Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
File: ImTYqhh4-dwUJNL9reQDnhINWxE.mft (raw, json)
Hash identifier: R7httJzTKiLFHWas7tgkTHaHOj1u5LGN17eE4wDqNN8=
Subject key identifier: D5:A7:F8:1E:FD:6E:CF:DC:25:A0:E8:0E:57:D4:DD:E8:6D:2F:92:80
Authority key identifier: 22:64:D8:AA:18:78:F9:DC:14:24:D2:FD:AD:E4:03:9E:12:0D:5B:11
Certificate issuer: /CN=2264d8aa1878f9dc1424d2fdade4039e120d5b11
Certificate serial: 0199FCC68F8CC0644A672AD696FF403BDBF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
Manifest number: 02BF
Signing time: Sun 19 Oct 2025 14:01:35 +0000
Manifest this update: Sun 19 Oct 2025 14:01:35 +0000
Manifest next update: Mon 20 Oct 2025 14:01:35 +0000
Files and hashes: 1: FqDrfbDtI4Hs58fMgjUv81Cu_7g.roa (hash: EJb3Kv4NZ5uykz2bapaHUVNVx3Yhwe8+JKhWBXNnXgc=)
2: ImTYqhh4-dwUJNL9reQDnhINWxE.crl (hash: q7m4vfwFMTG2WIASEwh+p+qTpEQexZmuXelphBMXKt0=)
3: ik9pAs-oXBS0l0utPLQdJhXZ5X0.roa (hash: LmKUQUveU3bNm/doGhpBXkqduAWf1pf1v3+L9U63Su8=)
4: uc150UpyVmM0lf0Kf7nSAGa2PLU.roa (hash: z6Z1141CZgjCa4I7tNTWjh0/Dh9WixbtG/HNloenv6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:8f:8c:c0:64:4a:67:2a:d6:96:ff:40:3b:db:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2264d8aa1878f9dc1424d2fdade4039e120d5b11
Validity
Not Before: Oct 19 14:01:35 2025 GMT
Not After : Oct 20 14:01:35 2025 GMT
Subject: CN=d5a7f81efd6ecfdc25a0e80e57d4dde86d2f9280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:66:2a:6e:87:25:63:ab:b5:b4:60:bd:d5:8e:
a9:d0:8c:fb:a5:d0:04:0c:dd:6d:36:e6:7c:97:c3:
7a:6e:74:10:63:40:18:29:1d:0d:91:de:2b:b7:d2:
92:5c:ae:6b:ca:31:90:cb:56:ce:a1:a1:37:10:1f:
00:40:df:a8:31:5b:e5:d7:29:82:e8:a9:59:d4:35:
d2:96:d9:1d:d6:15:c1:8c:0e:5b:a1:fe:99:58:cc:
23:31:83:4e:af:3f:ea:b9:39:68:c9:1e:5f:dd:67:
a1:02:4d:eb:60:0f:6e:d9:12:d7:7f:63:09:1c:23:
b4:0b:21:3a:b6:fd:bc:0b:47:5e:8a:6b:4a:d6:c4:
d7:b1:64:86:40:bb:7f:99:30:47:e7:05:ca:15:f1:
6a:91:75:91:18:66:ca:71:82:6f:32:0a:74:31:f9:
b1:a3:53:80:de:ea:21:3a:49:50:13:2f:4d:6c:04:
84:4a:ab:19:2a:24:3a:d8:0a:26:84:7c:7d:ad:b0:
f8:9d:59:ae:65:5f:58:da:9e:df:29:91:12:90:58:
a7:9a:b1:65:9b:b4:ea:ed:9c:51:24:c5:ca:a2:3c:
fb:c7:bb:73:6d:49:2f:03:a8:f6:88:77:16:84:0b:
71:b6:65:4a:d0:f8:a0:2a:19:28:70:8e:d4:9b:d8:
90:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A7:F8:1E:FD:6E:CF:DC:25:A0:E8:0E:57:D4:DD:E8:6D:2F:92:80
X509v3 Authority Key Identifier:
keyid:22:64:D8:AA:18:78:F9:DC:14:24:D2:FD:AD:E4:03:9E:12:0D:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f8:28:04:aa:47:8a:79:ee:af:96:15:ad:df:ea:a1:d2:a7:
fe:c2:a0:91:9b:6f:0b:88:a2:e7:f4:0c:34:3d:fb:c2:c5:6b:
d1:92:24:40:e5:c4:5f:56:28:5e:d0:e7:5d:70:bf:46:28:b3:
56:2b:2b:8f:ae:a7:00:0c:54:16:fe:b7:15:07:f3:ec:8d:41:
72:2f:d9:0e:7f:c0:ea:37:5b:26:b7:9c:6c:65:36:51:ab:57:
54:36:96:d2:6f:dc:7e:4b:b8:98:e2:26:10:4d:85:56:05:32:
c5:56:3c:72:b1:87:83:f0:3a:7a:19:14:35:e4:d5:d3:61:2c:
c4:2c:7d:cf:92:2b:85:fe:2a:34:d9:9e:40:79:df:cb:6e:e5:
0d:81:79:8c:c3:af:c4:31:a3:58:83:e5:02:33:6a:6c:e8:da:
79:e8:5b:82:01:54:f5:8d:45:97:1c:c7:1b:a2:a1:d8:26:a8:
60:68:89:22:9c:07:b5:68:1a:44:24:36:54:bd:20:c0:5c:fc:
aa:05:2b:b4:8f:cd:5c:a1:91:e6:7e:af:c1:71:93:f2:bf:18:
b5:d5:5c:49:84:29:17:e5:e1:4d:d1:5d:0a:9a:51:64:72:e4:
78:7e:ef:75:eb:bd:62:b1:5d:23:c2:e1:7d:85:c9:a8:26:ca:
56:be:c0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:01 2025 by rpki-client