Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
File: rImvYJhubZWDIvsCbGtlruyUmg0.mft (raw, json)
Hash identifier: zusYoe0GpKBl/MeMU/L9Rg9b4vTU/BEDsgcg+NqgAAE=
Subject key identifier: 2A:0B:69:0C:3F:5E:CB:2B:B3:E9:B4:D0:BB:ED:6E:A4:51:8A:3C:93
Authority key identifier: AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
Certificate issuer: /CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Certificate serial: 0199FBEAE00EF1D91171B9D2F4286ACA1280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
Manifest number: 082D
Signing time: Sun 19 Oct 2025 10:01:37 +0000
Manifest this update: Sun 19 Oct 2025 10:01:37 +0000
Manifest next update: Mon 20 Oct 2025 10:01:37 +0000
Files and hashes: 1: HWWs6MqFS2nmbLw3ShctihMbNaY.roa (hash: KSXNNa9oIp9r32J4311J0aN03+Peflc2SZu+HPxriyM=)
2: QUH08L51MfImU-aeLB1gViX82cI.roa (hash: YfmDCd25c+HZBRwpm39HGU+G/47jVrQR3XrIyRY2J8U=)
3: b81h_NWwhKjMbH2-sUXyjP4n64s.roa (hash: e3T+4A186w/5PvOch5tYGnvLHtBctNKp6kP6+X8+j/w=)
4: rImvYJhubZWDIvsCbGtlruyUmg0.crl (hash: eU95T6d0j0jIVSZwz5HyxVumkTHpctKptgxZBTNOSAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:e0:0e:f1:d9:11:71:b9:d2:f4:28:6a:ca:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Validity
Not Before: Oct 19 10:01:37 2025 GMT
Not After : Oct 20 10:01:37 2025 GMT
Subject: CN=2a0b690c3f5ecb2bb3e9b4d0bbed6ea4518a3c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2b:4a:31:96:9b:ca:03:8e:48:e4:c0:6a:f6:
9b:12:22:77:fa:be:3f:42:f0:90:f6:2e:85:70:00:
51:18:5e:40:6e:72:dd:2c:21:26:83:39:e1:37:84:
16:e8:2d:4b:9a:88:51:a7:b6:07:92:07:f1:74:9c:
78:d0:a3:a6:2b:fb:a6:97:f5:df:bb:6d:e6:76:66:
fc:0c:53:0a:18:e0:d6:01:6b:f2:51:bc:c2:6e:43:
04:3f:44:1b:d7:79:8d:68:aa:eb:d9:c0:a1:ea:1a:
4f:b1:b6:d6:1c:24:e3:ca:49:7a:5c:12:8f:33:e2:
08:ba:c6:7a:ff:7a:28:3b:b5:f0:7c:6f:a8:61:26:
04:c6:bb:8e:a2:21:9a:90:a2:18:73:57:9d:64:e5:
58:68:95:c1:58:32:ec:31:f2:04:e2:d1:27:55:cd:
f4:45:dc:42:5c:4e:24:db:17:32:2b:f7:95:68:7f:
12:e7:cc:eb:33:95:f3:d0:59:83:95:e4:7f:9e:c7:
6a:3f:d0:02:9f:3e:65:82:65:cd:a5:02:7d:24:87:
e2:10:0a:9e:03:41:78:73:f0:56:af:6e:5c:ea:86:
4d:e9:45:11:67:6b:6a:c4:a8:3c:3d:73:c5:17:70:
98:aa:c6:da:54:cf:b8:ec:7f:0d:4e:77:52:66:4f:
78:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0B:69:0C:3F:5E:CB:2B:B3:E9:B4:D0:BB:ED:6E:A4:51:8A:3C:93
X509v3 Authority Key Identifier:
keyid:AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:81:b8:fd:7c:97:84:60:86:7f:a0:26:c3:2b:be:7b:d9:7a:
81:20:28:e3:ce:9a:99:77:44:54:5f:ae:cd:3b:92:91:30:d8:
8b:db:41:05:7e:08:8a:74:d1:74:25:12:81:8d:b9:4a:ec:bf:
b7:1e:15:dc:4c:7c:06:88:ae:51:e7:c0:4f:15:2c:dd:a4:e8:
1e:55:7a:4f:40:e8:4d:82:d0:b6:f8:36:9a:f2:f8:75:11:75:
31:8d:09:24:78:48:6a:29:56:97:67:f8:3b:57:97:09:a2:38:
1f:c7:99:fa:5f:ef:d1:2d:cc:1f:2d:08:b7:9e:37:5c:02:36:
17:5c:af:30:1d:20:ad:18:04:e9:42:22:8e:a8:c7:f2:ab:4e:
85:6a:00:c6:ac:d2:c6:8b:d3:8b:2c:aa:da:34:d1:27:93:b7:
34:66:aa:50:db:a6:b1:f7:7d:29:a0:0f:db:77:71:c2:ba:51:
42:11:e4:cc:4c:c1:e9:0c:da:a4:37:81:6a:8e:d4:a3:a9:dd:
13:39:f7:ba:d5:b3:82:98:c7:46:7e:b8:04:58:6f:6e:ef:64:
e6:38:2f:ea:69:ac:02:dc:fe:05:f1:37:5c:29:30:e0:db:2a:
18:02:ed:d3:24:0e:78:a4:38:ba:4a:07:05:a1:01:ee:b2:52:
c2:b3:84:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:37 2025 by rpki-client