Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
File: ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft (raw, json)
Hash identifier: Ecu9zv0Nw6FnkQJTWiMnB3mNkLIEq+7wXTnvdNNmuBE=
Subject key identifier: BE:93:00:B7:D9:C3:25:09:DF:D1:01:B8:4A:3C:5F:7D:66:6F:A2:1D
Authority key identifier: 22:6A:87:21:6D:7E:3C:59:31:5F:77:8B:2C:8F:4A:9E:F4:78:B9:3E
Certificate issuer: /CN=226a87216d7e3c59315f778b2c8f4a9ef478b93e
Certificate serial: 0199FC58A55F24FB8E3D8B08EBE121A93777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
Manifest number: 0A02
Signing time: Sun 19 Oct 2025 12:01:31 +0000
Manifest this update: Sun 19 Oct 2025 12:01:31 +0000
Manifest next update: Mon 20 Oct 2025 12:01:31 +0000
Files and hashes: 1: ImqHIW1-PFkxX3eLLI9KnvR4uT4.crl (hash: is6rKT93LbSxc8xeN+E4qvhDozSEsBW2Ut39vlhUBcA=)
2: LmHDwcZ0P773I2DpMatr3rQ-X-8.roa (hash: 5kJqTJl/6GtvZrCUi8E6q77SOJaK4OPEzeCstrG7klc=)
3: T1Y1gDousbxvwwsbtZaj-joDVoU.roa (hash: q7TNUs0D+VmakPZEeRGmF+IIFBvhiGx/mkCVwJhSBnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:a5:5f:24:fb:8e:3d:8b:08:eb:e1:21:a9:37:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=226a87216d7e3c59315f778b2c8f4a9ef478b93e
Validity
Not Before: Oct 19 12:01:31 2025 GMT
Not After : Oct 20 12:01:31 2025 GMT
Subject: CN=be9300b7d9c32509dfd101b84a3c5f7d666fa21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a6:2c:5b:ad:61:ba:6f:46:95:7d:4a:49:3d:
9a:a0:71:14:42:60:ae:52:b1:84:fc:3a:d1:47:b8:
7d:be:e2:5f:f0:6c:c2:dc:e8:1c:12:10:3b:4e:00:
19:da:fa:f3:9d:05:2c:c6:fd:84:35:7e:e4:92:3d:
cf:93:cb:4d:fd:d1:4a:9b:b4:0d:b0:27:fa:ed:35:
03:95:76:4d:d4:69:69:58:a1:f4:d4:61:0e:0d:c2:
b1:8d:02:63:b9:9f:d1:cc:12:a4:4c:6b:0f:43:a0:
10:cb:54:e3:3c:30:22:3c:ff:89:57:56:6a:ec:36:
ef:c1:8f:79:50:93:2c:44:4e:f9:af:7a:27:cf:3f:
5e:de:15:ce:c6:c2:49:ab:65:91:22:37:89:6b:bd:
3d:6f:e6:24:32:3d:ef:59:cc:54:a5:8b:49:66:3a:
dc:2c:36:20:11:d1:74:cd:0a:5e:9f:73:bf:ed:2a:
2c:c4:2b:64:24:3d:d6:de:ee:a0:39:af:67:a4:8e:
33:f8:54:1a:b6:dc:24:e2:0a:a0:97:29:aa:e4:37:
c7:44:a7:d3:33:91:5d:8f:87:61:af:63:86:47:1c:
51:2b:45:8f:ce:b5:cf:f7:17:b9:e8:c1:32:d5:18:
2a:d9:c9:9c:75:76:ed:91:fd:e3:d9:d8:57:91:c7:
18:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:93:00:B7:D9:C3:25:09:DF:D1:01:B8:4A:3C:5F:7D:66:6F:A2:1D
X509v3 Authority Key Identifier:
keyid:22:6A:87:21:6D:7E:3C:59:31:5F:77:8B:2C:8F:4A:9E:F4:78:B9:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e7:61:45:5a:94:e3:12:99:11:a7:c1:4b:6d:85:ef:cd:70:
