Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
File: iLda7v6O6hrFwhnYdQXS58XzL0g.mft (raw, json)
Hash identifier: wt6q5Hb7ZQakQfHyi0uwUKzP/PTXRfPpLt/VL65Ml+A=
Subject key identifier: 88:D5:B3:D8:3C:0C:4F:26:34:AA:33:05:D9:C7:17:03:AB:22:85:CA
Authority key identifier: 88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
Certificate issuer: /CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Certificate serial: 0198D65EFEC10DFB43600A969C455D55D9CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:00:06 +0000
Manifest this update: Sat 23 Aug 2025 10:00:06 +0000
Manifest next update: Sun 24 Aug 2025 10:00:06 +0000
Files and hashes: 1: RmCRqlQnRe9rCwX7VMuUVE41d98.roa (hash: /tq1VC9HIJ7jRew5LuuwcJaQrPrPH8vbpHUg/uqU1rE=)
2: iLda7v6O6hrFwhnYdQXS58XzL0g.crl (hash: 6puH9Cq21NmsOyQhz/+Se3I+z6yKBznlNDT/OG/ok8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5e:fe:c1:0d:fb:43:60:0a:96:9c:45:5d:55:d9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Validity
Not Before: Aug 23 10:00:06 2025 GMT
Not After : Aug 24 10:00:06 2025 GMT
Subject: CN=88d5b3d83c0c4f2634aa3305d9c71703ab2285ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6e:ee:97:d9:ec:45:87:46:a1:92:fb:52:55:
71:d7:14:9b:94:f1:f3:81:9f:fc:59:dd:6c:7b:7c:
72:59:d8:e5:61:a3:80:09:1e:8d:1c:30:ad:2e:98:
96:96:01:52:9e:77:b0:e4:d5:3b:b6:81:5b:2f:bf:
54:0a:ee:7d:b2:be:55:74:88:db:1d:ab:47:92:66:
6f:1e:79:43:41:41:10:db:67:9d:0c:98:0c:1a:ad:
a8:ea:3c:09:34:c2:9a:7a:9a:13:ff:5f:ac:60:01:
23:79:f8:dd:b1:2d:09:68:e9:33:a0:1f:7d:ab:c4:
b6:a9:23:a9:03:79:0a:10:6e:89:da:65:5a:69:a9:
f3:d0:f1:38:f9:f3:18:86:af:cf:a0:1c:7e:bd:93:
92:16:0e:c4:ab:d5:13:75:4b:ae:f5:3b:aa:b3:d2:
9b:d4:31:08:07:18:7e:98:a5:c8:be:be:5b:63:6d:
2c:59:35:3e:07:85:19:e7:cf:12:07:e2:01:7c:5a:
1c:1e:ed:7e:21:cc:64:87:df:12:99:a8:31:ba:4c:
48:0c:83:f0:19:92:9e:c0:0c:5d:be:11:36:b5:f1:
64:56:c0:e8:e9:22:8e:d9:c3:c2:81:93:f6:7b:48:
a6:43:f0:ed:72:0d:c5:f9:fc:ea:03:3c:7d:05:db:
36:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D5:B3:D8:3C:0C:4F:26:34:AA:33:05:D9:C7:17:03:AB:22:85:CA
X509v3 Authority Key Identifier:
keyid:88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:85:a6:0d:bb:27:96:59:47:93:c9:db:c4:33:53:95:a7:23:
16:32:aa:0e:bb:1d:5e:91:3c:58:85:60:d8:20:89:0f:6f:8e:
69:be:54:95:ba:db:30:46:cd:47:5e:f2:59:40:2e:c0:b9:8c:
