Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft
File: iKVZ3N1bxLZssklvLm-w6PlUqus.mft (raw, json)
Hash identifier: 8MAiINToHIZh4N17Dq34bCF6G+I0TZGyfD01Lp45T/I=
Subject key identifier: 62:5F:CC:FF:D4:17:DB:15:F0:A3:BA:E8:E9:4F:42:2C:45:EE:74:E0
Authority key identifier: 88:A5:59:DC:DD:5B:C4:B6:6C:B2:49:6F:2E:6F:B0:E8:F9:54:AA:EB
Certificate issuer: /CN=88a559dcdd5bc4b66cb2496f2e6fb0e8f954aaeb
Certificate serial: 01987DF81623158286676553090A24DE747F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft
Manifest number: 0F84
Signing time: Wed 06 Aug 2025 06:01:07 +0000
Manifest this update: Wed 06 Aug 2025 06:01:07 +0000
Manifest next update: Thu 07 Aug 2025 06:01:07 +0000
Files and hashes: 1: iKVZ3N1bxLZssklvLm-w6PlUqus.crl (hash: 8hoFuYFpoB4BRMpDgkCTCXfhiLVDzIklO0YnU9jkS0M=)
2: oGUzs3HriURmMyvP-1mM3ixvd88.roa (hash: U9dJ3cn9/4GeEgNWQhNTsFuWjpySklwjtb60dseGPO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:16:23:15:82:86:67:65:53:09:0a:24:de:74:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a559dcdd5bc4b66cb2496f2e6fb0e8f954aaeb
Validity
Not Before: Aug 6 06:01:07 2025 GMT
Not After : Aug 7 06:01:07 2025 GMT
Subject: CN=625fccffd417db15f0a3bae8e94f422c45ee74e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:55:92:3f:2d:37:e0:88:c8:aa:1d:74:32:3b:
85:2d:f1:3a:b4:cc:30:5b:ea:63:c3:fa:08:be:6d:
ea:63:19:70:4e:10:53:26:37:70:44:ee:9c:16:1f:
3c:00:25:96:ad:c6:c9:0c:dd:3d:9b:cc:96:36:da:
17:5f:42:fe:b0:dc:fd:a2:e4:05:87:06:de:a8:9e:
49:0d:03:13:ca:e1:9a:43:5e:5e:bb:e3:7f:46:1a:
e0:95:da:69:28:90:93:c6:d8:43:2c:9d:d6:6f:ea:
18:c9:7b:78:3d:8b:fe:ce:61:de:52:a3:5e:c2:69:
fe:c1:f8:48:33:5f:aa:5c:fa:e2:05:02:8d:eb:09:
b0:4a:0c:1f:7d:a8:47:0f:19:9c:b3:5b:35:d7:ba:
80:59:be:96:36:fa:27:b9:7c:75:5f:c8:1c:64:f1:
2c:e8:7c:e7:99:88:1d:6b:b3:91:10:1d:0c:3b:9b:
e2:47:a1:03:7e:fc:59:4b:c8:e3:d6:84:cb:91:93:
cc:14:10:5c:6e:b2:55:f6:4c:42:ec:db:29:d9:39:
93:de:67:8a:ce:a3:24:d0:10:96:34:15:22:09:66:
59:96:9a:fa:95:db:eb:68:5c:5e:03:06:a6:d1:6c:
ea:91:79:fd:0a:d1:af:fe:66:54:3c:e3:fd:d0:c8:
79:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5F:CC:FF:D4:17:DB:15:F0:A3:BA:E8:E9:4F:42:2C:45:EE:74:E0
X509v3 Authority Key Identifier:
keyid:88:A5:59:DC:DD:5B:C4:B6:6C:B2:49:6F:2E:6F:B0:E8:F9:54:AA:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKVZ3N1bxLZssklvLm-w6PlUqus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a84cd2-45d9-4179-a997-920d2a6207a4/1/iKVZ3N1bxLZssklvLm-w6PlUqus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:d2:47:63:be:f3:01:48:83:11:b7:7c:b2:85:ea:e5:8f:ad:
6b:e0:9b:55:4f:7b:d6:4b:4c:36:ec:2f:76:40:0c:b4:3f:ba:
d6:52:8c:10:d1:86:dc:d3:ee:8a:bb:fb:5f:bb:cb:d1:c3:f6:
19:65:06:aa:98:f9:b8:2d:bf:58:c3:fe:68:a5:38:73:1f:a5:
2c:4d:5b:69:a2:bb:ca:84:0c:7f:9e:5f:1b:cc:b1:cf:a4:4c:
41:d7:b4:88:5e:f4:40:fe:2e:f3:83:29:1c:1a:e6:37:53:d0:
56:79:8f:25:55:b3:e7:b9:c3:17:7a:5c:c1:e1:90:44:ae:d5:
43:ab:80:8f:57:05:ec:20:81:5e:d4:ba:cc:33:d7:6e:dd:75:
f3:ff:fb:11:3f:0d:ed:40:25:93:23:4f:89:28:f3:53:d3:58:
00:69:77:67:d1:3b:74:f1:09:c2:80:88:d0:07:e2:e7:4d:b4:
8a:cc:7e:3a:ad:8a:36:72:cf:58:d7:60:c3:40:13:f8:f1:27:
c6:ea:d3:de:c8:01:60:9e:db:a1:44:77:9e:4e:a0:6b:23:30:
63:c1:d6:c5:65:c9:5a:09:dd:56:d3:44:61:82:79:b8:81:ef:
09:0f:ed:85:4f:75:7d:11:8a:ca:4b:db:56:2c:d3:e8:fb:80:
79:c2:3f:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9+BYjFYKGZ2VTCQok3nR/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YTU1OWRjZGQ1YmM0YjY2Y2IyNDk2ZjJlNmZiMGU4Zjk1
NGFhZWIwHhcNMjUwODA2MDYwMTA3WhcNMjUwODA3MDYwMTA3WjAzMTEwLwYDVQQD
Eyg2MjVmY2NmZmQ0MTdkYjE1ZjBhM2JhZThlOTRmNDIyYzQ1ZWU3NGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVWSPy034IjIqh10MjuFLfE6tMww
W+pjw/oIvm3qYxlwThBTJjdwRO6cFh88ACWWrcbJDN09m8yWNtoXX0L+sNz9ouQF
hwbeqJ5JDQMTyuGaQ15eu+N/RhrgldppKJCTxthDLJ3Wb+oYyXt4PYv+zmHeUqNe
wmn+wfhIM1+qXPriBQKN6wmwSgwffahHDxmcs1s117qAWb6WNvonuXx1X8gcZPEs
6HznmYgda7OREB0MO5viR6EDfvxZS8jj1oTLkZPMFBBcbrJV9kxC7Nsp2TmT3meK
zqMk0BCWNBUiCWZZlpr6ldvraFxeAwam0WzqkXn9CtGv/mZUPOP90Mh5fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJfzP/UF9sV8KO66OlPQixF7nTgMB8GA1UdIwQY
MBaAFIilWdzdW8S2bLJJby5vsOj5VKrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUtWWjNOMWJ4TFpzc2tsdkxtLXc2UGxVcXVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hODRjZDItNDVkOS00MTc5LWE5OTct
OTIwZDJhNjIwN2E0LzEvaUtWWjNOMWJ4TFpzc2tsdkxtLXc2UGxVcXVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9hODRjZDItNDVkOS00MTc5LWE5OTctOTIwZDJhNjIwN2E0
LzEvaUtWWjNOMWJ4TFpzc2tsdkxtLXc2UGxVcXVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAutJHY77z
AUiDEbd8soXq5Y+ta+CbVU971ktMNuwvdkAMtD+61lKMENGG3NPuirv7X7vL0cP2
GWUGqpj5uC2/WMP+aKU4cx+lLE1baaK7yoQMf55fG8yxz6RMQde0iF70QP4u84Mp
HBrmN1PQVnmPJVWz57nDF3pcweGQRK7VQ6uAj1cF7CCBXtS6zDPXbt118//7ET8N
7UAlkyNPiSjzU9NYAGl3Z9E7dPEJwoCI0Afi5020isx+Oq2KNnLPWNdgw0AT+PEn
xurT3sgBYJ7boUR3nk6gayMwY8HWxWXJWgndVtNEYYJ5uIHvCQ/thU91fRGKykvb
VizT6PuAecI/Tw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:04 2025 by rpki-client