bd:68:62:07:b5:ad:c8:d2:84:e5:05:73:40:60:bc:ee:d5:ee:
bb:82:c0:d6:af:a2:1c:e2:60:45:57:8c:1d:c9:39:77:b4:6c:
d6:00:56:c7:7c:24:12:ed:fc:3d:c9:cd:8e:c4:1d:07:d9:26:
63:ea:99:af:19:af:96:14:61:5f:93:5c:35:c8:a4:f8:fb:9b:
d8:6f:01:11:21:1f:11:d7:15:93:99:00:d3:24:83:3b:d8:b6:
a4:7f:35:73:33:13:08:0c:f0:13:d1:e0:40:b7:23:49:7f:00:
67:7e:d4:d4:d8:e7:d1:05:05:a1:9b:dc:83:d8:5b:8f:48:01:
15:71:c9:8a:41:fc:2a:f5:e7:1c:83:14:11:c0:cb:f6:63:d2:
ab:5a:2d:8f:f4:55:41:21:42:e7:bd:f6:a2:c9:76:48:59:95:
7f:44:62:fe:ff:73:85:24:69:3a:0c:3c:46:57:85:33:51:2c:
1d:80:78:31:b6:6e:1d:a2:cf:cd:ce:8d:59:e8:67:3a:c3:18:
45:d0:ae:f9:3e:1c:71:65:51:a0:38:08:59:8d:7c:ba:05:5d:
7d:96:b1:52:94:7d:e3:47:38:aa:2a:02:09:d7:7c:8b:c9:56:
c6:6a:8c:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WKVfJPuOPYsI6+EhqTd3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyNmE4NzIxNmQ3ZTNjNTkzMTVmNzc4YjJjOGY0YTllZjQ3
OGI5M2UwHhcNMjUxMDE5MTIwMTMxWhcNMjUxMDIwMTIwMTMxWjAzMTEwLwYDVQQD
EyhiZTkzMDBiN2Q5YzMyNTA5ZGZkMTAxYjg0YTNjNWY3ZDY2NmZhMjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6YsW61hum9GlX1KST2aoHEUQmCu
UrGE/DrRR7h9vuJf8GzC3OgcEhA7TgAZ2vrznQUsxv2ENX7kkj3Pk8tN/dFKm7QN
sCf67TUDlXZN1GlpWKH01GEODcKxjQJjuZ/RzBKkTGsPQ6AQy1TjPDAiPP+JV1Zq
7DbvwY95UJMsRE75r3onzz9e3hXOxsJJq2WRIjeJa709b+YkMj3vWcxUpYtJZjrc
LDYgEdF0zQpen3O/7SosxCtkJD3W3u6gOa9npI4z+FQattwk4gqglymq5DfHRKfT
M5Fdj4dhr2OGRxxRK0WPzrXP9xe56MEy1Rgq2cmcdXbtkf3j2dhXkccY4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6TALfZwyUJ39EBuEo8X31mb6IdMB8GA1UdIwQY
MBaAFCJqhyFtfjxZMV93iyyPSp70eLk+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSW1xSElXMS1QRmt4WDNlTExJOUtudlI0dVQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wMjEwMjItMGIyNy00YjRlLWFiMzIt
Yzk5MDAwM2IyNGNhLzEvSW1xSElXMS1QRmt4WDNlTExJOUtudlI0dVQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8wMjEwMjItMGIyNy00YjRlLWFiMzItYzk5MDAwM2IyNGNh
LzEvSW1xSElXMS1QRmt4WDNlTExJOUtudlI0dVQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIedhRVqU
4xKZEafBS22F781wvWhiB7WtyNKE5QVzQGC87tXuu4LA1q+iHOJgRVeMHck5d7Rs
1gBWx3wkEu38PcnNjsQdB9kmY+qZrxmvlhRhX5NcNcik+Pub2G8BESEfEdcVk5kA
0ySDO9i2pH81czMTCAzwE9HgQLcjSX8AZ37U1Njn0QUFoZvcg9hbj0gBFXHJikH8
KvXnHIMUEcDL9mPSq1otj/RVQSFC5732osl2SFmVf0Ri/v9zhSRpOgw8RleFM1Es
HYB4MbZuHaLPzc6NWehnOsMYRdCu+T4ccWVRoDgIWY18ugVdfZaxUpR940c4qioC
Cdd8i8lWxmqMMw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:17 2025 by rpki-client