Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
File: EImgJR4yvzxID1qUq7X7TrkGpbM.mft (raw, json)
Hash identifier: /xCi9Q1EUYlnFRQ6kEApsDB3dpu5OfeXPgz1lqOknuI=
Subject key identifier: 32:1B:FB:48:C3:45:76:37:24:4D:9E:0C:6C:17:19:89:52:6F:CA:26
Authority key identifier: 10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
Certificate issuer: /CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Certificate serial: 0199FFFE43F66B24720DCB8757D08DF9A992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
Manifest number: 163B
Signing time: Mon 20 Oct 2025 05:01:17 +0000
Manifest this update: Mon 20 Oct 2025 05:01:17 +0000
Manifest next update: Tue 21 Oct 2025 05:01:17 +0000
Files and hashes: 1: EImgJR4yvzxID1qUq7X7TrkGpbM.crl (hash: y07M/5qGepzuqE95uIHYMcjD9WUe+e0bCoxLIEI7z2w=)
2: eyb6eqppLLPxMbrCASM5HQ3Qcz0.roa (hash: JIfJaEQmA4YKP2iyQoTDZ86/DkjjTynNwrFbTDmVcaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:43:f6:6b:24:72:0d:cb:87:57:d0:8d:f9:a9:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Validity
Not Before: Oct 20 05:01:17 2025 GMT
Not After : Oct 21 05:01:17 2025 GMT
Subject: CN=321bfb48c3457637244d9e0c6c171989526fca26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:cd:05:7e:7f:65:56:95:35:78:55:6a:24:e7:
d9:d3:a9:81:7c:23:bd:c8:7b:c7:9a:fd:7b:b6:79:
a7:de:cc:95:97:5d:75:4f:4c:e1:44:dd:f6:df:ef:
19:03:a2:fc:7d:f6:04:f1:99:4e:1d:4b:bd:bc:b6:
6e:73:1c:47:1c:21:a8:e4:66:97:87:3c:93:07:0d:
7d:42:3e:77:08:95:21:a3:5e:20:88:d2:15:07:1e:
86:24:7c:10:ca:9f:7e:c8:08:0b:16:83:3f:9f:ce:
82:2b:7c:23:e7:c7:63:5e:f9:f4:ba:72:91:7e:36:
65:44:6d:08:a6:a2:13:41:56:e4:d7:d2:70:a2:0e:
cd:46:c1:b2:6e:7b:b6:c0:4d:04:f1:9c:5e:1c:0f:
59:27:33:45:4a:29:9f:a3:46:07:4a:15:2d:19:16:
b5:8f:71:64:83:e5:7b:42:3f:cf:40:3c:3c:7d:ec:
76:06:46:9a:fe:2c:55:3a:97:a0:ea:89:40:c2:e6:
5c:70:53:8e:d3:f5:9d:5d:64:d7:f0:7e:52:51:f1:
ba:08:73:e3:b5:a7:35:a4:cb:a2:60:c5:c0:38:c6:
c9:d6:dd:66:5a:ed:38:6b:da:cc:c6:c4:4c:b1:35:
8d:d2:67:26:55:cb:ca:77:c3:11:ea:96:40:cb:37:
01:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1B:FB:48:C3:45:76:37:24:4D:9E:0C:6C:17:19:89:52:6F:CA:26
X509v3 Authority Key Identifier:
keyid:10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:97:4b:15:47:5b:3d:d8:0d:5c:34:af:d3:46:85:17:32:d3:
cc:3b:27:d0:18:ee:47:46:3e:75:59:24:7c:43:10:93:4d:d9:
d8:8f:d1:c0:ba:aa:7d:40:da:f9:03:72:f5:3b:45:d6:3e:7c:
a7:d9:78:d9:32:c3:7c:ae:89:70:9e:5f:50:01:94:f0:97:80:
4c:b5:e8:63:85:75:17:a3:e5:d6:0b:18:9d:51:1c:e9:2b:34:
52:10:e9:70:71:10:c9:7d:c3:1b:31:a4:a6:8b:12:46:4d:c4:
76:19:5b:88:04:ac:4c:2f:31:3d:2d:55:e1:ae:30:dd:20:97:
80:89:ba:2b:32:e3:ef:53:ce:f8:4e:8f:76:0d:ee:f3:f8:4b:
f9:b5:a4:29:4f:4f:76:d3:9c:ee:67:21:bc:4f:8a:b7:17:57:
55:47:1f:53:96:5e:9e:8c:6e:d8:cd:b2:8e:35:42:96:c5:70:
2d:c0:0e:a9:c0:0e:5c:b2:50:10:3e:f4:e5:4a:73:49:3c:da:
39:d1:54:7f:f3:be:bd:2f:89:90:d4:68:2c:25:99:30:4a:40:
a7:c6:06:91:2d:e2:f1:59:30:cd:87:11:85:fe:5d:1e:2e:15:
cc:f7:2b:ef:b9:05:ee:f3:b2:6b:19:9e:b0:8f:53:b7:08:ea:
ef:b9:03:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn//kP2ayRyDcuHV9CN+amSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwODlhMDI1MWUzMmJmM2M0ODBmNWE5NGFiYjVmYjRlYjkw
NmE1YjMwHhcNMjUxMDIwMDUwMTE3WhcNMjUxMDIxMDUwMTE3WjAzMTEwLwYDVQQD
EygzMjFiZmI0OGMzNDU3NjM3MjQ0ZDllMGM2YzE3MTk4OTUyNmZjYTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9M0Ffn9lVpU1eFVqJOfZ06mBfCO9
yHvHmv17tnmn3syVl111T0zhRN323+8ZA6L8ffYE8ZlOHUu9vLZucxxHHCGo5GaX
hzyTBw19Qj53CJUho14giNIVBx6GJHwQyp9+yAgLFoM/n86CK3wj58djXvn0unKR
fjZlRG0IpqITQVbk19Jwog7NRsGybnu2wE0E8ZxeHA9ZJzNFSimfo0YHShUtGRa1
j3Fkg+V7Qj/PQDw8fex2Bkaa/ixVOpeg6olAwuZccFOO0/WdXWTX8H5SUfG6CHPj
tac1pMuiYMXAOMbJ1t1mWu04a9rMxsRMsTWN0mcmVcvKd8MR6pZAyzcBSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIb+0jDRXY3JE2eDGwXGYlSb8omMB8GA1UdIwQY
MBaAFBCJoCUeMr88SA9alKu1+065BqWzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUltZ0pSNHl2enhJRDFxVXE3WDdUcmtHcGJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83ZGI3YTgtODI3Zi00Y2YwLWFiYzkt
YjhjNDZmOTU2NDBlLzEvRUltZ0pSNHl2enhJRDFxVXE3WDdUcmtHcGJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83ZGI3YTgtODI3Zi00Y2YwLWFiYzktYjhjNDZmOTU2NDBl
LzEvRUltZ0pSNHl2enhJRDFxVXE3WDdUcmtHcGJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJdLFUdb
PdgNXDSv00aFFzLTzDsn0BjuR0Y+dVkkfEMQk03Z2I/RwLqqfUDa+QNy9TtF1j58
p9l42TLDfK6JcJ5fUAGU8JeATLXoY4V1F6Pl1gsYnVEc6Ss0UhDpcHEQyX3DGzGk
posSRk3EdhlbiASsTC8xPS1V4a4w3SCXgIm6KzLj71PO+E6Pdg3u8/hL+bWkKU9P
dtOc7mchvE+KtxdXVUcfU5Zenoxu2M2yjjVClsVwLcAOqcAOXLJQED705UpzSTza
OdFUf/O+vS+JkNRoLCWZMEpAp8YGkS3i8VkwzYcRhf5dHi4VzPcr77kF7vOyaxme
sI9Ttwjq77kDbQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:58:50 2025 by rpki-client