Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
File: ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft (raw, json)
Hash identifier: uY7kYQWLox63hQa/GV9vXmvAtJ9QVdC+dfMUiDGZCbs=
Subject key identifier: 63:B1:C9:6F:F0:26:06:8C:04:92:61:B3:1B:E5:FC:7F:28:23:E2:35
Authority key identifier: 8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
Certificate issuer: /CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Certificate serial: 0199FBEB3A3A8F840D5E94DAFA0C868CE3CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:00 +0000
Manifest this update: Sun 19 Oct 2025 10:02:00 +0000
Manifest next update: Mon 20 Oct 2025 10:02:00 +0000
Files and hashes: 1: Y5SHLkym5EnCD8MfwTIMclhP_Hk.roa (hash: 4DOa2lF9/Fyb4YOZbeBJmTOtFtNcdwU9BIHDAS+IUPA=)
2: ZyyMUpD8BracjmDLdZi2eYsV3GA.roa (hash: kndWXz3QPBLyWguASqaNYsH4u94S2FJubqWiONIhSqU=)
3: ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl (hash: N+H63DTOEIRNTA7dhqPqJOsKp9X92f245mwl7pOoXnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:3a:3a:8f:84:0d:5e:94:da:fa:0c:86:8c:e3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Validity
Not Before: Oct 19 10:02:00 2025 GMT
Not After : Oct 20 10:02:00 2025 GMT
Subject: CN=63b1c96ff026068c049261b31be5fc7f2823e235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9b:19:95:ec:d5:2d:70:b4:b4:72:10:9e:9b:
c9:d2:24:3e:7b:6f:48:f6:2d:0a:da:79:84:f8:40:
61:77:4a:ae:16:af:c1:0a:79:af:aa:ab:d7:55:8d:
8f:40:48:cb:7e:b7:23:f7:fc:92:ba:97:94:a8:43:
61:e6:b7:d0:2a:20:1c:47:ba:92:d4:be:88:85:8a:
44:c0:9f:09:d7:b0:30:f9:91:b7:52:2a:32:ec:e2:
73:73:2f:e0:ec:10:85:e9:8f:d4:d8:03:20:58:ed:
9b:86:9e:e2:bd:6f:83:19:e0:82:ac:83:86:b1:82:
2f:1a:14:8e:22:1e:24:54:8a:5e:16:89:1f:6e:ec:
71:d2:22:99:f0:b3:2f:92:26:d2:17:59:17:b6:0e:
d8:74:f0:5f:bd:b8:ef:b5:7f:2b:54:7b:7e:a6:a9:
41:f0:7e:ce:3a:21:83:02:8a:e7:25:1d:12:d8:6c:
23:85:63:9b:83:66:ab:9a:36:89:d3:dd:61:59:98:
8f:83:80:90:6e:dc:57:7b:b4:81:53:17:62:76:ba:
9c:a1:d5:f4:36:1f:9a:e4:35:78:69:bd:b5:4e:5b:
6a:f4:81:df:dd:7f:30:4d:b6:8f:94:b4:0c:33:0f:
3a:c6:80:ba:d9:fd:44:0b:ba:1d:80:28:cd:0d:dc:
dd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B1:C9:6F:F0:26:06:8C:04:92:61:B3:1B:E5:FC:7F:28:23:E2:35
X509v3 Authority Key Identifier:
keyid:8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:55:fe:84:a0:06:35:52:04:38:74:94:a0:41:d4:96:28:98:
d3:aa:6c:3f:65:f2:93:d4:7d:aa:57:0a:70:19:12:70:15:a8:
da:76:e2:b7:16:9d:18:3e:8d:9c:d3:36:39:f8:a1:c3:bc:73:
7a:f2:69:01:3e:97:72:2f:61:7d:2a:bd:d8:24:b2:8c:e2:cb:
b3:12:22:95:86:87:95:f2:d7:7e:e6:cc:d3:9f:8c:51:a7:32:
18:83:e6:41:b5:ba:53:8a:82:15:99:67:98:60:58:a6:5e:49:
0d:2d:ac:12:c0:a5:e7:1f:63:c0:25:46:63:c2:df:ee:2b:d1:
cf:2a:3a:a5:0e:38:21:c6:fc:cf:7c:df:7f:ca:ae:f1:94:b7:
87:62:97:e3:af:02:61:d0:ea:e2:b6:13:30:6b:05:3f:12:8a:
f2:3b:20:a5:a0:22:49:5d:a3:d6:d2:24:06:54:8c:0d:00:0b:
1e:d1:77:2c:46:26:ba:1f:72:2e:40:0d:61:4d:61:45:ea:3b:
2c:21:2f:46:52:d4:b9:f9:db:aa:08:fe:55:95:ed:42:30:a5:
d1:c3:a1:c6:56:b5:44:5f:80:15:1d:5e:cf:73:b4:01:0f:47:
86:6f:0c:72:f8:bb:53:0f:b3:6f:aa:13:8d:d7:ee:30:f6:4a:
39:23:d5:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76zo6j4QNXpTa+gyGjOPKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNDhhYzNlZjcyNzljMGY2YmMzOTA4ZjI3ZWRiMDkxYjVh
NjVhYzUwHhcNMjUxMDE5MTAwMjAwWhcNMjUxMDIwMTAwMjAwWjAzMTEwLwYDVQQD
Eyg2M2IxYzk2ZmYwMjYwNjhjMDQ5MjYxYjMxYmU1ZmM3ZjI4MjNlMjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJsZlezVLXC0tHIQnpvJ0iQ+e29I
9i0K2nmE+EBhd0quFq/BCnmvqqvXVY2PQEjLfrcj9/ySupeUqENh5rfQKiAcR7qS
1L6IhYpEwJ8J17Aw+ZG3Uioy7OJzcy/g7BCF6Y/U2AMgWO2bhp7ivW+DGeCCrIOG
sYIvGhSOIh4kVIpeFokfbuxx0iKZ8LMvkibSF1kXtg7YdPBfvbjvtX8rVHt+pqlB
8H7OOiGDAornJR0S2GwjhWObg2armjaJ091hWZiPg4CQbtxXe7SBUxdidrqcodX0
Nh+a5DV4ab21Tltq9IHf3X8wTbaPlLQMMw86xoC62f1EC7odgCjNDdzdBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOxyW/wJgaMBJJhsxvl/H8oI+I1MB8GA1UdIwQY
MBaAFIpIrD73J5wPa8OQjyftsJG1plrFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lYjRmYzctYjQxNC00Nzk4LWI3NTYt
MWEwZTUwNDg2MzJhLzEvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lYjRmYzctYjQxNC00Nzk4LWI3NTYtMWEwZTUwNDg2MzJh
LzEvaWtpc1B2Y25uQTlydzVDUEotMndrYldtV3NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAalX+hKAG
NVIEOHSUoEHUliiY06psP2Xyk9R9qlcKcBkScBWo2nbitxadGD6NnNM2Ofihw7xz
evJpAT6Xci9hfSq92CSyjOLLsxIilYaHlfLXfubM05+MUacyGIPmQbW6U4qCFZln
mGBYpl5JDS2sEsCl5x9jwCVGY8Lf7ivRzyo6pQ44Icb8z3zff8qu8ZS3h2KX468C
YdDq4rYTMGsFPxKK8jsgpaAiSV2j1tIkBlSMDQALHtF3LEYmuh9yLkANYU1hReo7
LCEvRlLUufnbqgj+VZXtQjCl0cOhxla1RF+AFR1ez3O0AQ9Hhm8Mcvi7Uw+zb6oT
jdfuMPZKOSPVmg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:01 2025 by rpki-client