Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
File: i_iimBQfwvRcBy0noL8mJlXLb1o.mft (raw, json)
Hash identifier: GDa/bRk9aPbvVE22mBDarp7FuzvfkKOSNsSi0RVrgZQ=
Subject key identifier: FB:42:85:0C:16:6A:7B:D3:B1:E2:F7:1F:CA:5B:02:F5:A9:3C:7A:96
Authority key identifier: 8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
Certificate issuer: /CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Certificate serial: 019A714A06EF6561CA8C5CE73D88CA4AC043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
Manifest number: 0224
Signing time: Tue 11 Nov 2025 05:01:08 +0000
Manifest this update: Tue 11 Nov 2025 05:01:08 +0000
Manifest next update: Wed 12 Nov 2025 05:01:08 +0000
Files and hashes: 1: i_iimBQfwvRcBy0noL8mJlXLb1o.crl (hash: SJtOdxiEqQwJuPV2QaxprAdpRhv3Lswa+0yOfCOZJEM=)
2: w8pMwx-vyyole256lyQ0C_5-WOI.roa (hash: K+srURRGs/DsNg/JW4KWXf2QN5EAfkcbY2aU8MAMJS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:06:ef:65:61:ca:8c:5c:e7:3d:88:ca:4a:c0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Validity
Not Before: Nov 11 05:01:08 2025 GMT
Not After : Nov 12 05:01:08 2025 GMT
Subject: CN=fb42850c166a7bd3b1e2f71fca5b02f5a93c7a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c1:e4:1b:62:e0:f1:3b:04:69:04:69:38:e1:
cc:cc:d8:08:ce:c9:24:c9:d7:33:45:f6:fc:e4:ad:
b1:53:bf:01:17:d6:a2:6e:5a:7e:6a:3a:2c:33:27:
00:85:31:83:14:2a:18:d4:ca:53:83:0d:96:d9:61:
4f:2e:03:f4:79:68:b8:54:bb:e3:df:cd:3f:59:80:
31:c4:0b:38:74:34:d8:3e:cd:f8:17:d0:60:50:f9:
85:ab:d0:a7:ee:2e:db:ce:71:ce:77:fe:52:65:7d:
d9:94:4e:4f:d1:e3:78:3d:31:6e:17:07:ff:46:7b:
6b:83:20:c6:20:c1:d8:d4:d8:2e:eb:70:14:6e:1e:
04:9d:58:ed:f7:9b:81:ea:76:4e:9b:96:32:00:d8:
9e:c3:68:52:29:7f:5a:0b:12:19:75:2f:60:82:b8:
66:35:df:3e:6d:9b:20:71:41:7e:1e:b7:e9:54:9e:
93:04:5f:3c:65:21:37:e7:5d:e8:e7:53:e3:92:6c:
77:c2:72:5b:6f:6f:91:e7:6d:37:da:77:64:a5:f5:
bc:60:1a:a1:95:78:4e:c9:b9:f8:02:22:a0:cc:3f:
5d:c6:2a:15:78:e2:45:fb:de:5d:47:47:aa:b1:c7:
8c:01:ee:75:a1:fd:72:55:8e:3a:5d:d5:b6:d7:1f:
13:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:42:85:0C:16:6A:7B:D3:B1:E2:F7:1F:CA:5B:02:F5:A9:3C:7A:96
X509v3 Authority Key Identifier:
keyid:8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e9:cf:0b:85:0b:fa:00:a1:fd:e6:fb:2d:9d:b4:52:ef:02:
8e:a8:b6:6f:68:63:f2:3a:3d:d0:29:e1:70:92:2f:2f:46:8c:
7d:70:09:2b:b1:07:2d:5a:9c:d9:7b:ae:22:6d:09:7c:68:a0:
24:66:bd:ce:1c:0d:77:53:5a:68:c2:21:24:36:cf:72:4e:06:
80:26:aa:c2:17:fd:24:11:a5:37:1a:4d:76:f4:d4:e7:3f:e8:
0e:eb:67:d6:e9:ec:3e:8a:65:19:b6:2b:9a:f9:cd:81:b7:2b:
91:0d:38:36:1a:93:1d:81:5d:0a:d6:3c:1b:ef:b4:b3:f5:15:
22:53:79:07:89:36:10:05:9e:1b:05:bf:0f:53:84:cc:2f:b3:
2b:26:ef:37:3d:bc:ee:f8:c4:a5:76:94:f6:5f:73:16:79:6f:
b4:17:7e:a4:82:c3:01:03:75:36:a4:1c:db:15:1e:5d:bd:b1:
8b:91:ba:ce:66:34:63:b6:e6:f9:9e:31:12:b6:83:95:e4:8c:
e6:8b:e2:d8:b5:fa:3b:d4:7c:ac:d3:b5:8c:8a:11:31:00:a8:
7b:6a:36:73:55:7a:8f:ce:d5:ad:4b:07:97:b3:3e:29:b1:47:
b9:17:62:ff:8b:f8:06:ab:11:d8:92:52:94:f1:2c:af:a3:3a:
f8:4f:80:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:13 2025 by rpki-client