Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
File: iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft (raw, json)
Hash identifier: gjP/nhNsnNXVTrkQWAHVSmn8IBsgVJwo/TKf8I97LrI=
Subject key identifier: 12:FC:34:64:8D:4D:F3:6F:75:8F:CD:BA:37:BC:27:2F:C2:A1:6E:15
Authority key identifier: 88:A6:2C:F8:10:0E:8C:1B:47:54:43:FD:94:CD:58:D8:EF:2A:33:AE
Certificate issuer: /CN=88a62cf8100e8c1b475443fd94cd58d8ef2a33ae
Certificate serial: 019A71B931C13A5D27C3A422BFEBDD6EB6A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:02:33 +0000
Manifest this update: Tue 11 Nov 2025 07:02:33 +0000
Manifest next update: Wed 12 Nov 2025 07:02:33 +0000
Files and hashes: 1: iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl (hash: j+U2cGqIISTCweOlqo5A5ez2vDTMb6+HSwQ3nKpoPsA=)
2: qvYpsZQGhS3eiJYFcpoDInx2DkE.roa (hash: AzKXVpJ7rQhInqcKxYMIE20bjXuo9eJ0x8CLUXTV+A0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:31:c1:3a:5d:27:c3:a4:22:bf:eb:dd:6e:b6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a62cf8100e8c1b475443fd94cd58d8ef2a33ae
Validity
Not Before: Nov 11 07:02:33 2025 GMT
Not After : Nov 12 07:02:33 2025 GMT
Subject: CN=12fc34648d4df36f758fcdba37bc272fc2a16e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ec:1d:9a:32:e3:26:28:ab:b7:7a:a3:47:17:
de:d0:6d:41:82:2b:cf:ae:65:a3:76:bf:6d:8c:b2:
4a:b0:cc:d3:6c:69:c2:c7:0a:b8:dd:42:a8:88:94:
63:6a:bb:19:93:f4:b9:7d:b5:fa:ac:9e:e1:34:1b:
59:41:2b:7c:ad:a9:2f:aa:db:26:13:39:a9:eb:30:
07:35:e0:e4:38:e9:57:c2:cf:87:6a:58:99:66:9c:
7c:8e:99:3c:d1:a2:3d:74:95:4a:36:52:54:00:97:
ba:16:22:13:83:4e:b1:99:bf:b9:99:fe:e4:77:23:
c1:c4:f8:3c:85:4d:19:37:1e:b1:eb:ba:19:5a:42:
72:19:73:d5:ad:e8:58:75:12:2d:cf:98:a8:8b:3c:
62:9d:a1:2a:a5:96:b0:ef:21:3c:f0:22:d7:55:1e:
d0:e7:30:df:01:ce:05:a6:76:2d:4e:72:b0:bf:87:
76:e6:00:d9:72:2f:83:96:20:8a:cc:b6:05:97:10:
23:96:78:e9:44:17:ad:b5:16:ff:14:e6:01:7f:0a:
a8:ad:dd:66:ff:b0:f7:8f:21:c3:1c:ae:f9:02:b8:
4f:b2:d2:56:f4:4d:2e:40:5a:bf:4d:86:20:06:0f:
0c:24:2d:01:de:22:a1:af:6c:32:4e:17:46:76:1c:
1e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FC:34:64:8D:4D:F3:6F:75:8F:CD:BA:37:BC:27:2F:C2:A1:6E:15
X509v3 Authority Key Identifier:
keyid:88:A6:2C:F8:10:0E:8C:1B:47:54:43:FD:94:CD:58:D8:EF:2A:33:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:64:33:eb:bc:63:a2:63:55:01:9c:98:87:22:63:d9:bc:85:
4b:52:eb:78:17:b5:f7:ec:67:a5:55:3a:af:b9:70:f3:ad:9b:
1b:78:65:07:11:9e:a6:92:80:8e:fa:95:63:4a:20:e5:94:54:
f5:e1:0b:3d:ee:14:fa:89:4a:cb:39:60:54:47:8a:6b:8c:f3:
d3:a8:f6:b1:fe:1d:1f:9b:9d:ad:c0:39:62:b6:f8:2c:be:f0:
26:4c:a9:0b:24:6f:7d:71:2f:98:7e:24:24:dc:ce:c1:29:8a:
76:1c:6d:32:3a:7a:43:e7:b7:9a:0a:26:22:11:47:5d:bb:9f:
6a:4b:b6:8f:bc:95:e4:6c:b1:ae:7b:81:45:c7:e7:e6:6a:2d:
29:e6:f0:20:f4:83:5f:7a:bb:0d:0f:3b:31:91:e8:0c:3e:c7:
b9:5d:4e:46:33:5c:87:e6:32:d0:68:e4:03:23:a0:cb:c0:77:
ad:f5:68:1c:d9:a5:e7:e5:c3:f6:ff:13:61:da:e6:6c:4e:af:
82:cb:78:29:16:63:6a:2e:d4:27:7d:b6:1c:32:1f:d6:b4:78:
7c:04:21:53:af:0a:1b:18:df:d8:0b:b9:33:75:fb:b9:d5:12:
2f:18:6c:fb:de:77:f0:f6:ad:75:d5:49:0b:42:16:72:31:22:
5b:41:3c:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuTHBOl0nw6Qiv+vdbragMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YTYyY2Y4MTAwZThjMWI0NzU0NDNmZDk0Y2Q1OGQ4ZWYy
YTMzYWUwHhcNMjUxMTExMDcwMjMzWhcNMjUxMTEyMDcwMjMzWjAzMTEwLwYDVQQD
EygxMmZjMzQ2NDhkNGRmMzZmNzU4ZmNkYmEzN2JjMjcyZmMyYTE2ZTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OwdmjLjJiirt3qjRxfe0G1BgivP
rmWjdr9tjLJKsMzTbGnCxwq43UKoiJRjarsZk/S5fbX6rJ7hNBtZQSt8rakvqtsm
Ezmp6zAHNeDkOOlXws+HaliZZpx8jpk80aI9dJVKNlJUAJe6FiITg06xmb+5mf7k
dyPBxPg8hU0ZNx6x67oZWkJyGXPVrehYdRItz5ioizxinaEqpZaw7yE88CLXVR7Q
5zDfAc4FpnYtTnKwv4d25gDZci+DliCKzLYFlxAjlnjpRBettRb/FOYBfwqord1m
/7D3jyHDHK75ArhPstJW9E0uQFq/TYYgBg8MJC0B3iKhr2wyThdGdhweeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBL8NGSNTfNvdY/Nuje8Jy/CoW4VMB8GA1UdIwQY
MBaAFIimLPgQDowbR1RD/ZTNWNjvKjOuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUtZcy1CQU9qQnRIVkVQOWxNMVkyTzhxTTY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lZWYwMzUtMjYyOS00ZTNlLWJlYmMt
MTVhMGRkZGQ3NDljLzEvaUtZcy1CQU9qQnRIVkVQOWxNMVkyTzhxTTY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9lZWYwMzUtMjYyOS00ZTNlLWJlYmMtMTVhMGRkZGQ3NDlj
LzEvaUtZcy1CQU9qQnRIVkVQOWxNMVkyTzhxTTY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB2Qz67xj
omNVAZyYhyJj2byFS1LreBe19+xnpVU6r7lw862bG3hlBxGeppKAjvqVY0og5ZRU
9eELPe4U+olKyzlgVEeKa4zz06j2sf4dH5udrcA5Yrb4LL7wJkypCyRvfXEvmH4k
JNzOwSmKdhxtMjp6Q+e3mgomIhFHXbufaku2j7yV5GyxrnuBRcfn5motKebwIPSD
X3q7DQ87MZHoDD7HuV1ORjNch+Yy0GjkAyOgy8B3rfVoHNml5+XD9v8TYdrmbE6v
gst4KRZjai7UJ322HDIf1rR4fAQhU68KGxjf2Au5M3X7udUSLxhs+9538PatddVJ
C0IWcjEiW0E8fg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:40 2025 by rpki-client