Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.mft
File: IMjVw3OmvzurIpOUNguG0Alq7L0.mft (raw, json)
Hash identifier: 6x7MPGtCXC5bmk4ZIVA8o3wN4GwhSAImQbIr9jwJons=
Subject key identifier: 23:D8:AC:EF:FD:2E:13:A6:5C:B3:54:E5:A9:71:16:98:A4:82:AF:25
Authority key identifier: 20:C8:D5:C3:73:A6:BF:3B:AB:22:93:94:36:0B:86:D0:09:6A:EC:BD
Certificate issuer: /CN=20c8d5c373a6bf3bab229394360b86d0096aecbd
Certificate serial: 019923D5B5D0E2573862C5BAE638AACEAB2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMjVw3OmvzurIpOUNguG0Alq7L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.mft
Manifest number: 120D
Signing time: Sun 07 Sep 2025 11:00:32 +0000
Manifest this update: Sun 07 Sep 2025 11:00:32 +0000
Manifest next update: Mon 08 Sep 2025 11:00:32 +0000
Files and hashes: 1: IMjVw3OmvzurIpOUNguG0Alq7L0.crl (hash: s71Js17Esf2AEI1fi+AhL57jttx4MOudp6QNXzuJNkY=)
2: eKykDDSSUelkgfwH3TO0n13mPZk.roa (hash: P9dt2Lrz0okP2zrUj3Cql2lI4c4A2LE13LjuP2FhidE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMjVw3OmvzurIpOUNguG0Alq7L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:b5:d0:e2:57:38:62:c5:ba:e6:38:aa:ce:ab:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c8d5c373a6bf3bab229394360b86d0096aecbd
Validity
Not Before: Sep 7 11:00:32 2025 GMT
Not After : Sep 8 11:00:32 2025 GMT
Subject: CN=23d8aceffd2e13a65cb354e5a9711698a482af25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a1:18:74:2f:41:c4:6c:c4:d6:ab:54:d6:08:
59:20:fc:eb:56:3f:f1:15:40:85:49:de:71:da:70:
70:5e:5f:90:40:c2:b1:99:bf:8b:00:6e:dc:20:89:
4a:6b:4c:da:f2:3c:db:7f:f6:26:8a:f5:f8:99:bb:
70:42:3d:01:fa:5d:fe:75:01:8a:ed:fa:37:1b:91:
3e:e6:6c:b5:93:c6:22:01:ef:24:31:84:0d:f9:c2:
7d:c9:05:1a:68:ad:a9:36:bd:69:3a:bf:26:4c:80:
08:8e:70:c9:52:1b:bf:d1:56:0b:77:07:e5:eb:48:
e4:f3:1a:28:61:47:c6:06:35:d8:90:22:83:29:62:
12:69:91:9d:91:f3:21:50:bd:b8:ba:13:58:18:fc:
70:ee:c4:ea:1b:78:c1:6f:10:d9:cb:15:a9:95:38:
5d:03:3f:be:2c:21:e4:a3:db:23:7d:b6:c2:d9:dd:
c7:b0:60:70:18:1a:93:3e:ac:f3:2c:d5:a0:f2:e5:
9b:63:08:dc:57:88:4f:2d:92:d9:8a:75:1f:82:5e:
3d:0b:c2:25:16:e0:e8:91:7f:5e:48:fb:2a:3d:90:
36:b6:b9:4b:bf:fa:12:7b:84:9a:83:fa:49:d5:1b:
73:f6:4f:e5:2e:fb:f6:13:f6:12:fc:54:f0:b3:e2:
97:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D8:AC:EF:FD:2E:13:A6:5C:B3:54:E5:A9:71:16:98:A4:82:AF:25
X509v3 Authority Key Identifier:
keyid:20:C8:D5:C3:73:A6:BF:3B:AB:22:93:94:36:0B:86:D0:09:6A:EC:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMjVw3OmvzurIpOUNguG0Alq7L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:1d:07:c6:89:ef:fe:38:31:38:a9:d9:24:af:5c:cc:0f:ab:
4e:da:d3:b8:4c:4d:02:c3:a7:af:37:2f:4d:ee:15:43:98:1d:
5b:68:bf:35:94:82:05:bb:0f:0d:a2:78:0e:2b:44:82:78:1b:
dc:32:70:89:b3:d0:49:43:a0:53:50:d1:1b:08:40:0c:ad:01:
0f:7e:32:81:4e:1b:48:a3:70:d2:94:33:f4:16:95:59:fb:30:
d7:0e:7e:c7:04:1b:b3:6c:0b:c4:27:65:fe:f8:17:9a:57:83:
41:72:a7:88:62:4e:fe:71:49:5f:75:64:d9:03:b6:0d:35:12:
53:0c:5b:68:01:24:4d:3f:36:c6:04:74:f5:72:2b:dc:87:1f:
7b:0a:0e:2d:2c:c2:54:b4:b1:97:7d:cb:cf:f7:cf:de:10:42:
a0:0f:e1:c6:2d:03:81:ba:24:33:b5:86:e5:2d:b6:e7:a0:6f:
71:ca:46:f0:8d:9d:67:52:f9:b0:b1:9a:7d:17:73:61:e6:8c:
ba:75:64:15:e6:a8:c9:9c:1d:78:36:2f:54:e2:dc:bf:b4:fc:
89:0d:a3:ab:c8:94:4f:3e:54:d0:f0:12:f4:c4:b8:96:a9:2b:
da:85:fd:d3:ea:7e:7c:9d:df:38:53:f3:e5:98:67:0a:f3:b6:
95:2f:ba:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:32:59 2025 by rpki-client