Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
File: rImvYJhubZWDIvsCbGtlruyUmg0.mft (raw, json)
Hash identifier: WN7CLRzwggEniGkgasqQgg9Zc0Q3m93l4BrF8iy2sK0=
Subject key identifier: B4:6F:74:46:FA:7B:38:91:CD:06:DB:21:D5:33:8F:33:CF:E9:33:84
Authority key identifier: AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
Certificate issuer: /CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Certificate serial: 0199239EAAC8F6F3FD60945FB0AD91C1BAEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
Manifest number: 07BD
Signing time: Sun 07 Sep 2025 10:00:24 +0000
Manifest this update: Sun 07 Sep 2025 10:00:24 +0000
Manifest next update: Mon 08 Sep 2025 10:00:24 +0000
Files and hashes: 1: HWWs6MqFS2nmbLw3ShctihMbNaY.roa (hash: KSXNNa9oIp9r32J4311J0aN03+Peflc2SZu+HPxriyM=)
2: QUH08L51MfImU-aeLB1gViX82cI.roa (hash: YfmDCd25c+HZBRwpm39HGU+G/47jVrQR3XrIyRY2J8U=)
3: b81h_NWwhKjMbH2-sUXyjP4n64s.roa (hash: e3T+4A186w/5PvOch5tYGnvLHtBctNKp6kP6+X8+j/w=)
4: rImvYJhubZWDIvsCbGtlruyUmg0.crl (hash: e6xsv98eWf+XzOzhlTsQQPCZRlD3EYKrz/wudPtwjUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:aa:c8:f6:f3:fd:60:94:5f:b0:ad:91:c1:ba:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Validity
Not Before: Sep 7 10:00:24 2025 GMT
Not After : Sep 8 10:00:24 2025 GMT
Subject: CN=b46f7446fa7b3891cd06db21d5338f33cfe93384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dc:47:ea:47:21:67:26:a2:53:b4:2f:a7:77:
56:8b:1e:2e:47:54:12:f8:a8:16:ae:8a:0d:7a:75:
25:15:06:b4:00:86:cc:a1:eb:9f:4c:53:03:b3:25:
fc:8f:d7:66:b7:32:e6:10:af:ae:91:eb:52:4a:d8:
30:02:63:3c:06:c2:ff:f5:24:a5:05:be:54:73:34:
fa:a5:10:f6:09:f6:83:a1:3f:7e:4e:ad:f4:52:23:
37:4f:83:11:8f:4e:b9:d6:b4:f5:cc:f3:d0:c0:22:
4f:ac:77:8a:31:7c:bd:d4:9f:f2:86:82:7e:1d:22:
6a:7f:b6:d8:6b:de:82:e9:f7:7d:a4:12:29:69:30:
d8:a5:37:5c:dd:09:4c:89:85:3a:bf:e0:46:26:47:
48:ca:3b:99:6f:18:2b:4d:be:68:d5:60:45:05:cf:
38:ba:bc:3e:07:4b:65:34:76:31:38:2e:61:3b:ab:
9f:82:eb:67:3d:a3:84:fd:20:54:91:07:87:ea:90:
6d:64:1f:43:7d:56:7a:29:32:13:e7:3b:d8:5c:88:
29:44:26:3b:21:b6:20:f5:0a:03:3d:f9:2c:1c:86:
59:35:62:eb:2a:4f:5d:43:58:e8:08:02:45:bb:6b:
e5:98:6e:7b:77:36:30:54:e8:ca:5d:df:8b:c2:a2:
34:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6F:74:46:FA:7B:38:91:CD:06:DB:21:D5:33:8F:33:CF:E9:33:84
X509v3 Authority Key Identifier:
keyid:AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:93:31:79:62:92:d5:0c:25:f8:51:9c:4d:c6:43:07:de:f4:
1a:82:d8:a0:93:39:bc:2d:ae:33:b2:6d:10:14:95:a2:4b:64:
60:2f:ab:fb:6a:f3:be:de:9c:1c:29:68:fa:71:6c:84:0f:dc:
29:d1:07:1b:f7:75:a8:1b:ca:4c:2a:92:ff:f8:8b:1f:ec:90:
46:7e:44:b2:30:f4:ac:f2:fc:50:44:1d:22:cd:8c:41:8b:1c:
17:a9:42:97:0a:97:5f:f3:2f:16:e7:de:64:d3:ce:0e:d1:55:
30:7d:ad:91:a8:ca:ea:6d:34:10:45:cc:77:5a:75:a3:60:f6:
90:76:83:8e:6c:75:6a:24:d9:7d:70:55:49:a7:62:36:eb:ac:
41:d5:53:ea:1a:5f:f4:1b:93:45:86:a4:53:ab:8b:ef:3b:f3:
22:c6:f3:c1:ca:c2:51:39:a3:04:7d:02:6c:6d:5d:dd:c7:d4:
0b:13:28:88:02:d6:30:5d:cb:d8:f9:e1:68:d7:6f:de:9e:a2:
44:f6:e0:9e:af:90:01:33:29:09:a8:79:e4:74:44:20:d3:56:
57:10:40:a2:68:20:03:8c:92:cf:76:41:57:35:0c:66:37:f0:
73:8c:fa:5d:e7:22:02:69:47:52:39:80:48:62:b3:f8:10:2d:
aa:2d:9d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:17 2025 by rpki-client