Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.mft
File: IMjVw3OmvzurIpOUNguG0Alq7L0.mft (raw, json)
Hash identifier: OW2eNsmQ34zmcZwXK8CEoz+Glxtoa14Afa2MzMZW91s=
Subject key identifier: 2C:C2:BA:21:6D:87:13:50:F7:65:F0:99:64:05:75:F6:7B:53:83:F7
Authority key identifier: 20:C8:D5:C3:73:A6:BF:3B:AB:22:93:94:36:0B:86:D0:09:6A:EC:BD
Certificate issuer: /CN=20c8d5c373a6bf3bab229394360b86d0096aecbd
Certificate serial: 019A71EEA20CFA48060EBE320AB4EBA93BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMjVw3OmvzurIpOUNguG0Alq7L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.mft
Manifest number: 12BA
Signing time: Tue 11 Nov 2025 08:00:55 +0000
Manifest this update: Tue 11 Nov 2025 08:00:55 +0000
Manifest next update: Wed 12 Nov 2025 08:00:55 +0000
Files and hashes: 1: IMjVw3OmvzurIpOUNguG0Alq7L0.crl (hash: 5Kvgp3Cg+PZx7s/Qr6lhfzdd+iweWE82SdEWVHO9XyU=)
2: eKykDDSSUelkgfwH3TO0n13mPZk.roa (hash: P9dt2Lrz0okP2zrUj3Cql2lI4c4A2LE13LjuP2FhidE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMjVw3OmvzurIpOUNguG0Alq7L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a2:0c:fa:48:06:0e:be:32:0a:b4:eb:a9:3b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c8d5c373a6bf3bab229394360b86d0096aecbd
Validity
Not Before: Nov 11 08:00:55 2025 GMT
Not After : Nov 12 08:00:55 2025 GMT
Subject: CN=2cc2ba216d871350f765f099640575f67b5383f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:65:02:4b:f8:40:7a:ba:02:39:b3:ed:04:72:
04:77:9f:89:0f:60:c8:04:5a:42:bb:ba:23:10:60:
31:d0:8b:4e:af:35:01:e9:71:78:63:94:9a:b9:c7:
31:a6:ad:2f:47:21:c1:ec:21:05:b6:6f:23:13:8c:
75:85:ca:9d:7f:da:2f:e8:a7:17:e7:d2:d0:d2:d7:
d4:33:6f:21:f2:16:66:30:9c:79:40:14:43:b6:d1:
e7:59:63:ce:a9:61:cf:9f:ec:ca:cc:b3:44:98:c9:
c1:5d:b2:19:2c:1e:51:43:80:6f:25:cc:7e:59:96:
2a:6e:99:2b:84:76:da:6a:b2:6e:66:c7:63:66:3b:
45:27:2c:d3:82:6b:9d:67:25:1b:30:d6:b7:a4:a3:
85:67:95:c4:69:25:2f:c1:9c:05:2f:a5:f7:8f:4b:
7f:aa:55:d9:94:af:eb:1b:58:ae:67:97:88:6d:23:
31:c8:ad:b9:e5:79:1c:6f:a4:69:92:24:f0:d3:cb:
cb:85:fa:59:2c:08:b7:57:99:43:64:7a:54:bc:5d:
85:24:a9:55:8c:f0:58:8e:31:49:cc:17:10:58:cd:
99:bc:b5:58:b4:3e:80:e4:94:4c:37:06:63:a8:a9:
81:75:0a:79:c0:a0:32:f2:54:3a:e6:3d:8b:19:13:
f2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C2:BA:21:6D:87:13:50:F7:65:F0:99:64:05:75:F6:7B:53:83:F7
X509v3 Authority Key Identifier:
keyid:20:C8:D5:C3:73:A6:BF:3B:AB:22:93:94:36:0B:86:D0:09:6A:EC:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMjVw3OmvzurIpOUNguG0Alq7L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:8b:3e:41:47:e2:55:b8:fd:74:15:a2:65:3a:9e:0b:58:56:
f5:7c:1a:64:9a:01:fc:af:ae:88:41:29:e8:dd:41:fb:d0:19:
8a:80:05:0e:e2:f6:ea:cf:47:b9:0d:93:a1:af:77:0f:20:9f:
c7:14:c4:56:79:67:a0:8f:90:64:a8:d0:85:bb:d3:d5:87:c8:
82:2a:3b:16:95:ff:86:d7:5f:86:80:da:99:6b:8e:95:71:21:
8c:e2:a6:6d:2c:e9:0d:d8:e0:1a:73:d5:76:04:cf:33:bc:4f:
75:46:97:4f:fb:2e:4e:32:f5:f6:63:ab:84:ab:a9:66:30:5c:
f5:35:92:be:2a:f8:46:cd:eb:7d:e2:c4:5a:34:a2:cf:e3:4e:
9f:dd:ac:50:02:1a:9a:94:65:70:62:a6:b4:ad:69:27:8a:82:
ea:29:f4:08:da:e2:1f:32:96:6b:06:8a:47:79:06:81:ea:dd:
38:2b:04:d5:d4:34:17:84:46:7e:0c:29:d6:da:b4:b9:cd:53:
7f:1b:14:1e:3f:42:df:e6:52:38:17:64:13:7c:34:2a:94:bf:
be:56:8d:bd:53:d7:a7:cd:41:ab:8b:fc:3c:f3:9d:67:6d:17:
fa:0c:f5:b0:54:a0:94:ea:a8:32:08:2c:8f:63:76:8b:4b:95:
8d:8b:07:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:59:44 2025 by rpki-client