Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
File: _im9i7SagJlrRg9QKO1SqOBXwLE.mft (raw, json)
Hash identifier: Ik/9+e6GB/HKIc4LuNt+pH321nJurcgajlCoGPBhNe8=
Subject key identifier: DB:10:D4:E3:04:06:10:E4:7F:9D:18:7A:20:5C:B3:0A:37:23:FB:44
Authority key identifier: FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1
Certificate issuer: /CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1
Certificate serial: 0199FBEB6E4182AE1D4DB33304AB3D10C875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
Manifest number: 1497
Signing time: Sun 19 Oct 2025 10:02:14 +0000
Manifest this update: Sun 19 Oct 2025 10:02:14 +0000
Manifest next update: Mon 20 Oct 2025 10:02:14 +0000
Files and hashes: 1: GKGUA1ULBuEBg6UZcKqTCkNmhrM.roa (hash: S+MOcu2hV7fbEQM0gv8ckh0dyXeXiOXULnIXULZ3i+k=)
2: _im9i7SagJlrRg9QKO1SqOBXwLE.crl (hash: BDYzwQRRX+QOr1GupmKr0QloP/opgcr/LP8VR6Ri5yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:6e:41:82:ae:1d:4d:b3:33:04:ab:3d:10:c8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe29bd8bb49a80996b460f5028ed52a8e057c0b1
Validity
Not Before: Oct 19 10:02:14 2025 GMT
Not After : Oct 20 10:02:14 2025 GMT
Subject: CN=db10d4e3040610e47f9d187a205cb30a3723fb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:99:7e:1e:c6:ad:f9:2b:7d:ef:36:f3:b5:56:
8d:e1:79:75:5e:41:53:a8:38:91:bf:c5:dc:b9:a2:
3a:6e:69:2f:ca:01:23:24:49:d5:95:f8:8f:05:8f:
95:45:d7:47:96:75:8a:22:92:3c:f9:35:0a:8f:91:
cf:7e:bd:cf:c7:50:69:7b:6a:5e:99:43:de:e3:89:
4e:59:48:ae:e7:4a:c0:16:8f:a5:3c:00:22:cd:1a:
ab:05:98:ea:f3:f9:32:4b:80:d4:da:19:ed:95:40:
a1:3f:98:48:42:1b:9b:42:3f:a5:9d:0b:b9:db:d3:
e2:c2:78:0f:44:61:9f:05:e1:63:fd:4d:3a:75:a3:
ac:4b:d6:48:51:85:c7:c5:da:0f:9d:43:5c:12:f6:
85:c9:6c:b0:82:e9:70:1e:e7:55:eb:85:e9:14:03:
bf:aa:4c:81:e0:0f:c3:c1:69:7b:63:b0:21:e7:71:
e2:22:8a:d4:cd:50:5a:5d:08:41:3d:47:5f:39:e9:
7b:7e:79:58:77:53:e2:97:67:d1:bf:f0:9d:bf:45:
bd:07:24:20:57:cc:76:77:c7:ba:47:f8:dc:e1:74:
ce:60:8f:8e:23:d1:ed:dc:10:b5:a3:72:e7:66:77:
b7:e0:e0:de:5e:ff:c1:09:a2:13:f2:5f:9d:8a:d4:
99:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:10:D4:E3:04:06:10:E4:7F:9D:18:7A:20:5C:B3:0A:37:23:FB:44
X509v3 Authority Key Identifier:
keyid:FE:29:BD:8B:B4:9A:80:99:6B:46:0F:50:28:ED:52:A8:E0:57:C0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_im9i7SagJlrRg9QKO1SqOBXwLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6f4230-05e6-4c00-a4ab-06b8dfe498bd/1/_im9i7SagJlrRg9QKO1SqOBXwLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:f6:e8:a3:e1:a9:cb:3b:80:51:dc:12:d3:cd:d1:5d:5e:12:
1c:d8:a5:d3:bc:98:92:2d:de:b6:5f:6e:13:d3:88:08:59:53:
de:ae:89:81:bd:a6:2a:cf:3e:53:7b:dd:6f:ff:57:2a:de:8e:
b4:3e:df:6d:b6:7b:78:82:a4:9c:c7:6e:42:bd:d8:b7:a5:2e:
89:b1:41:d3:2e:f5:ce:cc:ab:8e:83:e1:99:0e:86:ef:ae:a5:
a6:0b:81:a0:78:2d:2d:9e:f5:99:82:db:f9:d5:dd:7e:da:b8:
74:55:61:af:f9:a6:3d:ad:12:9c:e9:e7:92:5f:3a:ca:13:a6:
76:a0:ac:85:bd:e8:6e:38:b3:0c:3a:94:33:35:ee:67:a1:af:
e0:0f:76:29:f1:43:d9:33:1c:61:f1:5e:98:d1:79:24:b4:04:
2c:8c:01:74:50:27:9c:42:df:93:72:ad:11:a1:e8:2a:bb:1b:
2d:3f:50:5a:15:e8:48:cd:ee:ec:b7:f3:74:e5:5b:6e:d1:ea:
c3:94:f4:67:eb:ca:c7:f1:83:b0:79:f6:25:49:40:50:06:d1:
04:38:cb:05:60:07:9e:68:bf:cd:2c:43:64:5c:b5:0e:ed:fa:
5a:6d:31:2d:04:36:9a:fe:2f:cb:bc:47:a6:c8:af:0c:a6:57:
93:27:95:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:20 2025 by rpki-client