Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft
File: iKVZ3N1bxLZssklvLm-w6PlUqus.mft (raw, json)
Hash identifier: YLGTCj6HvgkkGVUfJ/MupYaIdp3Rv/hljTOqwIP35cY=
Subject key identifier: 03:76:FF:C7:75:AC:F3:18:AB:CD:8B:DD:DC:48:C5:F1:F0:81:9C:1C
Authority key identifier: 88:A5:59:DC:DD:5B:C4:B6:6C:B2:49:6F:2E:6F:B0:E8:F9:54:AA:EB
Certificate issuer: /CN=88a559dcdd5bc4b66cb2496f2e6fb0e8f954aaeb
Certificate serial: 0198D4E08A898454BD49F54B8B4102ADE373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft
Manifest number: 0FB1
Signing time: Sat 23 Aug 2025 03:02:21 +0000
Manifest this update: Sat 23 Aug 2025 03:02:21 +0000
Manifest next update: Sun 24 Aug 2025 03:02:21 +0000
Files and hashes: 1: iKVZ3N1bxLZssklvLm-w6PlUqus.crl (hash: CrbzyY5T1PhpAuLOFIh6pLtu/MnjLSGF7pYvjBukIu4=)
2: oGUzs3HriURmMyvP-1mM3ixvd88.roa (hash: U9dJ3cn9/4GeEgNWQhNTsFuWjpySklwjtb60dseGPO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:8a:89:84:54:bd:49:f5:4b:8b:41:02:ad:e3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a559dcdd5bc4b66cb2496f2e6fb0e8f954aaeb
Validity
Not Before: Aug 23 03:02:21 2025 GMT
Not After : Aug 24 03:02:21 2025 GMT
Subject: CN=0376ffc775acf318abcd8bdddc48c5f1f0819c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:17:1c:46:7c:bd:7c:fb:6a:29:76:05:76:86:
0c:38:6b:d7:6d:22:d7:eb:b4:d5:c5:99:bf:17:69:
9f:05:14:e6:e9:25:03:86:8d:4e:99:3e:fe:fe:83:
da:c2:ef:72:28:4f:f5:ee:ea:50:51:a0:1b:b6:c5:
f6:bd:40:d3:60:e8:b2:b3:eb:47:98:9b:ea:01:b1:
4e:92:97:5f:36:ce:04:9a:0e:f5:b5:16:8c:b5:04:
65:fc:07:67:1e:60:b1:55:42:05:75:26:00:0f:f0:
0f:a3:3e:94:44:6d:fd:c8:93:5e:b0:5d:9e:e1:29:
bf:bd:22:6e:fc:f7:d1:00:fc:c7:89:be:54:1e:88:
f4:19:fe:68:12:e1:04:5c:ff:ef:36:01:70:89:c8:
83:b9:18:18:2d:b3:47:20:c6:ca:93:d8:5c:e7:d9:
79:38:0d:11:61:d1:a5:b5:d6:ae:52:3d:c4:2c:6a:
60:54:65:ad:b5:a3:99:d9:b2:d4:72:0a:9b:c4:a6:
11:97:fc:46:70:ea:c7:ba:36:3c:86:57:6b:ae:88:
07:38:85:3b:ec:d5:ae:be:66:54:14:85:e5:06:cd:
f0:51:d2:40:27:29:ac:f5:f8:31:90:51:8f:63:a9:
bd:f0:a3:a1:c3:2d:91:ab:ba:f5:b9:d0:71:53:ed:
1d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:76:FF:C7:75:AC:F3:18:AB:CD:8B:DD:DC:48:C5:F1:F0:81:9C:1C
X509v3 Authority Key Identifier:
keyid:88:A5:59:DC:DD:5B:C4:B6:6C:B2:49:6F:2E:6F:B0:E8:F9:54:AA:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d0:98:1a:33:99:f7:52:64:86:fe:63:75:b1:85:d7:6f:7e:
