQ9yCBTnCtUIcoNY3zYMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtqB4v+MqC52xxptst2Qs8PjjR4MB8GA1UdIwQY
MBaAFIilWdzdW8S2bLJJby5vsOj5VKrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUtWWjNOMWJ4TFpzc2tsdkxtLXc2UGxVcXVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hODRjZDItNDVkOS00MTc5LWE5OTct
OTIwZDJhNjIwN2E0LzEvaUtWWjNOMWJ4TFpzc2tsdkxtLXc2UGxVcXVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9hODRjZDItNDVkOS00MTc5LWE5OTctOTIwZDJhNjIwN2E0
LzEvaUtWWjNOMWJ4TFpzc2tsdkxtLXc2UGxVcXVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOVPl7f84
Js/5pgZTNifdOouOdV82RERzEWviJHGVUVvi7Wl6mw77/4DhjY+nfs57ZEHHIpmv
5qi6thssxm9dSlCDZ81SI2tVz3SlUEAsNSxgi/Jjf+T+ztAqbiSQf9FTjwZZib6s
iJUpiiWJuExumKooz23jftR7Dx9vjfKCMOzGPvoSgX7DyVxiYrPv8GdHlBu0pt6d
GkjW1PH9ff2xHz3Dr40N6t4qLwTxqn7ik51aNt0Gxiz1PPlemBndyBgrThdVJE0y
ia8IzJbM6VI7aRB7JsOuM5QbVyvhLSpRchzWa2z7qs+Ur1KiGBPokUDFA5ueWsvZ
KGNqJ80uVkuZCA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:53 2025 by rpki-client