Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
File: imo0EVg-JhQzSS5QR88xxGw9LB0.mft (raw, json)
Hash identifier: xqVZrXHyb+yVcYPPpEHrOZ1DZp7CmDZfODiDKJbZ3z0=
Subject key identifier: 83:63:93:86:B8:F5:A0:B4:A5:8A:69:A9:27:4B:11:87:3F:78:74:79
Authority key identifier: 8A:6A:34:11:58:3E:26:14:33:49:2E:50:47:CF:31:C4:6C:3D:2C:1D
Certificate issuer: /CN=8a6a3411583e261433492e5047cf31c46c3d2c1d
Certificate serial: 0199FB45BBF859875AD0F49C786B28BDF7E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 07:01:15 +0000
Manifest this update: Sun 19 Oct 2025 07:01:15 +0000
Manifest next update: Mon 20 Oct 2025 07:01:15 +0000
Files and hashes: 1: imo0EVg-JhQzSS5QR88xxGw9LB0.crl (hash: IccI3J5CJKS1Ujflkplc/UH7a1XGpTFq6CA/CSz6vVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:bb:f8:59:87:5a:d0:f4:9c:78:6b:28:bd:f7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6a3411583e261433492e5047cf31c46c3d2c1d
Validity
Not Before: Oct 19 07:01:15 2025 GMT
Not After : Oct 20 07:01:15 2025 GMT
Subject: CN=83639386b8f5a0b4a58a69a9274b11873f787479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:73:db:5b:2c:14:ae:09:b9:87:f9:bd:5e:7f:
ef:46:0e:39:62:b8:80:49:78:61:46:d3:c4:7d:55:
09:84:e1:8f:ba:c6:c2:be:a6:4e:dd:5f:5b:14:2f:
14:ed:e7:ac:6a:da:dc:7d:cd:06:df:5a:6a:5f:01:
7c:04:25:d4:c8:1b:a3:ba:d3:4b:07:91:2a:94:7a:
c3:a4:68:a6:26:30:59:28:00:ea:15:61:f8:8f:14:
48:97:cb:65:58:b0:1d:bc:60:da:db:c9:93:c2:96:
4a:5c:9b:2e:66:47:57:7b:ae:bb:c8:0b:f8:12:96:
07:5b:8a:f5:01:c3:65:8d:23:6b:4c:1f:24:1a:26:
08:94:d7:3a:7f:12:d2:1e:cf:9d:98:fe:fe:2c:34:
62:ef:f4:eb:97:83:b0:34:f2:7b:1e:50:be:bb:0f:
08:be:ad:65:2e:07:70:c5:cf:1a:0c:29:0a:1e:77:
32:d1:98:06:48:31:d7:31:26:6f:a7:6d:5b:3f:05:
a0:d9:1d:b4:83:90:28:30:e9:d8:af:5d:60:92:30:
90:b4:98:57:6f:fc:4f:2b:e8:b3:98:6e:b9:ac:7f:
3a:5b:61:2c:0a:9e:c3:0b:a8:9c:dc:c3:fe:fd:af:
a8:6d:74:a0:64:e4:28:59:80:6a:4c:ca:f0:4b:9d:
48:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:63:93:86:B8:F5:A0:B4:A5:8A:69:A9:27:4B:11:87:3F:78:74:79
X509v3 Authority Key Identifier:
keyid:8A:6A:34:11:58:3E:26:14:33:49:2E:50:47:CF:31:C4:6C:3D:2C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:95:f5:99:61:e7:bb:37:42:ef:13:b5:84:23:63:ab:99:a9:
d0:3d:e5:18:88:0d:7d:1e:0a:aa:9a:24:39:a9:be:6f:40:ad:
73:f5:7e:d8:30:ac:6e:f6:fc:99:4b:1b:73:a0:63:e0:90:2b:
ac:5a:1b:6d:93:cc:02:e6:e8:ad:6e:23:0b:4b:c8:24:97:db:
26:4f:ae:19:19:6d:8e:c1:ad:84:94:5d:af:d5:42:11:ab:5f:
c9:c3:0d:1e:cc:a4:c9:91:a9:78:62:5b:8f:0e:f1:b7:2f:dc:
c1:b6:6f:38:e9:5f:17:33:0c:d1:f3:d8:22:01:95:be:08:a4:
41:8b:0e:f9:18:39:bf:81:40:68:23:3b:32:72:32:11:4a:bc:
18:67:7a:07:6e:3f:c5:19:34:98:ad:a2:fd:b9:5a:5c:d0:01:
79:8f:31:a5:b1:2c:7e:9a:c3:6d:4f:ec:5e:61:e7:82:ec:1a:
e7:fc:9d:2d:91:d7:8a:fb:a9:2b:d8:5c:b9:7b:9d:61:90:3f:
e8:68:de:cb:4f:bf:20:11:1b:55:33:c8:e8:49:eb:ec:66:73:
8e:6a:c1:94:09:00:e4:7d:91:f8:17:73:db:13:bf:cd:45:59:
a8:91:bf:4b:7c:dd:ec:8e:96:9f:4d:0b:27:6f:81:39:27:40:
47:05:dd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:46 2025 by rpki-client