Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
File: iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft (raw, json)
Hash identifier: yabLTb2A9rVzmA0vELqLsAWKuOLSFQyyOkoijsogqwE=
Subject key identifier: 1B:67:89:31:48:8F:9B:0B:F6:F2:1B:A8:A6:AB:8F:45:BC:15:B4:A6
Authority key identifier: 88:A6:2C:F8:10:0E:8C:1B:47:54:43:FD:94:CD:58:D8:EF:2A:33:AE
Certificate issuer: /CN=88a62cf8100e8c1b475443fd94cd58d8ef2a33ae
Certificate serial: 019849654C22B2270D895A36AFD2798F4644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 01:00:32 +0000
Manifest this update: Sun 27 Jul 2025 01:00:32 +0000
Manifest next update: Mon 28 Jul 2025 01:00:32 +0000
Files and hashes: 1: iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl (hash: 4CmtPw6X8IAQul43d3gpLfACeLth0VDMUA3oHMQeNPk=)
2: qvYpsZQGhS3eiJYFcpoDInx2DkE.roa (hash: AzKXVpJ7rQhInqcKxYMIE20bjXuo9eJ0x8CLUXTV+A0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:4c:22:b2:27:0d:89:5a:36:af:d2:79:8f:46:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a62cf8100e8c1b475443fd94cd58d8ef2a33ae
Validity
Not Before: Jul 27 01:00:32 2025 GMT
Not After : Jul 28 01:00:32 2025 GMT
Subject: CN=1b678931488f9b0bf6f21ba8a6ab8f45bc15b4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b4:3d:7d:87:7c:13:7b:c6:1c:aa:d0:0f:8f:
fa:2d:ed:02:5c:4f:3f:ed:2a:cb:e2:ae:a9:84:e0:
2e:42:c3:90:0a:39:91:c8:95:60:f6:11:66:06:6b:
ee:7c:b5:6a:7d:fa:73:b0:44:1c:b3:5a:f0:b5:d7:
d1:47:d5:e1:4f:4a:1a:97:89:02:3e:23:75:cf:87:
b9:dd:72:a7:fe:93:f4:38:d0:81:ae:3d:90:0c:01:
ac:26:47:8d:9e:e6:d5:a2:09:0f:76:63:c1:9b:66:
30:ff:ad:6d:e3:9c:b9:97:11:22:2f:72:97:f6:f5:
99:85:da:e4:23:8c:ce:f5:55:ba:bb:f1:02:a6:78:
c0:a2:2c:a1:2f:1a:84:68:2f:66:60:3b:94:0a:ca:
c0:ab:25:70:03:f3:0a:a4:bf:5f:d3:86:4b:39:63:
b3:38:97:ae:24:35:8c:19:6e:67:c0:96:ce:1e:92:
7f:52:22:59:68:c4:91:22:c1:7b:c1:bd:5a:ca:5a:
5b:17:2d:62:37:6d:bd:6f:f4:cb:d2:1e:5a:67:12:
28:bd:f9:53:ef:66:18:b5:b3:a0:45:b2:49:d7:fe:
8c:a1:3d:3b:ca:56:82:e3:21:6f:6e:33:89:b6:4f:
6e:e8:1c:39:2e:ba:cd:9f:40:1f:35:74:bc:65:c2:
cc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:67:89:31:48:8F:9B:0B:F6:F2:1B:A8:A6:AB:8F:45:BC:15:B4:A6
X509v3 Authority Key Identifier:
keyid:88:A6:2C:F8:10:0E:8C:1B:47:54:43:FD:94:CD:58:D8:EF:2A:33:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:50:30:34:48:74:e2:d8:03:74:8e:01:8e:a9:4c:83:e8:4a:
48:6e:66:25:49:77:6d:de:d3:d7:74:8b:85:47:95:7c:bb:c5:
b8:bf:48:ba:e9:5a:1b:24:64:22:44:91:b9:ab:26:3a:d4:6b:
90:bc:d8:5d:b4:a9:c1:5c:b8:e3:43:14:d3:e1:12:be:fb:e6:
82:92:e0:0a:e4:9d:90:c2:f8:19:c6:42:ba:d6:38:bc:df:03:
53:3c:ef:72:bb:f4:c8:82:f1:b0:34:9a:78:fc:e3:b2:d9:b6:
a5:23:21:15:cd:f3:d9:ea:39:62:be:be:a0:78:9c:57:b9:20:
f4:bc:0e:20:66:cc:7e:7b:18:41:b5:da:bf:6e:98:4d:fc:54:
07:4f:a0:8b:78:18:d1:35:8f:cf:e3:8d:09:64:ae:fa:7c:26:
05:09:60:df:06:ed:6b:dc:f2:db:55:62:7f:73:aa:86:fd:fd:
e8:b8:96:cd:93:e7:7c:0d:73:dd:a0:90:29:68:d7:d4:4b:3b:
cf:05:43:7d:18:07:0a:f5:84:33:a3:69:ba:23:0e:66:58:da:
34:fe:05:74:f0:ee:20:6d:d4:d7:02:e2:4b:d3:0f:d3:c1:6f:
91:91:ed:d7:1b:9a:f8:11:06:6c:eb:22:b2:b8:60:2e:3b:83:
f1:ae:21:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZUwisicNiVo2r9J5j0ZEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YTYyY2Y4MTAwZThjMWI0NzU0NDNmZDk0Y2Q1OGQ4ZWYy
YTMzYWUwHhcNMjUwNzI3MDEwMDMyWhcNMjUwNzI4MDEwMDMyWjAzMTEwLwYDVQQD
EygxYjY3ODkzMTQ4OGY5YjBiZjZmMjFiYThhNmFiOGY0NWJjMTViNGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLQ9fYd8E3vGHKrQD4/6Le0CXE8/
7SrL4q6phOAuQsOQCjmRyJVg9hFmBmvufLVqffpzsEQcs1rwtdfRR9XhT0oal4kC
PiN1z4e53XKn/pP0ONCBrj2QDAGsJkeNnubVogkPdmPBm2Yw/61t45y5lxEiL3KX
9vWZhdrkI4zO9VW6u/ECpnjAoiyhLxqEaC9mYDuUCsrAqyVwA/MKpL9f04ZLOWOz
OJeuJDWMGW5nwJbOHpJ/UiJZaMSRIsF7wb1aylpbFy1iN229b/TL0h5aZxIovflT
72YYtbOgRbJJ1/6MoT07ylaC4yFvbjOJtk9u6Bw5LrrNn0AfNXS8ZcLMAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtniTFIj5sL9vIbqKarj0W8FbSmMB8GA1UdIwQY
MBaAFIimLPgQDowbR1RD/ZTNWNjvKjOuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUtZcy1CQU9qQnRIVkVQOWxNMVkyTzhxTTY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lZWYwMzUtMjYyOS00ZTNlLWJlYmMt
MTVhMGRkZGQ3NDljLzEvaUtZcy1CQU9qQnRIVkVQOWxNMVkyTzhxTTY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9lZWYwMzUtMjYyOS00ZTNlLWJlYmMtMTVhMGRkZGQ3NDlj
LzEvaUtZcy1CQU9qQnRIVkVQOWxNMVkyTzhxTTY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwFAwNEh0
4tgDdI4BjqlMg+hKSG5mJUl3bd7T13SLhUeVfLvFuL9IuulaGyRkIkSRuasmOtRr
kLzYXbSpwVy440MU0+ESvvvmgpLgCuSdkML4GcZCutY4vN8DUzzvcrv0yILxsDSa
ePzjstm2pSMhFc3z2eo5Yr6+oHicV7kg9LwOIGbMfnsYQbXav26YTfxUB0+gi3gY
0TWPz+ONCWSu+nwmBQlg3wbta9zy21Vif3Oqhv396LiWzZPnfA1z3aCQKWjX1Es7
zwVDfRgHCvWEM6NpuiMOZljaNP4FdPDuIG3U1wLiS9MP08FvkZHt1xua+BEGbOsi
srhgLjuD8a4hEQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 04:54:34 2025 by rpki-client