Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
File: iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft (raw, json)
Hash identifier: AbGPdSxvdwW6570T/WEUoToxBoZOqEB2MQ0t8aqQtJc=
Subject key identifier: D8:5F:AE:3F:D3:64:87:8C:C6:3C:7E:9E:1F:11:0E:39:3A:29:8A:25
Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
Certificate issuer: /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Certificate serial: 01992F36B7051A5EC406CF96E75D6D79F2A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
Manifest number: 0CE5
Signing time: Tue 09 Sep 2025 16:02:18 +0000
Manifest this update: Tue 09 Sep 2025 16:02:18 +0000
Manifest next update: Wed 10 Sep 2025 16:02:18 +0000
Files and hashes: 1: 8l1JGPKaxK0LdzidLYE5O7KO7uc.roa (hash: iLVJNEHjRSQZgufW9Xco39laNybFCSoPb4TytjD2nas=)
2: ZaUvqR58Anq8vLQipN0wr5eky28.roa (hash: SPNO6fIwJVYF/onFgsSackS0wfwUe38bLzIxAklnkrs=)
3: dXGr5BqS128mRLd0J3At49a2qzg.roa (hash: wuoQDj1SJzE/S7y91rkdzuUmyIzNX+hGJtJoYwKPBvU=)
4: iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl (hash: v9DctJNX46hDs0onR81HVe2kPm+emmDAXBn+Y2DvaF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:36:b7:05:1a:5e:c4:06:cf:96:e7:5d:6d:79:f2:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Validity
Not Before: Sep 9 16:02:18 2025 GMT
Not After : Sep 10 16:02:18 2025 GMT
Subject: CN=d85fae3fd364878cc63c7e9e1f110e393a298a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f4:ad:ec:54:79:0d:c0:1d:a4:3a:3a:aa:76:
99:6c:96:b5:c0:98:37:54:3d:e1:a7:30:37:85:ac:
54:eb:88:f7:5e:0e:1a:50:9b:a8:7a:d3:a4:1d:66:
df:6e:56:42:ad:10:c7:e7:3b:3b:ef:6e:3f:56:44:
67:8c:de:34:2d:f7:33:35:c6:e7:82:d9:f7:fb:c7:
e9:43:89:21:f4:fb:c5:f7:77:33:7a:66:e6:9e:c2:
73:b4:83:17:6d:6f:b2:55:53:60:b2:9a:0f:51:ed:
61:57:5f:ca:58:e1:3c:11:2a:b0:e2:17:c5:e9:c6:
1e:9a:fd:d8:55:a1:3e:7b:56:16:18:96:a2:9f:b3:
45:6c:02:6c:b6:08:dc:cb:5b:d4:c9:10:32:6b:28:
c3:f5:5d:db:ce:bf:fc:6b:df:d3:d4:b6:c1:45:54:
35:cd:25:0b:2f:6a:ed:a9:32:32:cf:fe:ef:14:35:
65:4c:d9:a7:17:0b:3e:ff:d7:4c:0b:6d:b9:b0:58:
e7:9a:bf:39:ee:b7:2d:46:72:35:cf:a1:77:c3:ae:
5d:02:3d:c6:f3:bb:df:09:35:a5:e6:fc:de:0a:c3:
b3:c7:e5:2f:10:51:b2:6f:5f:ed:39:53:8a:ea:0a:
d6:9c:8a:a3:df:2d:b1:c8:19:d6:7d:e5:44:24:dc:
9d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5F:AE:3F:D3:64:87:8C:C6:3C:7E:9E:1F:11:0E:39:3A:29:8A:25
X509v3 Authority Key Identifier:
keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:3f:bb:46:be:64:b0:0e:8c:f5:5d:7f:6f:91:a5:36:ea:64:
