Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
File: rImvYJhubZWDIvsCbGtlruyUmg0.mft (raw, json)
Hash identifier: fSI5i81ikbwEeVRbCf88DSuO/ugDOnZjwXTDL+9tIu8=
Subject key identifier: 2C:E0:F5:2C:5C:B0:5D:02:9A:B7:F0:79:C5:63:66:40:85:00:7F:72
Authority key identifier: AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
Certificate issuer: /CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Certificate serial: 019A1AD180D2045C8AA2BDEB1CA58D5972A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
Manifest number: 083D
Signing time: Sat 25 Oct 2025 10:02:08 +0000
Manifest this update: Sat 25 Oct 2025 10:02:08 +0000
Manifest next update: Sun 26 Oct 2025 10:02:08 +0000
Files and hashes: 1: HWWs6MqFS2nmbLw3ShctihMbNaY.roa (hash: KSXNNa9oIp9r32J4311J0aN03+Peflc2SZu+HPxriyM=)
2: QUH08L51MfImU-aeLB1gViX82cI.roa (hash: YfmDCd25c+HZBRwpm39HGU+G/47jVrQR3XrIyRY2J8U=)
3: b81h_NWwhKjMbH2-sUXyjP4n64s.roa (hash: e3T+4A186w/5PvOch5tYGnvLHtBctNKp6kP6+X8+j/w=)
4: rImvYJhubZWDIvsCbGtlruyUmg0.crl (hash: fMHMnZ7luM3obQR7nQaUj1AY9HG/CQU2mryoUeApKSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 02:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:d1:80:d2:04:5c:8a:a2:bd:eb:1c:a5:8d:59:72:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Validity
Not Before: Oct 25 10:02:08 2025 GMT
Not After : Oct 26 10:02:08 2025 GMT
Subject: CN=2ce0f52c5cb05d029ab7f079c563664085007f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6d:3d:6d:3d:82:79:a8:e7:27:3f:25:e5:85:
69:96:e2:37:89:a2:b0:81:25:38:88:c3:2c:3f:bf:
e9:91:f9:3e:3a:c9:09:2f:f2:42:b6:c7:22:53:39:
1d:aa:9b:87:fc:a8:b7:47:b4:2b:ec:39:bd:e4:cf:
a9:9f:9b:86:d5:d1:c9:e0:ab:c2:3c:c0:07:14:6a:
ec:d4:25:f1:cc:92:51:bb:21:b5:34:86:38:b9:34:
79:0e:f5:53:a6:a5:de:5d:d6:a1:b4:6f:34:be:53:
6a:5a:e5:ad:77:46:58:16:c1:9e:31:fe:40:e7:24:
3b:0c:0b:d1:6f:e3:67:c0:70:44:eb:dd:38:fc:ab:
ee:9f:90:56:b7:70:b2:e9:97:4b:06:32:1f:4a:d0:
70:e6:4c:c1:c8:ee:e2:78:fd:bb:4a:8b:a3:de:87:
4b:3d:c4:53:d8:b4:62:1f:28:c1:0c:d6:10:ef:f4:
34:24:7c:92:6d:55:01:07:f4:32:fc:78:a3:0e:ed:
ce:47:98:37:29:45:c4:1d:3b:ef:3d:bc:53:ea:d4:
48:c7:e1:6c:f3:50:b6:6e:56:7f:8f:af:92:4d:61:
45:7a:7f:8a:f2:54:fe:30:6b:e9:0a:cd:56:4e:64:
7c:ed:f2:cb:2b:7c:59:7f:43:0e:e7:f6:09:59:fb:
b8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E0:F5:2C:5C:B0:5D:02:9A:B7:F0:79:C5:63:66:40:85:00:7F:72
X509v3 Authority Key Identifier:
keyid:AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b5:58:03:19:e9:e3:fd:84:25:a0:28:46:a8:cb:6c:6f:62:
24:cd:8c:57:36:21:e1:45:24:2b:65:7e:cb:64:28:95:58:cf:
27:9f:17:3a:35:e3:8d:b6:76:e6:03:01:ac:eb:cd:a7:b9:55:
23:e5:70:19:39:f4:d7:66:f7:6b:3e:7d:f0:02:5a:f7:59:7f:
26:cd:4a:6f:93:d2:11:54:84:af:9c:6d:ab:2a:87:02:b3:d5:
24:c4:0b:c4:80:26:00:ca:89:f9:63:ac:65:35:eb:14:65:ec:
37:61:5b:36:a6:28:5c:ce:33:37:00:84:44:45:18:c8:62:bd:
89:55:8e:1a:75:8d:aa:04:5b:58:ba:f6:0b:4b:0d:be:00:a9:
1f:53:65:7e:09:13:77:e9:32:12:48:d8:94:57:b8:37:71:a6:
dc:dc:b2:b1:f2:44:d4:04:ce:ad:49:3f:9b:de:9c:8d:d9:71:
d5:a7:43:0c:cc:6a:af:5b:5e:d0:9e:5b:12:17:fe:95:0f:d5:
9f:0c:98:32:c1:fa:3e:0f:1b:c2:66:3a:2e:8e:b6:70:f6:e7:
d8:b3:e6:dc:77:27:6b:20:15:e5:f3:01:df:f3:94:29:ba:31:
07:63:16:99:ce:43:82:7e:81:e9:ca:0c:2a:e4:87:a8:e5:30:
12:9d:9d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 11:33:20 2025 by rpki-client