Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
File: imauQAwtaBlg6FU_yzFXi42c37Y.mft (raw, json)
Hash identifier: mnlViZi/t9rhxY3vtWb1Lgydptu9aQ5E+AHt6bWyAtw=
Subject key identifier: A6:66:0E:83:92:C5:DC:84:54:0A:EA:C8:EA:C2:C3:93:0E:AA:56:6E
Authority key identifier: 8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6
Certificate issuer: /CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6
Certificate serial: 019A1ACFADF04EB9F0ED48E9C6FB4FBBDD1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
Manifest number: 0321
Signing time: Sat 25 Oct 2025 10:00:09 +0000
Manifest this update: Sat 25 Oct 2025 10:00:09 +0000
Manifest next update: Sun 26 Oct 2025 10:00:09 +0000
Files and hashes: 1: PuzSFCpssVQvjZAtpt-uOtGr7hY.roa (hash: SPN1lNtFS0koIE09mFP53lEypWhv8lUH53A6TRYkysY=)
2: imauQAwtaBlg6FU_yzFXi42c37Y.crl (hash: m7kVspq9e9IiCfzEmzwn9MqiSwTlC1FcYT5Es9GBoD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 10:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:cf:ad:f0:4e:b9:f0:ed:48:e9:c6:fb:4f:bb:dd:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6
Validity
Not Before: Oct 25 10:00:09 2025 GMT
Not After : Oct 26 10:00:09 2025 GMT
Subject: CN=a6660e8392c5dc84540aeac8eac2c3930eaa566e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ae:dd:bf:b7:74:94:3d:c0:ed:fa:7b:7b:24:
e3:4f:f6:52:d6:75:f5:2c:37:6c:84:95:f8:67:4d:
5f:77:33:5b:10:f9:2b:32:b5:9d:db:f3:27:cf:48:
a2:16:a2:d3:87:0c:a7:1a:53:9c:6a:3f:86:bf:97:
dd:02:5c:e4:3c:ca:b3:f1:aa:c0:42:72:c6:d3:0c:
f8:99:26:ef:35:6a:0c:46:53:6f:4a:49:20:ef:db:
bd:fe:8f:5b:a4:67:c3:ef:c8:ce:28:7d:93:9c:3a:
8a:cf:8a:1f:26:f6:62:af:71:87:93:a5:49:ba:1c:
30:9b:5a:65:f0:69:ad:52:46:6b:47:b7:90:f6:95:
7b:e3:15:82:41:13:b1:57:c4:a4:ab:b4:20:81:0f:
0a:e9:b3:92:ad:1f:bc:55:64:95:ff:24:f1:2e:9e:
7d:1c:8a:a0:6b:56:4d:a6:0e:a8:19:b3:7c:1a:15:
97:bb:fd:65:ab:70:31:80:f0:1c:2d:0e:07:ee:be:
57:ce:de:6c:a9:b4:bf:b7:49:1b:f5:b1:fe:1f:13:
81:38:9d:6a:b4:2a:14:db:c4:39:d9:fd:d1:53:38:
4b:c7:57:95:0e:d0:bc:af:b1:7a:6c:68:f5:ff:9a:
b1:15:d0:53:00:35:6a:ed:52:9f:01:e0:db:3c:9a:
95:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:66:0E:83:92:C5:DC:84:54:0A:EA:C8:EA:C2:C3:93:0E:AA:56:6E
X509v3 Authority Key Identifier:
keyid:8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d0:98:55:b9:0f:20:70:d3:e9:df:3d:33:76:8e:79:c6:e4:
45:87:5e:13:79:92:a1:fc:a3:58:28:70:fc:85:54:7c:5f:c7:
3c:5e:68:bd:2f:1a:4d:2e:39:fa:f2:20:76:56:73:d1:20:eb:
1c:7e:1e:00:6a:ca:65:6e:aa:3b:80:c7:e4:7d:5e:22:21:b7:
d5:9e:88:46:a3:2e:d0:b4:18:49:f1:2f:63:a8:5b:14:67:75:
7b:7f:11:92:2d:99:24:c2:ae:59:b9:fa:91:81:27:67:63:20:
2e:a1:39:75:a6:db:9d:8d:d6:a6:00:0e:25:20:44:74:03:2d:
0b:e9:13:c8:c0:28:f2:68:99:74:ba:39:99:64:9c:7c:28:8e:
5d:c1:d5:2d:85:06:b6:3c:88:57:7e:24:a9:ae:20:cd:76:ad:
24:b1:cd:8b:8a:9d:1f:5b:eb:07:fb:c6:90:c1:e1:84:92:31:
c3:ab:53:55:bd:55:ab:c9:6b:2c:9c:18:ca:7b:d1:5a:d5:14:
e3:e3:bc:35:3d:ba:ec:ae:8b:1b:52:c6:8c:11:52:30:86:17:
15:a9:c9:86:7e:4b:32:d0:81:74:47:7c:44:1e:8c:1b:fd:da:
de:1d:82:bc:a5:e9:f0:56:9b:f2:10:80:ed:95:89:e0:f2:c1:
36:5c:ca:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoaz63wTrnw7UjpxvtPu90aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNjZhZTQwMGMyZDY4MTk2MGU4NTUzZmNiMzE1NzhiOGQ5
Y2RmYjYwHhcNMjUxMDI1MTAwMDA5WhcNMjUxMDI2MTAwMDA5WjAzMTEwLwYDVQQD
EyhhNjY2MGU4MzkyYzVkYzg0NTQwYWVhYzhlYWMyYzM5MzBlYWE1NjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4K7dv7d0lD3A7fp7eyTjT/ZS1nX1
LDdshJX4Z01fdzNbEPkrMrWd2/Mnz0iiFqLThwynGlOcaj+Gv5fdAlzkPMqz8arA
QnLG0wz4mSbvNWoMRlNvSkkg79u9/o9bpGfD78jOKH2TnDqKz4ofJvZir3GHk6VJ
uhwwm1pl8GmtUkZrR7eQ9pV74xWCQROxV8Skq7QggQ8K6bOSrR+8VWSV/yTxLp59
HIqga1ZNpg6oGbN8GhWXu/1lq3AxgPAcLQ4H7r5Xzt5sqbS/t0kb9bH+HxOBOJ1q
tCoU28Q52f3RUzhLx1eVDtC8r7F6bGj1/5qxFdBTADVq7VKfAeDbPJqVsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZmDoOSxdyEVArqyOrCw5MOqlZuMB8GA1UdIwQY
MBaAFIpmrkAMLWgZYOhVP8sxV4uNnN+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jMzNhZjYtMzZhOS00N2IwLTgzZTct
OGJiYzNhOWU0ZjQzLzEvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jMzNhZjYtMzZhOS00N2IwLTgzZTctOGJiYzNhOWU0ZjQz
LzEvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZdCYVbkP
IHDT6d89M3aOecbkRYdeE3mSofyjWChw/IVUfF/HPF5ovS8aTS45+vIgdlZz0SDr
HH4eAGrKZW6qO4DH5H1eIiG31Z6IRqMu0LQYSfEvY6hbFGd1e38Rki2ZJMKuWbn6
kYEnZ2MgLqE5dabbnY3WpgAOJSBEdAMtC+kTyMAo8miZdLo5mWScfCiOXcHVLYUG
tjyIV34kqa4gzXatJLHNi4qdH1vrB/vGkMHhhJIxw6tTVb1Vq8lrLJwYynvRWtUU
4+O8NT267K6LG1LGjBFSMIYXFanJhn5LMtCBdEd8RB6MG/3a3h2CvKXp8Fab8hCA
7ZWJ4PLBNlzKgw==
-----END CERTIFICATE-----
Generated at Sat Oct 25 18:23:46 2025 by rpki-client