Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
File: iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft (raw, json)
Hash identifier: Kt00S0vMOTag+HlVu3WI2LupybeHi91qRGwQxLebgUg=
Subject key identifier: B0:66:39:9A:1D:CC:01:E5:07:4A:24:AB:D4:4D:74:21:EC:C0:A9:80
Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
Certificate issuer: /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Certificate serial: 019A2289E6CC4A36D886CEE436EE92AC58DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
Manifest number: 0D63
Signing time: Sun 26 Oct 2025 22:00:54 +0000
Manifest this update: Sun 26 Oct 2025 22:00:54 +0000
Manifest next update: Mon 27 Oct 2025 22:00:54 +0000
Files and hashes: 1: 8l1JGPKaxK0LdzidLYE5O7KO7uc.roa (hash: iLVJNEHjRSQZgufW9Xco39laNybFCSoPb4TytjD2nas=)
2: ZaUvqR58Anq8vLQipN0wr5eky28.roa (hash: SPNO6fIwJVYF/onFgsSackS0wfwUe38bLzIxAklnkrs=)
3: dXGr5BqS128mRLd0J3At49a2qzg.roa (hash: wuoQDj1SJzE/S7y91rkdzuUmyIzNX+hGJtJoYwKPBvU=)
4: iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl (hash: UKBLZdRu74Z6tTitGiXulARPUFEsEGFUDfgNzGb8dt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:e6:cc:4a:36:d8:86:ce:e4:36:ee:92:ac:58:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Validity
Not Before: Oct 26 22:00:54 2025 GMT
Not After : Oct 27 22:00:54 2025 GMT
Subject: CN=b066399a1dcc01e5074a24abd44d7421ecc0a980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6b:26:b7:e7:3c:74:e7:bb:4e:20:e4:e9:a3:
7f:68:c0:86:0b:c2:63:a9:27:32:73:bc:bb:61:d6:
f9:bf:68:ab:c2:0a:ff:7b:d3:11:48:1f:4c:ec:34:
b9:05:af:05:92:78:6d:be:25:7b:cc:fc:b1:bc:d5:
59:df:da:74:85:30:f1:91:05:52:ba:5e:8c:13:bd:
10:4f:92:a5:70:05:89:bf:92:28:d1:63:e3:84:c0:
ba:20:07:6d:b3:9b:6f:f0:14:72:7e:8a:ff:f3:0e:
cf:b7:eb:65:3b:2e:d6:69:de:8e:28:0c:8c:28:54:
f6:99:ea:8c:74:54:a1:6c:e7:16:88:bb:07:70:05:
eb:66:76:f8:69:02:08:f0:37:e3:28:6d:47:2f:d3:
b2:eb:01:1a:95:2c:8b:e3:cc:e6:1d:7a:ce:96:e5:
23:30:ac:d4:f6:36:bf:73:82:b6:fc:ba:4e:0e:19:
f8:cd:ca:05:53:33:0c:21:b9:56:cf:8d:55:a9:77:
8a:c6:73:a3:5e:b1:a7:19:f8:62:c4:3d:a1:fa:f8:
d4:2b:30:60:a4:93:01:9e:0c:89:37:6f:c4:36:e9:
9d:6e:ee:66:30:0f:9e:fb:6f:64:d0:07:9d:42:37:
2a:5b:90:56:f3:2a:79:d3:5e:d8:5a:1c:62:f2:6e:
77:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:66:39:9A:1D:CC:01:E5:07:4A:24:AB:D4:4D:74:21:EC:C0:A9:80
X509v3 Authority Key Identifier:
keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:82:99:b3:ba:59:25:5b:22:f8:a3:2e:44:50:60:5b:49:61:
