Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
File: cimwOc-KrxQdbm1hbnwWkInLyzI.mft (raw, json)
Hash identifier: 0th//HjvZFVjw7NGWCE40MyX/cDQCDgDirBa9cLOuDo=
Subject key identifier: 15:E5:63:93:5B:F4:7A:F2:39:FE:9A:EC:7B:2E:6B:03:1D:99:EB:E2
Authority key identifier: 72:29:B0:39:CF:8A:AF:14:1D:6E:6D:61:6E:7C:16:90:89:CB:CB:32
Certificate issuer: /CN=7229b039cf8aaf141d6e6d616e7c169089cbcb32
Certificate serial: 019A706DF61C9B381AB12B3167E473AD3B4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
Manifest number: 0E5B
Signing time: Tue 11 Nov 2025 01:00:45 +0000
Manifest this update: Tue 11 Nov 2025 01:00:45 +0000
Manifest next update: Wed 12 Nov 2025 01:00:45 +0000
Files and hashes: 1: _11c4KnryngFBZ3LrSwCjXVWAnI.roa (hash: 4suX3JVW+dbra41XqoLSgaNnHC7+X6k6GS1R8JLgxL8=)
2: cimwOc-KrxQdbm1hbnwWkInLyzI.crl (hash: 5JBImMgvN1i+Qbm/SxBTq+OhJq6p9zDeg90+NBSAg2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6d:f6:1c:9b:38:1a:b1:2b:31:67:e4:73:ad:3b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7229b039cf8aaf141d6e6d616e7c169089cbcb32
Validity
Not Before: Nov 11 01:00:45 2025 GMT
Not After : Nov 12 01:00:45 2025 GMT
Subject: CN=15e563935bf47af239fe9aec7b2e6b031d99ebe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4b:93:c7:37:9d:28:97:1b:4d:d1:c0:08:6b:
1e:17:dd:5b:d0:b4:12:ff:82:7b:10:c1:33:83:0b:
fd:a7:f0:24:e1:c8:8d:be:f1:ef:08:e5:95:84:2e:
53:7a:d1:d5:4a:55:d4:00:1f:5a:18:98:1a:a4:8d:
1f:ee:73:93:1e:c1:c7:d5:e9:71:96:4b:ca:f6:0d:
7e:82:66:30:62:94:00:1b:31:a7:5f:99:31:98:e4:
fd:b4:68:aa:7e:a1:70:fe:60:2b:eb:48:b1:4d:09:
80:11:fb:08:ab:bd:e2:4b:6a:82:b9:41:dc:d7:0c:
67:5e:4b:6b:59:ef:4f:9d:4e:d3:cc:33:69:c1:10:
fb:37:20:c4:93:b9:0c:fd:de:ed:a2:c1:5d:df:dc:
b3:3c:92:35:0c:af:58:27:7d:9a:ed:45:bd:1b:d8:
cd:ed:bc:e9:35:f2:41:20:38:2b:a5:ab:0f:93:57:
6e:3d:4b:e6:35:ce:88:ce:31:f8:51:f2:be:6e:08:
ca:f4:be:b8:a9:25:0c:9f:ad:19:c3:97:45:7f:51:
6d:cd:ad:1b:49:68:cf:51:d9:e5:a5:a2:45:3e:e6:
ac:e6:86:07:a6:6a:ef:95:1f:3e:bd:e3:19:bf:04:
d8:d1:9d:0c:1d:4b:4c:e9:a3:d9:5d:2b:26:a4:3b:
99:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E5:63:93:5B:F4:7A:F2:39:FE:9A:EC:7B:2E:6B:03:1D:99:EB:E2
X509v3 Authority Key Identifier:
keyid:72:29:B0:39:CF:8A:AF:14:1D:6E:6D:61:6E:7C:16:90:89:CB:CB:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:81:62:cc:22:75:79:4b:51:fb:24:73:d0:a7:f7:70:29:68:
64:8c:8b:11:24:a5:b5:d2:33:23:f8:76:c1:a2:06:1f:20:28:
f4:e8:17:ec:1f:e6:ea:3f:cc:be:16:43:44:ba:18:97:fd:e8:
18:1c:71:08:c0:2c:57:97:2d:7c:47:4e:c2:50:ef:f9:f5:32:
45:c6:b5:0d:51:c7:6c:a0:31:f1:53:92:6e:f6:95:db:28:fd:
d9:d3:f7:3c:27:0d:7e:16:d3:e6:fe:b2:44:f1:98:ab:15:00:
31:78:77:4a:36:30:a9:2d:cb:cd:e7:8e:ba:f3:74:7c:49:eb:
69:38:04:48:a5:02:ad:2f:1b:5c:4d:af:79:7d:70:58:7d:0f:
b3:53:b9:f5:7a:2a:df:f7:a9:b9:38:65:6f:84:e3:3c:9d:5a:
39:fb:82:28:08:25:2d:ea:7c:32:90:f3:ec:1c:eb:f6:ae:60:
d5:da:1c:aa:40:95:c7:74:a2:68:db:97:8b:9e:89:cf:5e:93:
45:c0:0f:9f:64:58:5d:e4:79:c0:7c:02:33:69:46:8e:6a:98:
bc:e7:99:78:66:2f:1e:e1:fe:04:c1:df:25:24:45:97:93:48:
de:46:c4:a9:4f:d7:c5:e8:e3:a3:f9:2b:df:50:b0:03:6a:97:
3a:e1:d1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:09 2025 by rpki-client