Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
File: io-pkrwKYdssvnhuHFnTYMzlRIY.mft (raw, json)
Hash identifier: KOLZjPUkNqtqi0hrPwftzloLQ/4Bw6Alc/8SHH4lLGI=
Subject key identifier: 17:96:3C:87:34:F8:11:C7:E1:19:A6:98:1A:95:21:35:F6:14:C8:E2
Authority key identifier: 8A:8F:A9:92:BC:0A:61:DB:2C:BE:78:6E:1C:59:D3:60:CC:E5:44:86
Certificate issuer: /CN=8a8fa992bc0a61db2cbe786e1c59d360cce54486
Certificate serial: 0198A1969004E5BF3057050FD97BB7C4BBF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
Manifest number: 0784
Signing time: Wed 13 Aug 2025 04:00:55 +0000
Manifest this update: Wed 13 Aug 2025 04:00:55 +0000
Manifest next update: Thu 14 Aug 2025 04:00:55 +0000
Files and hashes: 1: UCOQjmQUUOgrTdTJgotuOqOo8tE.roa (hash: LKSVHd9tPQynvxDd2UN8Jk/eJK88GQBFqDbfRDHvZ3g=)
2: io-pkrwKYdssvnhuHFnTYMzlRIY.crl (hash: R1ep6DxorHtRpVfl7Yn38N5SvB/YHuw2cKOIQdiDAJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:96:90:04:e5:bf:30:57:05:0f:d9:7b:b7:c4:bb:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8fa992bc0a61db2cbe786e1c59d360cce54486
Validity
Not Before: Aug 13 04:00:55 2025 GMT
Not After : Aug 14 04:00:55 2025 GMT
Subject: CN=17963c8734f811c7e119a6981a952135f614c8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6d:18:08:dc:35:5d:da:91:97:fc:ba:02:d5:
3a:2d:df:ec:04:59:44:bc:63:91:32:b3:0a:fb:50:
48:64:5d:c7:41:0d:e3:e3:0e:6a:ed:97:8d:8f:12:
86:05:bf:df:37:7e:45:db:68:60:1f:54:7b:ba:f6:
03:3e:bf:c8:20:de:07:f0:26:9b:2d:e4:fb:71:71:
0b:8d:30:92:7d:1a:42:ed:fc:16:00:75:a9:04:56:
e5:9e:4c:2e:cb:66:2b:e1:bb:e2:2a:f0:6e:f3:20:
e4:61:44:79:f2:4c:61:23:b3:38:48:6d:99:3f:85:
42:74:dd:2c:9d:e3:50:de:51:1f:58:76:f0:24:e7:
7c:45:c7:94:b4:e6:6c:fa:38:f8:66:d3:43:ff:cd:
e9:a1:a6:6e:02:24:1b:ac:90:81:d7:32:05:75:30:
95:3c:49:c7:22:6b:0f:f4:39:0f:eb:75:24:ab:2b:
a8:95:4e:3f:f6:59:ed:89:c9:0e:d7:b7:e6:91:df:
0b:81:70:bb:29:4b:8f:53:5b:f8:b4:fe:43:cb:14:
da:fa:b1:4c:51:9b:85:ec:5c:31:05:85:e9:81:32:
fe:98:ff:fb:4a:73:e1:dd:77:1e:05:95:19:8d:8e:
80:87:72:89:4b:5f:f6:ea:b5:05:8d:3f:4f:7f:cd:
d7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:96:3C:87:34:F8:11:C7:E1:19:A6:98:1A:95:21:35:F6:14:C8:E2
X509v3 Authority Key Identifier:
keyid:8A:8F:A9:92:BC:0A:61:DB:2C:BE:78:6E:1C:59:D3:60:CC:E5:44:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3a:ec:b7:79:35:43:ea:2f:53:a7:5d:57:4e:7c:02:b4:c1:
08:a8:c1:7d:30:c8:d7:24:0c:71:50:b9:5d:0b:c8:ae:7c:7d:
42:ca:d7:e2:64:43:80:9f:af:9f:8a:cb:73:20:ce:55:78:7e:
2e:90:fd:51:10:dd:42:7a:e2:02:9b:78:b5:62:00:6a:ed:fa:
99:df:2b:30:53:9e:bf:c4:cf:86:47:31:99:96:d5:fe:0b:43:
2a:83:ea:ec:cb:66:d1:70:3e:fb:1d:f3:cd:bb:c7:79:4d:f7:
15:43:75:01:f1:87:9d:45:45:f2:d4:1e:7f:78:2a:08:41:da:
c1:4c:9d:40:90:da:37:82:db:1b:bc:cb:ae:93:53:84:c9:44:
87:f0:76:68:78:77:3e:3d:21:f9:c1:d7:42:7c:ef:8c:b7:e4:
6e:e2:40:e6:1c:7a:86:f7:64:08:17:ed:28:10:17:88:7e:34:
b9:bb:25:a7:33:ce:e8:b9:a7:e2:31:38:39:47:5d:29:12:ff:
d7:81:97:29:28:49:99:35:a2:08:90:bb:f2:18:fc:81:46:8d:
4d:c2:a5:88:b9:62:3b:7a:89:02:4a:c1:78:44:2d:77:c3:75:
67:27:b3:a9:63:26:6d:c1:6e:ee:a8:e3:c2:ea:3d:8d:b4:a3:
85:52:4c:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZihlpAE5b8wVwUP2Xu3xLv1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhOGZhOTkyYmMwYTYxZGIyY2JlNzg2ZTFjNTlkMzYwY2Nl
NTQ0ODYwHhcNMjUwODEzMDQwMDU1WhcNMjUwODE0MDQwMDU1WjAzMTEwLwYDVQQD
EygxNzk2M2M4NzM0ZjgxMWM3ZTExOWE2OTgxYTk1MjEzNWY2MTRjOGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW0YCNw1XdqRl/y6AtU6Ld/sBFlE
vGORMrMK+1BIZF3HQQ3j4w5q7ZeNjxKGBb/fN35F22hgH1R7uvYDPr/IIN4H8Cab
LeT7cXELjTCSfRpC7fwWAHWpBFblnkwuy2Yr4bviKvBu8yDkYUR58kxhI7M4SG2Z
P4VCdN0sneNQ3lEfWHbwJOd8RceUtOZs+jj4ZtND/83poaZuAiQbrJCB1zIFdTCV
PEnHImsP9DkP63UkqyuolU4/9lntickO17fmkd8LgXC7KUuPU1v4tP5DyxTa+rFM
UZuF7FwxBYXpgTL+mP/7SnPh3XceBZUZjY6Ah3KJS1/26rUFjT9Pf83XwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBeWPIc0+BHH4RmmmBqVITX2FMjiMB8GA1UdIwQY
MBaAFIqPqZK8CmHbLL54bhxZ02DM5USGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW8tcGtyd0tZZHNzdm5odUhGblRZTXpsUklZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xODAyMmMtMmQ5ZC00MzgwLWExNWIt
OTZhNjAxYmI2YmE4LzEvaW8tcGtyd0tZZHNzdm5odUhGblRZTXpsUklZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8xODAyMmMtMmQ5ZC00MzgwLWExNWItOTZhNjAxYmI2YmE4
LzEvaW8tcGtyd0tZZHNzdm5odUhGblRZTXpsUklZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfDrst3k1
Q+ovU6ddV058ArTBCKjBfTDI1yQMcVC5XQvIrnx9QsrX4mRDgJ+vn4rLcyDOVXh+
LpD9URDdQnriApt4tWIAau36md8rMFOev8TPhkcxmZbV/gtDKoPq7Mtm0XA++x3z
zbvHeU33FUN1AfGHnUVF8tQef3gqCEHawUydQJDaN4LbG7zLrpNThMlEh/B2aHh3
Pj0h+cHXQnzvjLfkbuJA5hx6hvdkCBftKBAXiH40ubslpzPO6Lmn4jE4OUddKRL/
14GXKShJmTWiCJC78hj8gUaNTcKliLliO3qJAkrBeEQtd8N1ZyezqWMmbcFu7qjj
wuo9jbSjhVJM2Q==
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:51:29 2025 by rpki-client