Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
File: ImTYqhh4-dwUJNL9reQDnhINWxE.mft (raw, json)
Hash identifier: F0YkPFA8PkubTc1cJv2CeYQvRdLvqCvoA5hdf3i+xHY=
Subject key identifier: 65:9E:BF:39:B3:B6:E4:D0:1D:83:46:E1:4A:CD:87:85:88:2B:A2:60
Authority key identifier: 22:64:D8:AA:18:78:F9:DC:14:24:D2:FD:AD:E4:03:9E:12:0D:5B:11
Certificate issuer: /CN=2264d8aa1878f9dc1424d2fdade4039e120d5b11
Certificate serial: 0199C4C556A6D26E824952AD5B3B5C71C5C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
Manifest number: 02A2
Signing time: Wed 08 Oct 2025 17:01:31 +0000
Manifest this update: Wed 08 Oct 2025 17:01:31 +0000
Manifest next update: Thu 09 Oct 2025 17:01:31 +0000
Files and hashes: 1: FqDrfbDtI4Hs58fMgjUv81Cu_7g.roa (hash: EJb3Kv4NZ5uykz2bapaHUVNVx3Yhwe8+JKhWBXNnXgc=)
2: ImTYqhh4-dwUJNL9reQDnhINWxE.crl (hash: GQnDgolyl5L1nWoSCPqRZcEbZZ8EM+2Ffo77rGSUeUs=)
3: ik9pAs-oXBS0l0utPLQdJhXZ5X0.roa (hash: LmKUQUveU3bNm/doGhpBXkqduAWf1pf1v3+L9U63Su8=)
4: uc150UpyVmM0lf0Kf7nSAGa2PLU.roa (hash: z6Z1141CZgjCa4I7tNTWjh0/Dh9WixbtG/HNloenv6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:c5:56:a6:d2:6e:82:49:52:ad:5b:3b:5c:71:c5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2264d8aa1878f9dc1424d2fdade4039e120d5b11
Validity
Not Before: Oct 8 17:01:31 2025 GMT
Not After : Oct 9 17:01:31 2025 GMT
Subject: CN=659ebf39b3b6e4d01d8346e14acd8785882ba260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cc:5f:8b:51:53:55:a7:c9:89:2f:08:65:d1:
5f:1b:c9:ae:12:45:89:b7:64:45:13:90:fb:63:10:
69:f2:d7:ce:51:e8:b3:be:04:f2:84:12:ef:f6:1c:
79:02:f3:de:cd:ac:73:2d:11:d7:3a:b0:bd:7a:07:
43:b3:24:0a:ad:8c:6a:71:bf:b9:61:ba:81:ed:76:
d0:df:ac:70:5a:3d:46:15:8c:3e:84:c8:6a:c1:21:
ad:83:58:69:23:b3:53:9d:34:af:2d:78:58:e8:9b:
f0:26:28:a8:b4:b8:ef:fc:4f:cd:17:93:49:ce:98:
bb:c9:c8:60:03:04:21:56:da:cb:34:6f:17:ef:29:
ed:8a:47:37:02:85:6a:3d:01:dd:d9:60:df:40:44:
a0:e3:93:b7:ad:f4:2b:6d:b7:ff:79:27:c1:23:1c:
38:5f:f6:6d:61:72:7e:dc:4a:11:63:34:ad:34:88:
d8:17:fa:c2:0f:ac:d1:3f:38:d7:30:7b:e3:90:7d:
b2:88:0a:ec:09:40:2d:16:52:01:16:28:d5:30:ef:
e9:b2:1e:79:bd:0b:ee:6b:05:fe:ee:80:df:5b:51:
83:ce:cf:27:09:df:42:21:1c:e8:1e:9b:94:03:ca:
7b:5a:1d:b0:58:4e:0e:e4:de:f6:12:87:78:4e:82:
b7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9E:BF:39:B3:B6:E4:D0:1D:83:46:E1:4A:CD:87:85:88:2B:A2:60
X509v3 Authority Key Identifier:
keyid:22:64:D8:AA:18:78:F9:DC:14:24:D2:FD:AD:E4:03:9E:12:0D:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:07:7d:fd:82:bd:f8:49:f0:c4:93:4e:21:7b:dd:15:23:1f:
4c:d8:0b:c7:9b:31:0e:00:0e:55:4a:57:45:f3:a6:dc:96:f3:
fc:f6:84:16:40:59:0d:0a:49:05:29:1c:e1:36:4a:e0:68:83:
76:c5:81:f3:b9:69:8d:86:ac:3b:9c:9d:73:18:3a:5d:78:64:
7a:e1:35:aa:ef:ab:8b:74:c4:ed:bd:8d:b2:01:c9:91:b7:fc:
70:06:14:63:ea:46:0b:ed:44:98:8f:4f:66:ec:0d:a2:b4:ae:
3f:1d:8f:5e:3f:4f:64:c7:8b:36:17:a0:f4:96:57:64:6a:4c:
cb:84:a0:b4:f5:c4:bd:fa:98:5f:0a:ea:4f:d5:c1:62:e6:04:
d2:37:ed:39:b0:5d:ab:22:a3:83:c0:a5:ee:d5:e7:05:74:66:
9b:e3:e1:0b:60:b2:9a:37:90:c1:6e:84:30:61:19:cc:77:9d:
ba:57:85:fe:25:d8:73:44:37:4f:d6:57:1d:94:2d:c7:32:cd:
0f:1f:bd:42:ab:16:35:81:7f:7c:68:c6:8b:ec:04:05:bd:ca:
3d:17:05:6d:a9:5b:d4:e3:b4:f8:38:71:bb:1d:43:f5:2e:2a:
a1:c5:a9:4f:57:21:a7:17:df:90:0e:47:c0:27:da:34:60:72:
b0:db:28:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:25:30 2025 by rpki-client