Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
File: ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft (raw, json)
Hash identifier: gCvNtWzQunP2EVngduFVu6tdyWRvJItqYjbNuIUPI1o=
Subject key identifier: 5F:03:C0:9A:80:53:87:8E:C7:B8:91:C8:74:78:09:55:B0:2B:C0:7F
Authority key identifier: 22:6A:87:21:6D:7E:3C:59:31:5F:77:8B:2C:8F:4A:9E:F4:78:B9:3E
Certificate issuer: /CN=226a87216d7e3c59315f778b2c8f4a9ef478b93e
Certificate serial: 0199221E2734B841B4C195934EEF42667842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
Manifest number: 0991
Signing time: Sun 07 Sep 2025 03:00:25 +0000
Manifest this update: Sun 07 Sep 2025 03:00:25 +0000
Manifest next update: Mon 08 Sep 2025 03:00:25 +0000
Files and hashes: 1: ImqHIW1-PFkxX3eLLI9KnvR4uT4.crl (hash: JXGTwNGaY4WhmsyTNP5L4SIhHCv74SVgj1Ms26J+oRk=)
2: LmHDwcZ0P773I2DpMatr3rQ-X-8.roa (hash: 5kJqTJl/6GtvZrCUi8E6q77SOJaK4OPEzeCstrG7klc=)
3: T1Y1gDousbxvwwsbtZaj-joDVoU.roa (hash: q7TNUs0D+VmakPZEeRGmF+IIFBvhiGx/mkCVwJhSBnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:27:34:b8:41:b4:c1:95:93:4e:ef:42:66:78:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=226a87216d7e3c59315f778b2c8f4a9ef478b93e
Validity
Not Before: Sep 7 03:00:25 2025 GMT
Not After : Sep 8 03:00:25 2025 GMT
Subject: CN=5f03c09a8053878ec7b891c874780955b02bc07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1b:b9:61:a6:56:d9:4b:4e:c7:94:8e:09:56:
a2:37:ff:7a:e1:c7:c4:38:06:81:80:4b:69:33:05:
03:e0:b2:f2:54:38:9b:c0:ac:1b:af:b0:14:a5:9d:
8a:d7:45:a1:4b:ad:26:6b:dc:29:6a:0f:ac:31:72:
4a:c0:3d:a4:76:de:6d:4a:d4:5e:4c:94:6f:54:4d:
5b:da:47:06:8e:df:e7:c1:97:93:44:5f:fb:54:50:
d4:8b:52:c1:54:1e:6c:06:63:45:09:ef:26:5d:f5:
5f:31:40:38:44:6b:d5:9a:35:dd:82:da:88:74:ae:
56:83:c0:36:52:b3:9f:c3:35:69:ac:9d:f7:db:bc:
d1:a0:19:41:4c:9e:46:54:28:e0:cd:50:14:d2:08:
c4:bd:df:ba:72:60:b4:50:84:46:01:f6:e3:8f:93:
cb:34:70:3e:4c:a4:62:6e:7b:14:2f:07:d0:19:bd:
75:a1:45:98:90:3e:df:34:28:70:7a:d8:84:09:d9:
fe:f7:2f:df:5a:8b:e4:83:61:ae:d2:52:fb:75:24:
7c:64:49:6d:33:84:f5:39:5e:da:b0:d2:95:0c:6c:
7b:73:38:a6:df:1a:36:67:9e:1c:7b:2d:8d:c0:fc:
7c:47:c0:6f:db:68:39:0d:34:72:3c:e3:91:5f:55:
d7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:03:C0:9A:80:53:87:8E:C7:B8:91:C8:74:78:09:55:B0:2B:C0:7F
X509v3 Authority Key Identifier:
keyid:22:6A:87:21:6D:7E:3C:59:31:5F:77:8B:2C:8F:4A:9E:F4:78:B9:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:19:28:d9:00:b3:75:5e:67:7f:b8:f7:9f:52:19:7d:19:8f:
5e:96:3c:16:f6:cc:fe:88:3e:82:ef:11:24:99:cf:12:fc:9d:
9d:71:56:3f:e8:d9:64:34:53:ba:52:63:d2:32:12:cc:72:9c:
ea:52:2a:fe:c7:15:c7:d0:c1:3b:d6:06:82:53:b7:49:ad:8b:
30:55:ae:84:5c:f3:aa:33:f3:cf:3d:55:b5:f4:f3:78:4b:4a:
2f:83:8a:3c:f6:ca:2c:ba:0a:0b:7b:00:c7:a9:43:18:11:74:
ff:1b:b8:aa:47:97:a3:02:88:ac:be:46:ee:3c:19:f6:d2:49:
a5:61:7e:34:e1:d5:4f:48:09:7b:f6:58:62:38:8c:ad:08:d6:
bc:e4:65:4f:71:e4:98:32:92:1d:ea:d8:7c:5a:35:d5:c9:77:
ef:cc:b9:d7:e6:25:65:cd:bc:16:eb:92:a5:de:4b:4d:5c:9c:
f5:98:28:81:94:5b:3e:81:9e:2d:14:0b:b0:45:3c:15:65:99:
61:c4:cf:fc:b4:8e:0f:3d:b2:1a:09:3c:25:89:c8:4e:ce:ce:
bd:fa:d8:d3:f9:74:ad:9d:4c:6a:ea:f9:e8:a2:36:d8:fb:ee:
5b:a4:0e:96:b1:2d:d4:f7:2f:6a:04:fa:04:ad:5d:12:d2:c4:
40:dc:4f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:33 2025 by rpki-client