ec:c7:bf:c5:cb:54:fe:1b:97:87:5f:9e:98:45:c6:d0:e6:27:
5c:e0:71:fd:22:43:91:1c:58:21:c6:4d:b4:fe:a1:db:41:50:
4c:0d:62:3b:3c:97:6f:91:69:44:7c:42:47:b8:03:4c:fa:69:
60:35:87:be:3c:e2:2e:74:88:06:40:fc:20:82:9a:88:43:9f:
c3:67:a1:35:e0:d8:e9:60:36:03:e3:cd:d9:0f:57:0a:b2:fa:
3a:09:c9:09:27:4c:46:09:d1:dc:4b:f1:8c:46:a4:d6:a3:27:
57:e0:b8:de:56:0f:88:e5:c9:a0:47:b2:f9:00:f1:c9:80:10:
a1:a1:2a:c1:0e:58:9e:ae:38:fe:c0:1b:93:df:ee:de:36:1d:
d2:87:28:08:f9:54:ca:c3:bc:44:94:62:f3:eb:fe:48:1b:3c:
34:20:48:e3:71:7a:78:50:08:ce:80:34:c4:5e:da:6f:5d:9c:
52:2d:ad:9d:33:bb:5d:c6:6e:bd:e9:e6:43:37:b2:e4:97:e1:
69:fa:96:0f:a6:4f:13:e1:0b:36:95:71:bb:17:fd:03:a8:36:
cb:77:09:ca:53:d4:cd:a8:d4:76:67:16:99:e8:0a:a9:7f:3c:
96:df:e7:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkvNrcFGl7EBs+W511tefKnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YTVhYjY2OWZhYmU3MmRlYzJlODM3ODQ3NmE3ZTkxNWMy
NGVkY2YwHhcNMjUwOTA5MTYwMjE4WhcNMjUwOTEwMTYwMjE4WjAzMTEwLwYDVQQD
EyhkODVmYWUzZmQzNjQ4NzhjYzYzYzdlOWUxZjExMGUzOTNhMjk4YTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPSt7FR5DcAdpDo6qnaZbJa1wJg3
VD3hpzA3haxU64j3Xg4aUJuoetOkHWbfblZCrRDH5zs7724/VkRnjN40LfczNcbn
gtn3+8fpQ4kh9PvF93czembmnsJztIMXbW+yVVNgspoPUe1hV1/KWOE8ESqw4hfF
6cYemv3YVaE+e1YWGJain7NFbAJstgjcy1vUyRAyayjD9V3bzr/8a9/T1LbBRVQ1
zSULL2rtqTIyz/7vFDVlTNmnFws+/9dMC225sFjnmr857rctRnI1z6F3w65dAj3G
87vfCTWl5vzeCsOzx+UvEFGyb1/tOVOK6grWnIqj3y2xyBnWfeVEJNydwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhfrj/TZIeMxjx+nh8RDjk6KYolMB8GA1UdIwQY
MBaAFIilq2afq+ct7C6DeEdqfpFcJO3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUtXclpwLXI1eTNzTG9ONFIycC1rVndrN2M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82OGNkMTAtZTVjYy00ZjQ3LTg0YTkt
MTVhMDIwN2Q0NjA5LzEvaUtXclpwLXI1eTNzTG9ONFIycC1rVndrN2M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy82OGNkMTAtZTVjYy00ZjQ3LTg0YTktMTVhMDIwN2Q0NjA5
LzEvaUtXclpwLXI1eTNzTG9ONFIycC1rVndrN2M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyT+7Rr5k
sA6M9V1/b5GlNupk7Me/xctU/huXh1+emEXG0OYnXOBx/SJDkRxYIcZNtP6h20FQ
TA1iOzyXb5FpRHxCR7gDTPppYDWHvjziLnSIBkD8IIKaiEOfw2ehNeDY6WA2A+PN
2Q9XCrL6OgnJCSdMRgnR3EvxjEak1qMnV+C43lYPiOXJoEey+QDxyYAQoaEqwQ5Y
nq44/sAbk9/u3jYd0ocoCPlUysO8RJRi8+v+SBs8NCBI43F6eFAIzoA0xF7ab12c
Ui2tnTO7XcZuvenmQzey5JfhafqWD6ZPE+ELNpVxuxf9A6g2y3cJylPUzajUdmcW
megKqX88lt/nvw==
-----END CERTIFICATE-----
Generated at Tue Sep 9 17:48:32 2025 by rpki-client