f6:a6:26:e8:b9:22:e1:35:b5:2d:5e:aa:ec:37:c5:22:a9:b4:
67:a9:3f:a4:dd:67:6f:0b:0e:e6:df:cb:77:b4:cf:90:97:d5:
53:34:6b:78:44:d8:38:d3:ba:0f:be:db:37:d0:60:a9:7e:53:
34:8f:e7:03:50:f5:59:13:74:a7:ce:1f:26:29:1b:47:d5:0b:
71:52:14:06:29:a8:81:6a:e9:07:2e:c7:d8:ad:f3:c9:36:6d:
7e:72:83:40:05:45:1f:a3:88:57:a9:b6:57:4d:11:d6:9e:ce:
fd:ad:c3:a8:03:b3:d4:22:1b:21:28:cf:e6:c5:c3:77:1d:96:
5c:62:03:7e:86:dd:9c:0a:1c:7b:71:fb:60:ab:0c:d6:85:2a:
77:37:fa:d3:44:6f:05:ed:f0:0d:ee:ee:d5:2d:dd:ab:cf:f6:
dd:4f:52:4c:63:94:b5:08:9a:aa:13:0a:33:3c:10:2a:5a:09:
63:0f:1f:ca:57:bd:ad:ea:a0:0f:54:cf:d2:b6:29:01:fb:30:
3d:f9:f0:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXv7BDftDYAqWnEVdVdnKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4Yjc1YWVlZmU4ZWVhMWFjNWMyMTlkODc1MDVkMmU3YzVm
MzJmNDgwHhcNMjUwODIzMTAwMDA2WhcNMjUwODI0MTAwMDA2WjAzMTEwLwYDVQQD
Eyg4OGQ1YjNkODNjMGM0ZjI2MzRhYTMzMDVkOWM3MTcwM2FiMjI4NWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj27ul9nsRYdGoZL7UlVx1xSblPHz
gZ/8Wd1se3xyWdjlYaOACR6NHDCtLpiWlgFSnnew5NU7toFbL79UCu59sr5VdIjb
HatHkmZvHnlDQUEQ22edDJgMGq2o6jwJNMKaepoT/1+sYAEjefjdsS0JaOkzoB99
q8S2qSOpA3kKEG6J2mVaaanz0PE4+fMYhq/PoBx+vZOSFg7Eq9UTdUuu9Tuqs9Kb
1DEIBxh+mKXIvr5bY20sWTU+B4UZ588SB+IBfFocHu1+Icxkh98SmagxukxIDIPw
GZKewAxdvhE2tfFkVsDo6SKO2cPCgZP2e0imQ/Dtcg3F+fzqAzx9Bds2AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjVs9g8DE8mNKozBdnHFwOrIoXKMB8GA1UdIwQY
MBaAFIi3Wu7+juoaxcIZ2HUF0ufF8y9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUxkYTd2Nk82aHJGd2huWWRRWFM1OFh6TDBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80ZDI4MzEtMTJlYy00NzcwLTljZWEt
OWFjMDhjM2VhYWExLzEvaUxkYTd2Nk82aHJGd2huWWRRWFM1OFh6TDBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80ZDI4MzEtMTJlYy00NzcwLTljZWEtOWFjMDhjM2VhYWEx
LzEvaUxkYTd2Nk82aHJGd2huWWRRWFM1OFh6TDBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALoWmDbsn
lllHk8nbxDNTlacjFjKqDrsdXpE8WIVg2CCJD2+Oab5UlbrbMEbNR17yWUAuwLmM
9qYm6Lki4TW1LV6q7DfFIqm0Z6k/pN1nbwsO5t/Ld7TPkJfVUzRreETYONO6D77b
N9BgqX5TNI/nA1D1WRN0p84fJikbR9ULcVIUBimogWrpBy7H2K3zyTZtfnKDQAVF
H6OIV6m2V00R1p7O/a3DqAOz1CIbISjP5sXDdx2WXGIDfobdnAoce3H7YKsM1oUq
dzf600RvBe3wDe7u1S3dq8/23U9STGOUtQiaqhMKMzwQKloJYw8fyle9reqgD1TP
0rYpAfswPfnwPA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:43:23 2025 by rpki-client