9b:5c:79:d5:16:3c:aa:52:78:4f:4e:98:a0:6e:70:23:07:f1:
a6:e2:79:0c:69:ca:64:ac:3a:cc:59:a7:41:2e:27:7d:01:ac:
00:7d:3f:e2:09:a7:98:f5:ce:b4:58:a9:6d:db:a4:c0:e2:dd:
c2:58:89:c7:34:cc:7e:68:ab:15:d9:5e:08:95:25:d6:2c:9a:
35:81:5a:d2:88:b9:d4:79:a2:12:4b:73:b9:41:e9:39:eb:e8:
58:d1:7b:48:4b:a6:87:7b:ab:c5:06:c2:af:7f:26:92:e9:13:
6a:75:d6:01:d8:c0:85:89:3f:a2:8b:4e:90:fa:4d:a1:02:ea:
d3:58:d3:27:b3:05:21:d0:9e:25:d5:21:f7:83:85:30:37:67:
8f:93:a7:4f:e7:e4:8c:68:48:dd:4f:8f:cb:8a:f6:39:f3:46:
24:17:c1:fb:b6:b9:c8:a9:09:52:57:3e:e2:6b:ca:3c:15:5d:
a1:87:a1:4d:f1:2f:f7:e0:93:86:24:c7:95:9c:97:4a:e2:31:
47:26:c1:4f:7a:57:72:fa:bb:2e:74:ef:8a:0f:94:56:5d:39:
51:ab:17:7b:5c:0d:b0:50:90:5a:43:3f:bb:09:9d:28:0b:04:
29:3a:e4:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4IqJhFS9SfVLi0ECreNzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YTU1OWRjZGQ1YmM0YjY2Y2IyNDk2ZjJlNmZiMGU4Zjk1
NGFhZWIwHhcNMjUwODIzMDMwMjIxWhcNMjUwODI0MDMwMjIxWjAzMTEwLwYDVQQD
EygwMzc2ZmZjNzc1YWNmMzE4YWJjZDhiZGRkYzQ4YzVmMWYwODE5YzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhccRny9fPtqKXYFdoYMOGvXbSLX
67TVxZm/F2mfBRTm6SUDho1OmT7+/oPawu9yKE/17upQUaAbtsX2vUDTYOiys+tH
mJvqAbFOkpdfNs4Emg71tRaMtQRl/AdnHmCxVUIFdSYAD/APoz6URG39yJNesF2e
4Sm/vSJu/PfRAPzHib5UHoj0Gf5oEuEEXP/vNgFwiciDuRgYLbNHIMbKk9hc59l5
OA0RYdGltdauUj3ELGpgVGWttaOZ2bLUcgqbxKYRl/xGcOrHujY8hldrrogHOIU7
7NWuvmZUFIXlBs3wUdJAJyms9fgxkFGPY6m98KOhwy2Rq7r1udBxU+0djQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAN2/8d1rPMYq82L3dxIxfHwgZwcMB8GA1UdIwQY
MBaAFIilWdzdW8S2bLJJby5vsOj5VKrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUtWWjNOMWJ4TFpzc2tsdkxtLXc2UGxVcXVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hODRjZDItNDVkOS00MTc5LWE5OTct
OTIwZDJhNjIwN2E0LzEvaUtWWjNOMWJ4TFpzc2tsdkxtLXc2UGxVcXVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9hODRjZDItNDVkOS00MTc5LWE5OTctOTIwZDJhNjIwN2E0
LzEvaUtWWjNOMWJ4TFpzc2tsdkxtLXc2UGxVcXVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqdCYGjOZ
91Jkhv5jdbGF129+m1x51RY8qlJ4T06YoG5wIwfxpuJ5DGnKZKw6zFmnQS4nfQGs
AH0/4gmnmPXOtFipbdukwOLdwliJxzTMfmirFdleCJUl1iyaNYFa0oi51HmiEktz
uUHpOevoWNF7SEumh3urxQbCr38mkukTanXWAdjAhYk/ootOkPpNoQLq01jTJ7MF
IdCeJdUh94OFMDdnj5OnT+fkjGhI3U+Py4r2OfNGJBfB+7a5yKkJUlc+4mvKPBVd
oYehTfEv9+CThiTHlZyXSuIxRybBT3pXcvq7LnTvig+UVl05UasXe1wNsFCQWkM/
uwmdKAsEKTrk8Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:21 2025 by rpki-client