8a:e5:bc:22:e3:97:16:68:d8:ce:82:15:6f:65:97:a5:2c:a8:
af:18:a7:4f:c0:b9:d3:93:41:83:fd:bc:b7:ad:6b:b1:10:1d:
56:f7:5b:04:fb:c0:b2:62:89:d9:3c:7a:d6:4e:28:51:c4:e4:
11:7f:93:51:0e:8a:1a:93:93:25:e7:30:7d:11:60:c0:3b:f5:
25:02:a7:8f:07:32:30:30:8f:f9:d6:1c:53:e1:38:ea:73:66:
95:b5:ff:dc:41:87:47:f0:27:9f:75:a3:39:74:e9:cb:ac:5f:
01:fe:e3:c7:1d:e9:c0:2e:a1:c7:bb:f4:eb:49:84:6e:d5:55:
e4:57:46:38:0f:9d:cf:23:b3:0b:04:19:fa:88:28:a0:10:0b:
36:fc:a0:3a:8c:d2:61:98:61:ac:86:46:c6:90:6f:4e:97:a6:
37:5e:da:23:fb:a0:d6:c8:99:b6:e8:f6:1d:4a:28:63:71:f5:
2d:6d:57:ab:92:8f:f8:ea:a7:50:33:90:71:1f:58:13:5b:ab:
38:68:f4:34:eb:0d:3f:7f:2f:77:4f:fa:da:22:88:5d:48:f0:
1a:9e:c8:46:57:6f:74:e9:f7:31:06:e9:69:2e:43:5f:59:e5:
d2:ea:b5:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiiebMSjbYhs7kNu6SrFjbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YTVhYjY2OWZhYmU3MmRlYzJlODM3ODQ3NmE3ZTkxNWMy
NGVkY2YwHhcNMjUxMDI2MjIwMDU0WhcNMjUxMDI3MjIwMDU0WjAzMTEwLwYDVQQD
EyhiMDY2Mzk5YTFkY2MwMWU1MDc0YTI0YWJkNDRkNzQyMWVjYzBhOTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWsmt+c8dOe7TiDk6aN/aMCGC8Jj
qScyc7y7Ydb5v2irwgr/e9MRSB9M7DS5Ba8FknhtviV7zPyxvNVZ39p0hTDxkQVS
ul6ME70QT5KlcAWJv5Io0WPjhMC6IAdts5tv8BRyfor/8w7Pt+tlOy7Wad6OKAyM
KFT2meqMdFShbOcWiLsHcAXrZnb4aQII8DfjKG1HL9Oy6wEalSyL48zmHXrOluUj
MKzU9ja/c4K2/LpODhn4zcoFUzMMIblWz41VqXeKxnOjXrGnGfhixD2h+vjUKzBg
pJMBngyJN2/ENumdbu5mMA+e+29k0AedQjcqW5BW8yp5017YWhxi8m53owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBmOZodzAHlB0okq9RNdCHswKmAMB8GA1UdIwQY
MBaAFIilq2afq+ct7C6DeEdqfpFcJO3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUtXclpwLXI1eTNzTG9ONFIycC1rVndrN2M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82OGNkMTAtZTVjYy00ZjQ3LTg0YTkt
MTVhMDIwN2Q0NjA5LzEvaUtXclpwLXI1eTNzTG9ONFIycC1rVndrN2M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy82OGNkMTAtZTVjYy00ZjQ3LTg0YTktMTVhMDIwN2Q0NjA5
LzEvaUtXclpwLXI1eTNzTG9ONFIycC1rVndrN2M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMIKZs7pZ
JVsi+KMuRFBgW0lhiuW8IuOXFmjYzoIVb2WXpSyorxinT8C505NBg/28t61rsRAd
VvdbBPvAsmKJ2Tx61k4oUcTkEX+TUQ6KGpOTJecwfRFgwDv1JQKnjwcyMDCP+dYc
U+E46nNmlbX/3EGHR/Ann3WjOXTpy6xfAf7jxx3pwC6hx7v060mEbtVV5FdGOA+d
zyOzCwQZ+ogooBALNvygOozSYZhhrIZGxpBvTpemN17aI/ug1siZtuj2HUooY3H1
LW1Xq5KP+OqnUDOQcR9YE1urOGj0NOsNP38vd0/62iKIXUjwGp7IRldvdOn3MQbp
aS5DX1nl0uq13g==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:32:40 2025 by rpki-client