Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
File: i_iimBQfwvRcBy0noL8mJlXLb1o.mft (raw, json)
Hash identifier: Catqz1fQhPK7xnnL6PH18yQ9M8D5lPssoMyIHpQIDb0=
Subject key identifier: 22:7F:17:EF:02:C0:9E:35:9F:DB:C9:27:01:72:F2:FA:9F:76:6F:42
Authority key identifier: 8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
Certificate issuer: /CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Certificate serial: 0199FD6AEA8FF2E92A09F7DB0AD2AED87013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
Manifest number: 01E8
Signing time: Sun 19 Oct 2025 17:01:06 +0000
Manifest this update: Sun 19 Oct 2025 17:01:06 +0000
Manifest next update: Mon 20 Oct 2025 17:01:06 +0000
Files and hashes: 1: i_iimBQfwvRcBy0noL8mJlXLb1o.crl (hash: RbdtOzsAr7yhSjZ+1ETLks6KBkZBiAeoTQ9S+oz8fYc=)
2: w8pMwx-vyyole256lyQ0C_5-WOI.roa (hash: K+srURRGs/DsNg/JW4KWXf2QN5EAfkcbY2aU8MAMJS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:ea:8f:f2:e9:2a:09:f7:db:0a:d2:ae:d8:70:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Validity
Not Before: Oct 19 17:01:06 2025 GMT
Not After : Oct 20 17:01:06 2025 GMT
Subject: CN=227f17ef02c09e359fdbc9270172f2fa9f766f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b4:d0:2b:80:2b:8c:45:21:ac:46:19:f6:a6:
51:c4:15:20:cc:dc:d5:f1:60:93:7a:52:7f:05:cc:
40:5d:60:cc:c1:65:0e:92:a0:de:0a:cb:c3:ad:50:
9e:d2:62:dc:17:21:1a:63:bd:cb:f4:fb:a7:c5:2f:
e1:1b:e0:59:87:9a:12:77:03:37:e7:4f:dd:e2:ec:
61:d3:50:f4:c0:35:26:3f:a6:c3:f9:88:30:92:de:
fe:51:da:86:b9:f8:1c:43:36:57:5b:88:a5:45:a9:
92:4c:75:c0:61:ae:2e:f7:c8:d9:9d:85:e0:06:e2:
c3:14:97:20:9f:9a:44:0f:a6:90:18:28:c6:4e:50:
42:59:5a:cd:3c:7a:61:2c:5b:93:b1:0b:9f:c0:c5:
2a:de:42:0c:22:50:a6:60:00:7e:6a:ed:e6:d1:2f:
3b:54:0a:19:1c:17:a4:a1:28:ce:6e:fe:fe:80:ba:
a9:cb:0d:b4:59:41:d8:09:34:b6:af:8c:34:36:13:
17:4c:eb:ac:ae:8a:02:9e:b7:b5:b7:63:79:84:97:
1c:39:c0:06:38:62:6a:63:c3:ae:08:38:fe:a0:c2:
44:98:b4:25:90:55:fd:8b:57:7e:10:74:77:2c:3a:
a3:66:d8:18:55:fe:39:84:ff:06:12:84:ad:25:fd:
a8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7F:17:EF:02:C0:9E:35:9F:DB:C9:27:01:72:F2:FA:9F:76:6F:42
X509v3 Authority Key Identifier:
keyid:8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ff:a8:2b:e4:7c:7c:3c:47:48:e7:41:08:a8:e3:c1:f3:90:
f6:1e:61:a1:99:cc:07:f9:9f:fb:ca:77:f3:62:51:9c:a9:91:
e0:17:ab:f6:a8:3f:44:cd:0a:19:22:a5:3b:f8:b6:3d:96:fb:
c1:6b:b0:db:da:cf:82:5d:b4:32:d2:3b:51:b9:a3:09:e9:ad:
22:19:5e:95:80:d8:3e:94:30:6f:2b:47:c4:1e:97:5d:7f:44:
ec:f1:56:6a:59:70:c5:c3:56:8a:8b:ff:b1:9b:13:4f:a3:9a:
80:d6:f3:23:3a:c9:49:4f:f6:93:fc:81:3a:37:6a:d4:b0:f6:
7a:79:96:a5:d3:53:38:09:d3:6c:af:6c:c7:d3:3a:df:a3:5e:
d8:58:f2:fe:4a:91:d0:b3:4b:c0:07:8a:7f:b1:29:9b:37:57:
25:24:41:49:f6:61:80:af:b3:7b:aa:32:96:f0:47:a8:22:07:
9b:91:88:da:c2:b4:d3:15:91:02:ca:78:de:3b:0e:67:7b:15:
8a:91:c9:83:ee:35:5a:62:83:54:c9:9b:22:8c:74:99:fb:9b:
c5:4a:1e:a8:9e:91:1c:d0:cb:f0:3c:5e:0e:8e:26:bf:7b:e8:
3f:13:52:d8:01:78:f2:d7:c3:2f:d9:86:d3:40:a4:d3:db:64:
1a:60:85:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:13:27 2025 by rpki-client