Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
File: IMotTLPla10plwqX_GResv1odqE.mft (raw, json)
Hash identifier: 5RTC+u2sK52jJ4nGhvPAq2Ew/rIyFQbJGMkKxmyZHsY=
Subject key identifier: B2:81:6C:F9:4D:39:64:F8:B9:1B:90:50:32:55:CA:50:E9:DE:1D:E3
Authority key identifier: 20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
Certificate issuer: /CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Certificate serial: 0198D698054A5F1E82F3EEA86F06E4FF382E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
Manifest number: 137D
Signing time: Sat 23 Aug 2025 11:02:23 +0000
Manifest this update: Sat 23 Aug 2025 11:02:23 +0000
Manifest next update: Sun 24 Aug 2025 11:02:23 +0000
Files and hashes: 1: IMotTLPla10plwqX_GResv1odqE.crl (hash: 8zxvLb1vs6vKs6yOvknfJAlrdlPQDcSx50XQckLnBQc=)
2: T0WVdzOAzxv7YhavZ8vWFS4Ty_I.roa (hash: b3F/epBvj8JhSWlR2DiuUydqiu726jVzSOK2gVzNlcU=)
3: bSEsv80VTIqhxykqIB8M44nU7N8.roa (hash: Ooz65LuwKjo+iPeOY+Zh+YXr8ijMf6WnGg7hpdHzR2I=)
4: mDAtJGSElDm2O92EFy5g2Ab4svc.roa (hash: 06wyeaq77omoVi1U61nSXVnjJJye2vIP4bDLXfzxENg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:05:4a:5f:1e:82:f3:ee:a8:6f:06:e4:ff:38:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Validity
Not Before: Aug 23 11:02:23 2025 GMT
Not After : Aug 24 11:02:23 2025 GMT
Subject: CN=b2816cf94d3964f8b91b90503255ca50e9de1de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:80:dc:e6:c9:4a:f0:ed:e6:9d:49:97:e7:af:
38:e5:7f:ca:f8:8b:e5:dc:48:a1:18:c9:2d:09:f4:
d0:1f:17:1a:ad:52:96:4d:69:42:54:c6:9c:3e:f3:
fe:b5:9e:0f:6d:80:6c:56:e1:5c:75:d8:d1:3a:9e:
2c:5a:fa:0c:c4:a7:7b:23:2a:6c:b2:5a:a0:6a:c9:
d8:2b:8b:8f:4b:f3:57:b6:05:68:c4:3e:e7:20:1f:
c8:a3:b2:c6:58:6f:c7:c0:79:2a:9c:fb:0b:e2:a7:
26:81:2c:a5:e7:78:19:29:7a:14:55:8f:42:9a:f1:
f6:d4:d8:f1:65:1a:b9:39:db:8f:62:18:72:28:58:
8c:88:bc:0e:4b:bc:44:41:97:d1:a6:a3:c8:01:e4:
33:3f:72:d0:51:4b:b6:2c:91:c6:9d:6e:a8:e5:b3:
80:58:03:b3:83:8f:95:08:ba:90:12:34:4b:2e:77:
f9:3f:0d:14:87:1f:ec:8c:2c:8e:88:2f:a5:0f:af:
46:dc:f7:aa:7b:ce:af:a3:2b:33:0d:17:8f:28:39:
e1:23:21:ef:a6:cb:59:c4:97:1d:74:71:50:e0:87:
b8:ec:60:73:3c:35:88:94:0f:4d:aa:41:24:42:41:
fd:38:6c:28:0a:47:a3:6c:0e:d1:34:09:d0:e9:46:
86:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:81:6C:F9:4D:39:64:F8:B9:1B:90:50:32:55:CA:50:E9:DE:1D:E3
X509v3 Authority Key Identifier:
