
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
File: iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft (raw, json)
Hash identifier: qGAbdy1xENqWDbdi+makdBHMykzMccL/j0BYBbbfRYY=
Subject key identifier: 9B:72:47:F1:7E:D0:CB:67:F7:97:19:C8:FE:20:A5:01:AC:03:59:06
Authority key identifier: 88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
Certificate issuer: /CN=88a780738b853acffbabdb23914c50e36421f773
Certificate serial: 0198978155C1108B3488DBE4F965DD7BF49F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
Manifest number: 162B
Signing time: Mon 11 Aug 2025 05:01:32 +0000
Manifest this update: Mon 11 Aug 2025 05:01:32 +0000
Manifest next update: Tue 12 Aug 2025 05:01:32 +0000
Files and hashes: 1: 0JBSKBByojNYZjOoZlphUB11hQs.roa (hash: 9bDpXvSUlNPWWMoYaJSQ0SO0EuZKnPkwfl5l8GKFytk=)
2: aKf7cpyzNQSyfw8b7-Pr38WCYnc.roa (hash: oRGD5ClevpyjAOYjV/aBq4YhQP42jPwVRjMhzooXQlg=)
3: iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl (hash: 44lA+f/PgWJxrY1Y0YtgtNKZO7uKI9lhK2bpUXuSABE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:81:55:c1:10:8b:34:88:db:e4:f9:65:dd:7b:f4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a780738b853acffbabdb23914c50e36421f773
Validity
Not Before: Aug 11 05:01:32 2025 GMT
Not After : Aug 12 05:01:32 2025 GMT
Subject: CN=9b7247f17ed0cb67f79719c8fe20a501ac035906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:28:43:f2:63:af:1d:e1:aa:66:59:39:d7:cd:
16:08:e8:79:40:a2:98:e7:b5:80:6a:c3:53:d9:0a:
30:10:06:de:db:75:6d:e3:fc:94:dd:90:3b:0c:0c:
82:c4:87:2a:c6:58:ea:b2:7a:ee:56:bf:8d:a1:e0:
2e:eb:05:5a:f1:ca:b5:05:72:e6:ae:9b:d8:c6:83:
ef:47:63:1d:94:f0:e8:c5:4d:77:23:3c:2e:c2:1d:
fc:af:df:a2:11:16:8b:21:eb:dd:6d:5b:3f:58:bb:
31:16:38:3c:e9:b1:f8:e5:8b:b9:0b:2c:c8:0f:14:
4b:9b:73:8c:bd:c6:1c:36:f7:1d:ec:a9:61:a0:ba:
5c:9b:a1:bb:86:5c:79:8a:83:59:18:83:4f:57:4b:
4d:07:15:9b:7a:06:b3:43:cf:94:e8:73:3e:2b:1a:
2c:1d:f4:a6:e9:62:b4:8f:99:15:4f:07:6b:48:72:
b1:ff:73:18:42:38:40:71:57:7f:8a:58:0e:5b:d4:
52:40:0c:5d:c9:18:3b:3d:e7:01:b0:fa:81:f3:0a:
33:ba:40:e4:99:a0:14:06:8f:ea:78:db:e2:43:8e:
40:99:97:78:b8:eb:32:d3:9c:d0:70:67:d6:6e:3f:
f7:39:bb:3b:f9:f6:71:74:84:8a:bd:1a:80:c3:67:
5d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:72:47:F1:7E:D0:CB:67:F7:97:19:C8:FE:20:A5:01:AC:03:59:06
X509v3 Authority Key Identifier:
keyid:88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ae:71:62:67:1d:af:92:1f:88:37:26:22:f0:13:97:ab:0a:
cf:7f:3a:52:de:b2:61:5d:e8:a2:55:f4:58:18:a7:e8:2d:cb:
43:34:ce:cf:9c:5d:be:40:88:fc:79:1d:10:55:cc:12:0c:b3:
db:1f:d2:6f:68:d2:68:d7:c5:fe:ca:75:f1:13:8f:26:81:8a:
4c:b0:05:35:cd:45:0e:c8:75:c3:62:50:b6:7a:22:d6:fc:43:
e9:89:7d:7f:5b:6f:a8:dc:32:aa:c2:9d:5c:61:ad:6e:7d:c2:
db:bd:f6:dd:d8:a2:16:30:b0:8e:1a:c7:23:46:f1:eb:1a:2e:
41:8f:b4:39:b3:a8:bb:3e:39:0b:e1:12:80:39:40:81:c6:0c:
b1:0f:65:a1:1e:e7:d5:20:0a:07:4e:7a:5e:b5:48:b1:a1:fe:
9f:d7:d3:e1:90:af:38:8e:4b:12:24:cf:26:25:51:86:c0:94:
23:b6:7b:51:e7:12:4f:f5:33:6f:03:7d:5d:13:66:bd:f7:87:
e8:52:72:cf:f4:87:58:59:fd:49:5e:b1:9b:3b:8d:4a:ec:ed:
3f:91:99:18:32:4d:29:ef:19:47:0b:04:84:cf:1f:eb:dc:83:
93:a0:f4:8f:22:48:86:73:06:3b:96:87:86:28:6a:fc:c3:5d:
72:49:9b:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXgVXBEIs0iNvk+WXde/SfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YTc4MDczOGI4NTNhY2ZmYmFiZGIyMzkxNGM1MGUzNjQy
MWY3NzMwHhcNMjUwODExMDUwMTMyWhcNMjUwODEyMDUwMTMyWjAzMTEwLwYDVQQD
Eyg5YjcyNDdmMTdlZDBjYjY3Zjc5NzE5YzhmZTIwYTUwMWFjMDM1OTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyhD8mOvHeGqZlk5180WCOh5QKKY
57WAasNT2QowEAbe23Vt4/yU3ZA7DAyCxIcqxljqsnruVr+NoeAu6wVa8cq1BXLm
rpvYxoPvR2MdlPDoxU13Izwuwh38r9+iERaLIevdbVs/WLsxFjg86bH45Yu5CyzI
DxRLm3OMvcYcNvcd7KlhoLpcm6G7hlx5ioNZGINPV0tNBxWbegazQ8+U6HM+Kxos
HfSm6WK0j5kVTwdrSHKx/3MYQjhAcVd/ilgOW9RSQAxdyRg7PecBsPqB8wozukDk
maAUBo/qeNviQ45AmZd4uOsy05zQcGfWbj/3Obs7+fZxdISKvRqAw2ddFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtyR/F+0Mtn95cZyP4gpQGsA1kGMB8GA1UdIwQY
MBaAFIingHOLhTrP+6vbI5FMUONkIfdzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUtlQWM0dUZPc183cTlzamtVeFE0MlFoOTNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iODk3MDQtNGZkMi00ZTA3LWEwMzkt
NjZmNTZlZjljZTI2LzEvaUtlQWM0dUZPc183cTlzamtVeFE0MlFoOTNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iODk3MDQtNGZkMi00ZTA3LWEwMzktNjZmNTZlZjljZTI2
LzEvaUtlQWM0dUZPc183cTlzamtVeFE0MlFoOTNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAka5xYmcd
r5IfiDcmIvATl6sKz386Ut6yYV3oolX0WBin6C3LQzTOz5xdvkCI/HkdEFXMEgyz
2x/Sb2jSaNfF/sp18ROPJoGKTLAFNc1FDsh1w2JQtnoi1vxD6Yl9f1tvqNwyqsKd
XGGtbn3C27323diiFjCwjhrHI0bx6xouQY+0ObOouz45C+ESgDlAgcYMsQ9loR7n
1SAKB056XrVIsaH+n9fT4ZCvOI5LEiTPJiVRhsCUI7Z7UecST/UzbwN9XRNmvfeH
6FJyz/SHWFn9SV6xmzuNSuztP5GZGDJNKe8ZRwsEhM8f69yDk6D0jyJIhnMGO5aH
hihq/MNdckmb6w==
-----END CERTIFICATE-----
Generated at Mon Aug 11 09:49:49 2025 by rpki-client