Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.mft
File: iKlKQUDhmzIGP8bnefWTFKdKDFE.mft (raw, json)
Hash identifier: 7HYc/79tKwGb6dy8wZkjj/n/KaJGvX7l6gCu7SlMAXY=
Subject key identifier: CC:1F:6F:E3:4D:24:F1:F9:30:E5:6E:BF:7D:55:A8:E7:15:FB:81:48
Authority key identifier: 88:A9:4A:41:40:E1:9B:32:06:3F:C6:E7:79:F5:93:14:A7:4A:0C:51
Certificate issuer: /CN=88a94a4140e19b32063fc6e779f59314a74a0c51
Certificate serial: 01988D6AC954FB6765B0F2E203AE3449CABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKlKQUDhmzIGP8bnefWTFKdKDFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.mft
Manifest number: 1625
Signing time: Sat 09 Aug 2025 06:00:42 +0000
Manifest this update: Sat 09 Aug 2025 06:00:42 +0000
Manifest next update: Sun 10 Aug 2025 06:00:42 +0000
Files and hashes: 1: S1kW1dWYYAUdp34Ffvr3hqq6tx4.roa (hash: HPlJ0x+8hEc9+twnaORN/j75RT2RjTnSkW49RshA3cE=)
2: iKlKQUDhmzIGP8bnefWTFKdKDFE.crl (hash: o1NAEdp2KjKNoPWtDd0ywoq+XXg/QfSc6iVZfDSoZBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKlKQUDhmzIGP8bnefWTFKdKDFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6a:c9:54:fb:67:65:b0:f2:e2:03:ae:34:49:ca:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a94a4140e19b32063fc6e779f59314a74a0c51
Validity
Not Before: Aug 9 06:00:42 2025 GMT
Not After : Aug 10 06:00:42 2025 GMT
Subject: CN=cc1f6fe34d24f1f930e56ebf7d55a8e715fb8148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1d:fe:02:82:d1:0f:78:00:3d:0e:57:f0:c6:
07:e4:c2:d5:c3:ee:a7:e6:ee:69:cb:b0:98:e1:a7:
e2:93:75:a7:8c:63:1e:a9:4f:d6:86:9b:55:3e:61:
69:b7:31:8c:a5:9c:b6:ba:b0:55:90:35:79:31:fe:
35:77:71:ae:c0:0d:3a:6c:b5:24:14:60:e5:7a:61:
0d:de:8a:a0:49:8f:e5:6f:9a:93:a3:f7:ff:fd:b0:
3b:b9:4d:2d:73:7d:30:89:69:12:f5:cd:f6:c8:3f:
ee:98:ea:5e:e2:96:02:d0:59:ab:44:10:7f:56:11:
b4:d5:23:78:a1:e2:4c:a5:07:e3:1c:70:23:47:f4:
66:c1:f0:70:77:6a:0c:8b:57:40:18:b0:b0:fb:74:
ac:95:63:7f:15:2f:61:9f:9a:70:7e:d0:e2:7a:76:
69:67:d4:e3:8e:b5:99:2b:31:1a:66:86:10:f4:53:
5b:3e:e7:9e:a6:00:38:38:f0:3d:c3:b1:0d:78:3b:
dd:66:c8:c8:b6:62:51:51:7d:56:13:f0:41:4e:64:
90:0f:38:cd:9c:b8:53:b4:95:34:05:8c:03:fb:3a:
1f:e7:02:ef:95:aa:da:af:ee:78:8d:c1:37:a3:d2:
94:ab:75:04:2d:eb:76:0a:cc:53:85:37:fc:ff:30:
16:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1F:6F:E3:4D:24:F1:F9:30:E5:6E:BF:7D:55:A8:E7:15:FB:81:48
X509v3 Authority Key Identifier:
keyid:88:A9:4A:41:40:E1:9B:32:06:3F:C6:E7:79:F5:93:14:A7:4A:0C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKlKQUDhmzIGP8bnefWTFKdKDFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/61ccd4-e053-45e0-b635-7fea066f0b96/1/iKlKQUDhmzIGP8bnefWTFKdKDFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:58:45:2b:14:cb:32:de:f9:6f:98:e1:61:ae:d9:52:70:b6:
a3:bf:4c:e0:99:ce:6b:06:33:63:fb:52:d1:d8:25:28:fa:61:
c4:59:4f:f2:e0:92:92:18:d6:12:e1:2c:68:35:6c:ad:f2:61:
33:4f:3c:1f:25:55:5e:b5:56:de:3a:f9:b7:64:fd:51:6a:a5:
f2:ef:6c:8c:0a:af:53:e4:e1:5a:50:1e:cd:66:7f:d3:f9:46:
33:68:41:65:1b:81:df:f9:d0:c2:7f:25:88:16:1f:02:2d:38:
5c:44:4a:6b:6a:3e:40:af:1d:f9:d8:45:3a:dd:d1:a9:91:cd:
64:19:70:ac:50:ae:76:14:ac:aa:a5:9e:1e:94:0a:ad:39:d9:
ef:2f:77:e8:50:80:a7:1a:a1:09:9c:fe:51:b2:6c:5a:4d:e1:
f8:54:7d:c5:d4:f9:d9:d5:c9:5c:1e:ba:81:15:67:17:ab:67:
55:05:5a:1a:8d:3c:c8:2e:4b:85:4b:1c:d4:2c:8f:64:f3:44:
09:cd:63:78:a9:2d:9a:66:44:a6:30:6a:5d:3b:df:62:4c:a2:
13:33:44:4d:6a:3c:24:fa:11:81:ec:14:87:cb:13:97:67:21:
36:a2:90:59:67:2e:a9:f8:bc:7b:0e:49:1f:e0:03:66:de:68:
2e:b7:4c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:22:47 2025 by rpki-client