Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
File: imlbOroepOZUeIxRZBRYzJlXgEA.mft (raw, json)
Hash identifier: KDnAgH2YC6gnM4CpkKOA4bR1Q0pka6l9gmaN8gu7F8E=
Subject key identifier: 55:7F:B8:9D:61:83:59:33:65:F0:FA:C7:7E:92:7B:1E:BF:9B:A9:38
Authority key identifier: 8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40
Certificate issuer: /CN=8a695b3aba1ea4e654788c51641458cc99578040
Certificate serial: 0199FC58CFC66B6DEA8EEBB7335DC95E9F8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 12:01:42 +0000
Manifest this update: Sun 19 Oct 2025 12:01:42 +0000
Manifest next update: Mon 20 Oct 2025 12:01:42 +0000
Files and hashes: 1: imlbOroepOZUeIxRZBRYzJlXgEA.crl (hash: ePzHoiXbTe72Cr0df+1x7fzPIFfcAL+ApS2Oqmm3c+c=)
2: xXvpynv9RLlNuhH_ScFehFzRtz4.roa (hash: QSdQRW1EuXcu0ntbVvgh9fj5LXlqpMEhY2XBCGX6qp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:cf:c6:6b:6d:ea:8e:eb:b7:33:5d:c9:5e:9f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a695b3aba1ea4e654788c51641458cc99578040
Validity
Not Before: Oct 19 12:01:42 2025 GMT
Not After : Oct 20 12:01:42 2025 GMT
Subject: CN=557fb89d6183593365f0fac77e927b1ebf9ba938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:33:ae:f2:fd:92:0d:2f:5c:85:1a:be:9a:5d:
73:93:2d:ca:8a:9b:e7:5c:c9:34:d0:0d:73:25:b4:
e5:63:c8:5d:80:63:58:a3:78:a2:ad:57:d2:fe:f7:
a7:23:c5:b9:fe:88:6b:b8:a6:c2:28:5f:30:af:62:
a4:f3:04:c3:a8:66:a5:2d:01:d4:02:00:38:80:8f:
33:cc:6f:82:35:58:96:f8:32:5e:c9:39:80:c6:4f:
1f:22:0b:c2:e2:28:d8:85:4e:5a:c7:d0:40:82:1c:
71:09:b8:01:c4:ea:fc:3e:39:2a:e0:17:5c:b6:9a:
e3:8e:fa:76:c7:ca:23:28:30:6a:cf:33:15:cb:10:
a2:f3:de:98:66:4a:24:9e:38:c3:91:92:5b:a3:12:
86:7d:b1:f7:a8:2f:b0:cc:40:0e:a5:f5:5f:80:2c:
b5:91:28:7e:f7:76:c3:8b:f9:8a:b3:80:19:7d:df:
ed:58:3d:8a:19:91:bb:ee:53:56:62:d1:9c:d0:63:
1a:f7:83:89:56:a6:ff:6f:d9:3c:fe:fb:13:13:d2:
2f:4a:ae:39:a4:0e:6d:d7:95:14:fd:b2:44:db:62:
a7:04:5b:ce:0b:a1:da:bd:67:5d:5c:1c:5f:ec:e6:
9d:4e:a2:7c:57:f7:72:e7:c9:b7:4d:5b:0a:9c:96:
8e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7F:B8:9D:61:83:59:33:65:F0:FA:C7:7E:92:7B:1E:BF:9B:A9:38
X509v3 Authority Key Identifier:
keyid:8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:41:e0:b5:e1:89:32:8f:73:c1:73:64:3e:f1:be:f2:38:e4:
bc:50:d7:9f:77:a5:90:39:d0:bc:2f:b6:d4:11:e2:e5:8b:fc:
dc:5a:93:b0:39:6d:19:c3:9f:73:2b:4f:b6:fe:55:16:b4:e7:
a6:4e:92:b0:d4:2f:23:ae:71:3a:50:6d:6d:d0:0f:f7:c9:c1:
b1:cc:7a:8c:c5:42:a2:f6:e6:d1:85:b5:aa:5d:c9:61:a8:7c:
51:6f:5e:69:6b:bd:5a:4c:ec:28:be:48:57:ba:4e:9b:7f:e6:
f5:8d:b6:a3:2c:9b:59:97:6e:82:1e:d8:03:59:2f:c6:37:2b:
70:2a:ee:34:c6:29:cf:85:ad:5f:97:55:e9:e7:ac:94:da:cb:
ff:8c:d6:eb:28:01:37:fb:25:6f:5b:83:44:7c:c2:70:3a:5d:
1e:e3:00:f4:e7:8c:7d:69:39:12:1d:cd:76:9e:06:e8:59:48:
76:3a:86:cd:bf:f5:ad:87:59:7d:85:e6:93:23:ce:6d:80:e5:
8f:cd:18:40:ea:df:54:e1:17:65:20:f5:42:77:06:1f:52:24:
69:2c:35:e6:11:ad:30:73:be:e5:37:3c:d4:81:96:b6:60:d8:
b6:85:4c:dc:30:33:2e:ea:ac:0a:50:ed:9f:f8:1b:9a:0b:ae:
02:79:45:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:00 2025 by rpki-client