Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
File: rImvYJhubZWDIvsCbGtlruyUmg0.mft (raw, json)
Hash identifier: 3k3QI2bt3PIclhB2G5E9ML8crtfgyTN+alMh6qiJ8GE=
Subject key identifier: CC:BA:02:55:18:E2:21:6F:2C:D7:35:9A:9F:26:39:F2:21:A6:0A:98
Authority key identifier: AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
Certificate issuer: /CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Certificate serial: 0198D65FE4691A2321ED46B4B2F14D84EF01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
Manifest number: 0795
Signing time: Sat 23 Aug 2025 10:01:05 +0000
Manifest this update: Sat 23 Aug 2025 10:01:05 +0000
Manifest next update: Sun 24 Aug 2025 10:01:05 +0000
Files and hashes: 1: HWWs6MqFS2nmbLw3ShctihMbNaY.roa (hash: KSXNNa9oIp9r32J4311J0aN03+Peflc2SZu+HPxriyM=)
2: QUH08L51MfImU-aeLB1gViX82cI.roa (hash: YfmDCd25c+HZBRwpm39HGU+G/47jVrQR3XrIyRY2J8U=)
3: b81h_NWwhKjMbH2-sUXyjP4n64s.roa (hash: e3T+4A186w/5PvOch5tYGnvLHtBctNKp6kP6+X8+j/w=)
4: rImvYJhubZWDIvsCbGtlruyUmg0.crl (hash: YwXTGp0NdcmoqCHbq5cci9Ibd/U4pYQnj0ZyJQcz3wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:e4:69:1a:23:21:ed:46:b4:b2:f1:4d:84:ef:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Validity
Not Before: Aug 23 10:01:05 2025 GMT
Not After : Aug 24 10:01:05 2025 GMT
Subject: CN=ccba025518e2216f2cd7359a9f2639f221a60a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:78:26:4a:20:8a:02:f3:5a:6c:27:6d:fd:16:
63:15:67:fd:c1:ec:53:80:77:08:5f:fb:ae:cc:b2:
63:e3:16:40:93:c5:46:e7:fd:03:35:d2:3d:2c:fa:
dc:dc:c8:45:44:33:e1:47:a4:44:70:13:97:12:bc:
53:7d:56:cf:0c:61:87:c9:16:71:0f:e3:ae:06:d5:
eb:71:68:4e:4b:1d:ac:08:a8:53:1c:b1:d3:5d:7d:
26:92:4a:14:7b:ec:08:19:a0:e7:fc:4a:4c:56:89:
8e:82:7f:95:3c:c0:1d:c2:27:93:fb:21:00:af:64:
95:1f:ee:a8:b6:08:54:57:37:51:41:b8:31:08:dd:
cb:d8:c3:34:4e:04:9b:67:24:5f:3d:0b:29:db:ea:
57:02:3b:61:e9:4f:ce:ed:76:bb:a1:9a:7f:60:5e:
6b:08:cd:9d:10:87:40:0f:ca:84:a9:e9:b0:3f:65:
9c:7f:2b:13:79:81:ea:0e:c2:21:12:07:1a:9f:cb:
16:75:22:90:71:be:2c:70:a9:b5:50:a1:c9:30:f3:
95:7d:87:b3:ad:2b:fb:83:1c:0a:a6:df:e9:5c:dc:
8e:98:b8:4d:ed:67:62:81:8a:cf:c7:a4:5e:81:dc:
02:ff:24:87:e8:b5:e6:5b:4a:fc:59:d0:59:9a:41:
95:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BA:02:55:18:E2:21:6F:2C:D7:35:9A:9F:26:39:F2:21:A6:0A:98
X509v3 Authority Key Identifier:
keyid:AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a4:97:a6:c6:32:6c:7e:f8:54:d6:1f:87:d8:51:19:6b:c5:
ae:2e:1a:41:8e:ad:25:94:dc:90:81:e9:a0:b6:ea:8f:f7:68:
0c:f9:7f:c7:c4:51:8d:62:a5:d4:85:6f:e4:db:22:c1:ee:6a:
e2:4d:22:a6:50:e6:ae:f7:d4:76:79:49:1e:be:c9:ac:84:35:
00:96:1f:53:f4:23:b3:90:b6:14:42:df:f9:36:59:be:a6:a0:
94:2d:4c:3d:27:5b:93:66:06:12:5b:54:56:56:5c:4f:86:6b:
91:1a:b3:23:aa:d9:cd:60:64:f1:06:db:c4:2b:c0:a9:c1:a8:
ef:a1:13:f1:52:ac:ee:6d:0f:05:eb:cb:e1:09:2b:07:7b:91:
14:7f:65:d1:ce:0e:1c:74:f5:b0:bc:69:0f:78:15:67:74:4d:
06:c0:79:0f:e7:3e:f6:70:d3:02:08:a8:06:49:20:f3:34:35:
ab:12:71:e5:97:30:a7:be:33:8b:78:ba:55:54:54:81:09:cb:
79:5e:e9:20:f9:54:a3:7b:c9:b4:5b:2a:32:6a:23:f6:00:7a:
fd:57:dc:de:dc:53:56:74:59:69:eb:9a:e9:71:82:5a:e6:ad:
1a:79:0d:d5:17:3c:bd:76:0a:58:2a:19:80:77:c3:a9:c2:14:
3c:6a:2a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:17:58 2025 by rpki-client