Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
File: IMz236cJVzqCG2PEy2lWBf0maAs.mft (raw, json)
Hash identifier: 8wka/gKnI0dj9/9wtmiyT3J0m0kf4F7tsIqVBcAN8wY=
Subject key identifier: AB:76:50:62:AA:41:2F:45:81:52:79:9E:EF:69:9B:A4:A5:9A:D1:AE
Authority key identifier: 20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B
Certificate issuer: /CN=20ccf6dfa709573a821b63c4cb695605fd26680b
Certificate serial: 019A2A44562845ED213A482D0347228904D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
Manifest number: 0400
Signing time: Tue 28 Oct 2025 10:01:52 +0000
Manifest this update: Tue 28 Oct 2025 10:01:52 +0000
Manifest next update: Wed 29 Oct 2025 10:01:52 +0000
Files and hashes: 1: HO9laPPsdq6sfNd_PR3udt1kywk.roa (hash: ySqE/9cHXiOyjfUHGzF3+AzH1p8/SUImSsDU40s2CbI=)
2: IMz236cJVzqCG2PEy2lWBf0maAs.crl (hash: WJAM2XOSKpcmSR7TBDaUnubymL1IuMRSAwT9VF+WSkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 10:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:44:56:28:45:ed:21:3a:48:2d:03:47:22:89:04:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ccf6dfa709573a821b63c4cb695605fd26680b
Validity
Not Before: Oct 28 10:01:52 2025 GMT
Not After : Oct 29 10:01:52 2025 GMT
Subject: CN=ab765062aa412f458152799eef699ba4a59ad1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c9:b1:da:4d:15:9e:47:03:a5:3f:25:cb:bf:
02:bd:e0:b1:36:61:0d:dd:3a:5a:20:61:53:73:78:
a3:0b:e2:cd:5f:98:3e:e4:04:a3:57:ac:a0:7c:d0:
49:aa:b0:35:82:74:b8:9f:9c:55:1e:06:8e:d9:b1:
0f:45:3e:4a:38:16:1f:e8:8b:3c:03:f8:21:43:66:
a7:62:44:b0:cc:f2:84:65:90:6c:6f:29:12:db:38:
f7:9f:7f:19:18:0f:ae:7c:67:db:53:91:0a:60:95:
89:2a:ce:9c:91:cc:e5:d4:6f:05:60:6c:b2:aa:bf:
f1:1c:8f:49:b8:4b:7f:88:9d:59:15:09:93:bb:70:
01:f0:5d:d2:a5:0a:0a:9c:49:02:02:0d:ab:4d:90:
f3:a1:73:c5:24:63:d3:43:61:bb:b0:18:97:61:a5:
8d:7f:46:a8:76:50:fb:70:e7:18:44:3d:5d:dd:c2:
b7:18:52:c6:fb:eb:88:50:26:71:2b:cc:e6:40:ae:
f3:50:f9:53:47:7b:c6:a5:fd:31:38:52:7e:74:99:
b6:7e:26:85:b2:26:bc:dc:ed:49:8b:b7:da:98:8c:
f5:39:e6:62:73:9c:3c:89:13:8a:ae:0c:31:d5:d6:
01:a2:90:27:bf:19:52:7d:5a:dc:91:0c:a8:c6:3c:
44:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:76:50:62:AA:41:2F:45:81:52:79:9E:EF:69:9B:A4:A5:9A:D1:AE
X509v3 Authority Key Identifier:
keyid:20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:bb:99:58:2b:bf:86:34:8d:cc:93:52:f0:6f:08:9f:55:f2:
bd:f4:c4:7b:ca:5d:0b:a7:73:60:44:b1:80:59:b2:4f:dd:70:
7a:5b:9b:e4:5b:20:fd:1d:6e:73:b3:1c:75:a0:4a:9e:b9:e2:
3d:8c:ec:12:1b:44:4a:c0:eb:06:5d:36:23:9c:1e:37:26:3c:
fd:66:83:2f:10:02:26:ed:81:57:b4:91:fa:ed:05:ee:68:1e:
af:82:ef:12:22:f0:56:24:59:ec:51:a8:7b:ac:8f:f4:7a:80:
b8:39:4d:0c:b2:cf:8c:13:2b:a6:27:04:dd:ff:69:96:ec:4a:
33:5d:e3:ea:82:6d:f1:65:a0:5a:7b:c3:b1:02:0a:3c:f3:64:
12:09:b0:58:50:00:b1:3e:93:4a:aa:77:02:b0:78:08:fb:32:
f9:4e:f4:53:0c:be:80:29:40:e3:43:6d:68:58:86:29:77:02:
2b:fa:21:a2:38:62:ff:d8:db:c4:c2:4d:1d:35:3c:4f:06:2e:
6a:1a:d7:c2:73:d5:37:4a:da:c6:90:e9:24:69:22:27:e2:72:
73:f6:83:85:f9:62:a4:72:b6:2b:28:88:f6:d8:8e:a0:f8:57:
49:12:fe:fa:09:c6:b1:d6:ec:4d:63:1c:3d:b1:99:f5:64:5c:
de:d1:a5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 18:39:30 2025 by rpki-client