Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
File: ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft (raw, json)
Hash identifier: rkkQdtfNbRLzi3ItlE/BQIAG6RZ0NhocYYiJuLPY4i8=
Subject key identifier: A0:94:E4:9C:DE:C8:C9:F9:32:EE:B5:DF:FF:78:9F:D5:2D:4C:0A:8E
Authority key identifier: 8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
Certificate issuer: /CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Certificate serial: 019A209BB47F9C4584DF24554E0F8C1EE09D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
Manifest number: 16F5
Signing time: Sun 26 Oct 2025 13:01:06 +0000
Manifest this update: Sun 26 Oct 2025 13:01:06 +0000
Manifest next update: Mon 27 Oct 2025 13:01:06 +0000
Files and hashes: 1: Y5SHLkym5EnCD8MfwTIMclhP_Hk.roa (hash: 4DOa2lF9/Fyb4YOZbeBJmTOtFtNcdwU9BIHDAS+IUPA=)
2: ZyyMUpD8BracjmDLdZi2eYsV3GA.roa (hash: kndWXz3QPBLyWguASqaNYsH4u94S2FJubqWiONIhSqU=)
3: ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl (hash: NadgVThe4npJ1CJcML5CMtZ/f5Fv9CGnUH5COOqcMg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:b4:7f:9c:45:84:df:24:55:4e:0f:8c:1e:e0:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a48ac3ef7279c0f6bc3908f27edb091b5a65ac5
Validity
Not Before: Oct 26 13:01:06 2025 GMT
Not After : Oct 27 13:01:06 2025 GMT
Subject: CN=a094e49cdec8c9f932eeb5dfff789fd52d4c0a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:92:f5:9a:24:cb:2e:30:17:93:0d:5f:f0:fa:
c9:22:a9:2e:ad:e7:4f:1d:e3:ca:36:e1:73:f5:60:
44:f9:74:d1:5e:1d:3a:cd:64:91:cd:52:9a:8f:e8:
e6:07:c4:68:05:e1:0a:f1:d1:e1:96:f4:f0:fa:78:
ff:1a:00:64:1a:bf:9c:60:c2:88:b6:a4:89:80:17:
93:48:24:6b:34:1d:fa:50:8d:92:b6:11:66:9a:19:
c5:4e:28:75:c8:6a:3c:37:41:24:0b:72:4a:3e:44:
6a:62:9a:1f:37:92:4b:33:c8:15:62:d5:58:8a:bf:
84:60:a3:27:68:44:2c:8c:8f:af:25:2b:c0:f8:20:
69:01:c3:5c:3d:aa:61:ee:b1:a8:7e:e1:2c:0c:65:
cf:4f:b0:3a:4c:c6:eb:8d:04:97:41:17:b4:4b:1b:
c5:ee:9d:a7:d8:01:5d:3c:20:67:02:17:c6:b2:0b:
17:f9:b8:bc:54:f4:7f:44:9a:9d:ee:dd:a2:78:b7:
c5:15:ec:65:2e:91:15:61:f9:d2:a7:69:70:54:31:
aa:ee:e8:73:70:05:07:7c:0f:c1:50:53:7f:7b:9c:
8a:c1:db:16:4c:73:ed:21:03:62:e9:74:63:38:d3:
09:1c:dd:2a:34:90:43:34:42:9b:fc:6d:a6:bb:53:
a6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:94:E4:9C:DE:C8:C9:F9:32:EE:B5:DF:FF:78:9F:D5:2D:4C:0A:8E
X509v3 Authority Key Identifier:
keyid:8A:48:AC:3E:F7:27:9C:0F:6B:C3:90:8F:27:ED:B0:91:B5:A6:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikisPvcnnA9rw5CPJ-2wkbWmWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/eb4fc7-b414-4798-b756-1a0e5048632a/1/ikisPvcnnA9rw5CPJ-2wkbWmWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a4:eb:7e:a8:16:00:f7:c7:65:a7:15:a0:c9:f9:36:75:2f:
ed:3b:69:48:0f:97:e8:84:1c:29:4e:53:6a:61:b6:1a:25:85:
2b:b3:21:41:fc:ac:8e:b5:bd:f4:73:e8:31:47:12:5e:5a:a1:
05:01:8d:49:7c:6b:25:34:74:83:98:49:e2:4d:99:cd:5e:a3:
4b:26:49:e7:72:b8:d9:6a:45:be:46:1b:1d:2c:6b:7c:a8:85:
86:97:c3:48:a9:ad:cf:84:cb:ad:89:58:51:c8:10:60:f8:5e:
38:87:f8:65:8b:36:51:02:4d:a8:0e:4f:57:a8:7a:85:46:62:
16:bd:c3:c3:d5:ed:e5:c5:a0:a9:02:11:18:83:7a:eb:96:77:
df:25:bc:2c:5c:9e:9d:5b:a4:8c:7a:67:35:f5:39:64:75:c0:
a3:69:be:12:19:4d:72:b7:05:37:99:5f:c5:9c:04:ce:9f:66:
c6:47:1a:ad:19:37:0f:db:00:a3:b1:a0:55:ff:64:ef:2a:e4:
55:1c:27:17:a0:33:1f:3c:c8:26:ff:64:5a:79:7c:f0:87:c3:
d7:47:8c:b4:53:0f:f8:db:eb:30:d2:ae:d7:1f:71:36:e6:d3:
40:67:cc:ac:97:a2:3b:33:28:49:92:95:ba:6a:d7:a3:20:3a:
f7:85:6b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:47:39 2025 by rpki-client