Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
File: imBgNTuY9TMW0CL6AdKZ11__ItY.mft (raw, json)
Hash identifier: CH/JHFuWhVWYP1yK3kpNPpBzzJK+IQc2XKgs/4iod4I=
Subject key identifier: 9B:F0:36:2A:B1:EB:22:99:35:C9:AB:2E:93:50:48:7E:02:C5:AD:15
Authority key identifier: 8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
Certificate issuer: /CN=8a6060353b98f53316d022fa01d299d75fff22d6
Certificate serial: 0199FE46B16E402EEF90322F1053946D1AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
Manifest number: 0413
Signing time: Sun 19 Oct 2025 21:01:09 +0000
Manifest this update: Sun 19 Oct 2025 21:01:09 +0000
Manifest next update: Mon 20 Oct 2025 21:01:09 +0000
Files and hashes: 1: 053VQxunxAeUFWyp53gx-beqwOw.roa (hash: 7JicntomGJy1FdKv/+65cawmZt1C37Ox3QqgLF1dC6U=)
2: imBgNTuY9TMW0CL6AdKZ11__ItY.crl (hash: g1McjfCp79LYyPMl7zUW6biHeHR+E3aNrlfDChddzPU=)
3: sY_8uI_Vy_Kyk6ImGlPdHmVKVYk.roa (hash: NexMNxJOVKLfI4XsOD08LdcHHjE/wZ9FYtwH9p7yFUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:b1:6e:40:2e:ef:90:32:2f:10:53:94:6d:1a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6060353b98f53316d022fa01d299d75fff22d6
Validity
Not Before: Oct 19 21:01:09 2025 GMT
Not After : Oct 20 21:01:09 2025 GMT
Subject: CN=9bf0362ab1eb229935c9ab2e9350487e02c5ad15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:59:3f:f5:9a:39:1c:39:17:f5:f0:8c:d3:fa:
6a:9b:aa:43:ca:a2:00:61:12:17:90:8a:9a:ac:be:
d3:62:1a:07:d6:47:17:82:68:00:02:0b:be:a1:4b:
81:a7:50:b9:f1:9f:08:63:2e:97:a2:5e:4d:6f:d3:
ca:0b:c7:ce:1a:32:e0:c9:53:46:55:35:34:82:70:
b8:4e:89:ce:1f:8a:1e:ba:35:a5:3b:92:da:19:18:
23:94:a9:2b:14:25:bc:7d:d1:d7:a7:11:da:90:97:
80:e8:4b:e2:51:5b:ac:33:7a:cc:68:96:a4:81:2a:
75:a7:f3:67:c1:7f:a0:47:c8:b8:e2:51:35:ef:af:
3f:d8:52:af:cf:41:33:c5:2f:fb:93:71:f8:f5:5f:
6f:c9:a4:67:fa:ca:72:8e:1d:7b:8d:ad:b6:e0:8f:
1f:2c:1f:9b:49:a9:96:af:5d:6b:4f:a3:a8:ff:f8:
ec:9a:3b:95:46:53:97:a7:6e:f8:a5:18:db:6b:d1:
ff:1f:dd:8c:db:c6:b9:ab:59:fa:03:ac:41:e4:2e:
17:37:1f:31:54:d9:27:58:89:5c:27:7f:11:ce:04:
fb:5a:92:e4:51:97:51:38:04:b9:6d:22:6c:b8:95:
f6:9f:d3:6f:26:53:60:e6:d0:e8:4a:fa:23:f5:27:
be:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F0:36:2A:B1:EB:22:99:35:C9:AB:2E:93:50:48:7E:02:C5:AD:15
X509v3 Authority Key Identifier:
keyid:8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b8:9b:d8:af:2b:03:90:b5:9a:08:23:a6:44:61:66:6b:f1:
72:9d:0e:43:60:c5:d9:4a:81:82:5f:0a:61:84:3a:62:1f:1f:
fa:37:ff:9f:b9:3b:9e:f9:c0:98:5a:6d:f1:61:64:3f:af:d6:
de:2b:72:2e:9f:d2:06:90:20:48:88:fc:1c:27:83:a7:bd:b0:
de:35:df:b2:86:3a:cc:95:b8:64:49:a1:5b:e5:4e:90:91:2a:
b9:0c:14:8f:4b:3a:fa:b8:79:31:a1:87:43:a4:65:8d:0c:9f:
80:42:4b:72:f5:fa:7b:72:d6:df:1b:47:0f:f0:39:28:0f:99:
1a:5a:96:f4:fa:fd:1b:20:ef:06:91:31:d6:f4:7f:e8:ec:46:
6c:fe:fb:33:23:af:84:55:b7:0c:6d:18:e7:5b:58:9b:eb:d2:
2f:f6:69:20:58:9c:de:fc:ed:fa:50:b7:58:82:7b:a8:78:f4:
dd:42:d0:84:be:a9:0f:67:c7:84:f6:19:45:e8:3f:18:1d:52:
37:d7:7f:46:93:e0:02:7d:d7:cc:98:82:08:72:92:10:cd:d8:
2e:a0:23:82:3e:6b:b9:3e:37:a2:03:5a:12:fa:e6:ed:d7:99:
8f:4e:15:b0:0f:96:12:c6:a3:a4:ce:be:11:1f:2e:8f:cc:33:
ee:11:89:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:11:46 2025 by rpki-client