keyid:20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:3f:05:78:82:b3:b7:ab:dc:3e:a5:30:18:36:e4:47:11:75:
6f:e6:37:ac:09:81:27:cc:d0:b9:bd:fe:8a:5d:c5:65:b2:ff:
0a:51:62:e3:22:17:ee:e4:e6:8c:05:0d:b8:fb:37:fe:d5:8d:
22:62:21:16:f0:51:0b:d7:99:ac:d5:ef:12:b7:b1:26:3e:3f:
81:76:51:e5:09:3f:86:47:4f:c4:95:5e:ea:8a:30:03:63:7b:
d9:0a:bd:2a:82:bd:ab:00:b2:92:fc:5c:99:b2:5c:a2:2c:b8:
7c:a3:c1:c1:bb:89:bf:d0:99:b8:9f:74:c6:9e:8b:60:fe:7c:
6a:32:82:75:02:69:8d:f1:83:7f:3d:75:b7:2b:bc:c5:8c:36:
2f:3b:fd:e6:ae:56:76:c3:31:81:b4:5a:55:2c:be:d6:34:5e:
d3:09:2d:34:ad:29:e2:0e:c1:ef:10:88:0a:6f:53:e2:0c:8c:
8f:61:e0:24:5b:8d:05:99:2c:0b:57:18:cc:60:91:c7:f1:9e:
f6:3b:fd:5e:e5:33:ed:24:59:da:43:31:81:ad:58:9f:88:6c:
50:ba:82:c8:29:b4:88:cf:62:70:31:4b:e2:41:48:ba:f4:5a:
a0:b2:5b:37:38:49:76:4e:4d:c4:28:56:1e:03:ab:54:cf:ca:
66:a1:ea:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmAVKXx6C8+6obwbk/zguMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwY2EyZDRjYjNlNTZiNWQyOTk3MGE5N2ZjNjQ1ZWIyZmQ2
ODc2YTEwHhcNMjUwODIzMTEwMjIzWhcNMjUwODI0MTEwMjIzWjAzMTEwLwYDVQQD
EyhiMjgxNmNmOTRkMzk2NGY4YjkxYjkwNTAzMjU1Y2E1MGU5ZGUxZGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYDc5slK8O3mnUmX56845X/K+Ivl
3EihGMktCfTQHxcarVKWTWlCVMacPvP+tZ4PbYBsVuFcddjROp4sWvoMxKd7Iyps
slqgasnYK4uPS/NXtgVoxD7nIB/Io7LGWG/HwHkqnPsL4qcmgSyl53gZKXoUVY9C
mvH21NjxZRq5OduPYhhyKFiMiLwOS7xEQZfRpqPIAeQzP3LQUUu2LJHGnW6o5bOA
WAOzg4+VCLqQEjRLLnf5Pw0Uhx/sjCyOiC+lD69G3Peqe86voyszDRePKDnhIyHv
pstZxJcddHFQ4Ie47GBzPDWIlA9NqkEkQkH9OGwoCkejbA7RNAnQ6UaGFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKBbPlNOWT4uRuQUDJVylDp3h3jMB8GA1UdIwQY
MBaAFCDKLUyz5WtdKZcKl/xkXrL9aHahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yYzI4MTctMzcwMS00NzgzLThmYmQt
ZWVjNDg4NWM0ZjhkLzEvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yYzI4MTctMzcwMS00NzgzLThmYmQtZWVjNDg4NWM0Zjhk
LzEvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEART8FeIKz
t6vcPqUwGDbkRxF1b+Y3rAmBJ8zQub3+il3FZbL/ClFi4yIX7uTmjAUNuPs3/tWN
ImIhFvBRC9eZrNXvErexJj4/gXZR5Qk/hkdPxJVe6oowA2N72Qq9KoK9qwCykvxc
mbJcoiy4fKPBwbuJv9CZuJ90xp6LYP58ajKCdQJpjfGDfz11tyu8xYw2Lzv95q5W
dsMxgbRaVSy+1jRe0wktNK0p4g7B7xCICm9T4gyMj2HgJFuNBZksC1cYzGCRx/Ge
9jv9XuUz7SRZ2kMxga1Yn4hsULqCyCm0iM9icDFL4kFIuvRaoLJbNzhJdk5NxChW
HgOrVM/KZqHqqA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:39:05 2025 by rpki-client