Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
File: imauQAwtaBlg6FU_yzFXi42c37Y.mft (raw, json)
Hash identifier: vtb4i9LznTgZ4Lh8u62ESNYcJn0hHqsx/yinsYEa6hE=
Subject key identifier: 79:B2:9B:68:06:DC:92:3B:3C:F3:AB:30:15:92:E2:27:5A:C7:FC:BD
Authority key identifier: 8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6
Certificate issuer: /CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6
Certificate serial: 0199FDDA62D6BF82821DEC520CF266288A94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
Manifest number: 0312
Signing time: Sun 19 Oct 2025 19:02:51 +0000
Manifest this update: Sun 19 Oct 2025 19:02:51 +0000
Manifest next update: Mon 20 Oct 2025 19:02:51 +0000
Files and hashes: 1: PuzSFCpssVQvjZAtpt-uOtGr7hY.roa (hash: SPN1lNtFS0koIE09mFP53lEypWhv8lUH53A6TRYkysY=)
2: imauQAwtaBlg6FU_yzFXi42c37Y.crl (hash: FW/32qOZsUtL4LqD8BpZr8+M/XzUUXNI5Zx5N50Iook=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:62:d6:bf:82:82:1d:ec:52:0c:f2:66:28:8a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6
Validity
Not Before: Oct 19 19:02:51 2025 GMT
Not After : Oct 20 19:02:51 2025 GMT
Subject: CN=79b29b6806dc923b3cf3ab301592e2275ac7fcbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2c:06:d2:00:7b:d2:be:bc:a8:4d:97:05:e7:
90:1c:78:1e:9c:a3:ad:51:99:9e:22:db:cb:59:9c:
9d:95:83:6b:c8:69:d6:92:02:69:c3:4b:e9:3b:69:
c2:81:d3:6f:89:0c:8a:08:7f:92:7d:36:82:94:a5:
07:69:a4:7a:a3:35:7e:a4:88:d2:a5:74:bc:58:75:
f5:ff:17:1b:38:40:6f:ce:93:9b:0e:57:00:d5:75:
90:6e:3c:a0:5a:8d:16:1e:36:93:42:1e:e9:17:c9:
df:06:b8:c5:9f:e9:8e:7d:94:59:c0:42:48:9d:9a:
21:99:e0:38:36:3b:e6:0c:d4:49:3b:aa:03:7f:c8:
e0:66:d6:8d:c9:4c:01:79:f2:89:8b:80:69:24:cf:
1d:3b:5d:0d:4e:65:76:e3:b5:c3:ca:7a:46:2e:51:
19:0a:01:a5:64:e4:f5:71:75:d9:f5:1e:ae:65:5c:
ba:b9:b1:f7:38:38:d3:64:bd:9b:ae:58:f1:fc:d2:
a9:84:ec:39:ed:a5:c3:70:97:0b:2c:9e:65:e4:38:
39:8b:8e:f9:7e:ca:b8:e7:24:76:d9:40:66:bd:4c:
5f:37:b4:c4:5e:94:ef:b1:bb:33:41:62:2b:af:40:
7e:18:45:31:78:d7:e0:aa:0e:66:13:a4:16:21:8a:
9d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B2:9B:68:06:DC:92:3B:3C:F3:AB:30:15:92:E2:27:5A:C7:FC:BD
X509v3 Authority Key Identifier:
keyid:8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b7:b6:ef:09:a6:c8:ab:f0:6f:6c:83:62:2a:41:09:8a:47:
0e:5f:65:6b:b6:21:bd:ef:61:9b:af:1a:c6:c2:1c:5c:ae:58:
bb:d3:0d:0b:02:69:91:1d:2f:2f:97:5b:d6:25:81:68:4f:2f:
a2:7d:96:33:08:f9:6c:14:0d:30:29:95:97:24:7e:c3:c0:19:
ae:14:e4:c5:4e:bb:48:db:0f:2a:f9:83:50:a2:2a:83:26:ce:
be:25:56:74:9c:46:d1:14:78:f1:90:02:2a:64:c7:1d:fd:9f:
25:c2:c6:cc:55:3b:ec:d7:e9:fd:41:e7:29:1b:70:7a:ba:8e:
93:b2:f2:5f:db:86:8c:be:4e:02:e4:b7:c7:dd:2a:f7:07:9c:
1b:06:28:aa:ab:b6:e7:8a:60:82:71:cb:d6:84:93:b9:e1:ee:
83:68:af:c8:c3:83:f8:9a:41:e4:6c:91:2c:7b:10:a9:68:df:
ed:ad:ed:95:58:f7:34:12:e5:df:b3:a2:42:35:f2:df:3b:24:
f3:4b:3a:f6:68:cd:9d:9b:ab:e2:8e:bd:f9:65:b4:47:fb:9c:
d2:1d:54:46:4e:05:f7:b9:52:a3:29:a8:28:cf:15:20:32:1a:
bb:3e:e3:67:1b:a8:7e:60:cd:bb:de:37:44:2e:1e:76:75:cd:
87:92:3d:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92mLWv4KCHexSDPJmKIqUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNjZhZTQwMGMyZDY4MTk2MGU4NTUzZmNiMzE1NzhiOGQ5
Y2RmYjYwHhcNMjUxMDE5MTkwMjUxWhcNMjUxMDIwMTkwMjUxWjAzMTEwLwYDVQQD
Eyg3OWIyOWI2ODA2ZGM5MjNiM2NmM2FiMzAxNTkyZTIyNzVhYzdmY2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSwG0gB70r68qE2XBeeQHHgenKOt
UZmeItvLWZydlYNryGnWkgJpw0vpO2nCgdNviQyKCH+SfTaClKUHaaR6ozV+pIjS
pXS8WHX1/xcbOEBvzpObDlcA1XWQbjygWo0WHjaTQh7pF8nfBrjFn+mOfZRZwEJI
nZohmeA4NjvmDNRJO6oDf8jgZtaNyUwBefKJi4BpJM8dO10NTmV247XDynpGLlEZ
CgGlZOT1cXXZ9R6uZVy6ubH3ODjTZL2brljx/NKphOw57aXDcJcLLJ5l5Dg5i475
fsq45yR22UBmvUxfN7TEXpTvsbszQWIrr0B+GEUxeNfgqg5mE6QWIYqdFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmym2gG3JI7PPOrMBWS4idax/y9MB8GA1UdIwQY
MBaAFIpmrkAMLWgZYOhVP8sxV4uNnN+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jMzNhZjYtMzZhOS00N2IwLTgzZTct
OGJiYzNhOWU0ZjQzLzEvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jMzNhZjYtMzZhOS00N2IwLTgzZTctOGJiYzNhOWU0ZjQz
LzEvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA7e27wmm
yKvwb2yDYipBCYpHDl9la7Yhve9hm68axsIcXK5Yu9MNCwJpkR0vL5db1iWBaE8v
on2WMwj5bBQNMCmVlyR+w8AZrhTkxU67SNsPKvmDUKIqgybOviVWdJxG0RR48ZAC
KmTHHf2fJcLGzFU77Nfp/UHnKRtwerqOk7LyX9uGjL5OAuS3x90q9wecGwYoqqu2
54pggnHL1oSTueHug2ivyMOD+JpB5GyRLHsQqWjf7a3tlVj3NBLl37OiQjXy3zsk
80s69mjNnZur4o69+WW0R/uc0h1URk4F97lSoymoKM8VIDIauz7jZxuofmDNu943
RC4ednXNh5I98g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:56 2025 by rpki-client