Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
File: IMfqxFyNu15e_dZcGIFEmGA_Agk.mft (raw, json)
Hash identifier: fdlpkD3jGVQhP+qTGtbgwfq5BnNyCjBDqiiAgbT2z1g=
Subject key identifier: 47:B3:61:B9:69:C4:44:BC:81:52:70:BE:60:F6:5C:70:D1:4F:E9:D0
Authority key identifier: 20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
Certificate issuer: /CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Certificate serial: 0199FD347D1A1E15BD17C4CCFD9A93E76D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
Manifest number: 0BB3
Signing time: Sun 19 Oct 2025 16:01:39 +0000
Manifest this update: Sun 19 Oct 2025 16:01:39 +0000
Manifest next update: Mon 20 Oct 2025 16:01:39 +0000
Files and hashes: 1: IMfqxFyNu15e_dZcGIFEmGA_Agk.crl (hash: lytep3zhUuCLck6rZMuzgah4A7KRyMKBLOCiDS+X1DI=)
2: fJsTGq6uakoiJ0dwxu_7stP0qrM.roa (hash: MoPxKioiLed+eXmn0AgedAbSRVyzh3BZ35NDQ3cs6II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:7d:1a:1e:15:bd:17:c4:cc:fd:9a:93:e7:6d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Validity
Not Before: Oct 19 16:01:39 2025 GMT
Not After : Oct 20 16:01:39 2025 GMT
Subject: CN=47b361b969c444bc815270be60f65c70d14fe9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:42:f3:ba:b0:7f:0e:3b:12:36:de:d8:fb:cc:
7f:d8:88:c4:24:c8:07:10:9c:16:1b:2b:c3:e2:eb:
f0:ae:97:a9:6b:c7:bd:02:9c:0b:de:8b:4b:78:37:
bd:61:22:33:33:6b:21:b5:53:3d:e0:54:6c:59:0a:
ba:97:46:5d:40:6c:ae:50:51:7a:bb:31:8c:91:14:
32:d6:e6:ac:6b:52:10:a9:7d:7a:67:df:a1:56:9c:
87:0c:31:25:b4:ce:77:c4:c9:02:d5:e6:74:71:f7:
dc:16:82:44:d3:a7:0f:78:84:e3:49:6d:a3:85:e3:
91:21:be:61:c9:e4:f1:68:87:a9:8e:3b:af:19:a5:
bc:5d:93:8e:bf:8f:7e:aa:c4:e7:0f:67:2e:de:3f:
b7:56:d3:4c:41:cd:2f:ec:06:57:80:26:df:e7:ed:
6e:40:c3:b7:58:cb:b1:f4:9c:52:17:90:53:9d:b2:
31:1e:d0:09:1c:f8:85:e7:1f:b0:30:cb:ee:82:d5:
6e:90:8b:7d:ed:51:cc:e0:6b:ac:de:a0:77:b6:c3:
3b:b1:7a:0d:0c:21:9e:52:c9:ae:ae:10:57:f8:39:
ef:dc:f5:7f:96:2f:86:75:d8:de:63:54:e2:0c:5f:
0d:95:90:db:7b:dd:b2:2d:2c:46:bd:6d:4c:4c:5e:
ac:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B3:61:B9:69:C4:44:BC:81:52:70:BE:60:F6:5C:70:D1:4F:E9:D0
X509v3 Authority Key Identifier:
keyid:20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ee:49:5d:a7:53:bf:eb:d4:31:66:dc:81:e1:8e:bd:20:3d:
2e:0a:ba:9e:c4:0c:08:e6:c4:f8:09:4a:7b:f0:70:81:5d:55:
7f:fc:ef:90:f1:05:e9:3d:d6:41:73:86:bb:ec:56:27:ff:21:
87:bf:37:ac:0b:51:cf:4d:49:36:1f:00:ad:72:d9:a4:14:c6:
7d:bd:33:78:ea:7f:b2:8b:d1:b3:24:9d:db:50:ac:cb:10:7e:
f2:17:03:d4:de:ba:72:9f:64:87:7a:4b:ce:7c:09:ab:35:33:
b7:75:ee:cb:21:82:44:bc:9e:dc:50:27:dc:ca:bf:43:86:c4:
84:45:69:4a:a4:32:9b:9e:e9:13:70:39:21:71:6a:c9:e0:86:
77:0d:93:82:58:0b:c2:63:c5:1a:c4:e8:4d:23:62:49:0e:01:
f9:fb:ef:99:a9:34:83:cb:9b:ff:fe:af:ff:e6:51:4d:fa:af:
32:ec:f0:f0:79:df:6a:67:c1:17:c3:7a:fb:e8:4e:f2:d4:b0:
2d:50:51:04:87:69:f6:ba:d3:fc:7f:e8:dc:58:3d:01:d1:07:
27:1c:99:db:69:f6:a2:ee:ab:89:d7:a9:15:fb:e8:7e:0d:85:
f0:a2:2f:59:2d:dd:52:a0:a3:2d:0b:ef:5e:66:87:dd:fc:9e:
63:cc:cc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:33 2025 by rpki-client