Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
File: RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft (raw, json)
Hash identifier: 3LnzRLZbbW/7DwZO0W6uiwAbuICIBakiZNcZ1iBPG+4=
Subject key identifier: C9:1E:53:62:32:41:02:E5:3E:DC:86:D2:A3:16:D1:31:DA:59:44:D7
Authority key identifier: 44:83:31:85:1B:35:59:D3:CC:82:99:F6:B0:20:EF:37:8E:2E:4B:04
Certificate issuer: /CN=448331851b3559d3cc8299f6b020ef378e2e4b04
Certificate serial: 019A7225F0090BCFAF82641702E87F246944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
Manifest number: 084F
Signing time: Tue 11 Nov 2025 09:01:20 +0000
Manifest this update: Tue 11 Nov 2025 09:01:20 +0000
Manifest next update: Wed 12 Nov 2025 09:01:20 +0000
Files and hashes: 1: Mr0WRrlMlv0_Evxeakjpwz7LiPg.roa (hash: gsCCcQlF73dWTqboxZPlvCMCNzkEYN7/m7aejhTDik0=)
2: RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl (hash: L9Iv+sfe7gq8J5n+m/s2+ckYFmxptPu8o38xFAf/bP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f0:09:0b:cf:af:82:64:17:02:e8:7f:24:69:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=448331851b3559d3cc8299f6b020ef378e2e4b04
Validity
Not Before: Nov 11 09:01:20 2025 GMT
Not After : Nov 12 09:01:20 2025 GMT
Subject: CN=c91e5362324102e53edc86d2a316d131da5944d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7a:00:97:b2:c7:ff:2c:b1:56:23:cb:3e:89:
f4:cf:f1:0e:1f:b6:32:7f:bc:fe:65:eb:64:43:63:
71:fe:7b:ec:35:96:1f:ce:42:3d:52:3e:48:6d:fb:
68:e0:08:0e:2e:a4:19:7e:bd:37:36:2f:36:d4:c8:
16:ff:11:b9:3e:64:b1:0b:f0:66:b3:c3:58:8a:60:
1c:38:5b:d8:aa:be:f7:f1:66:eb:d8:6c:e3:fa:bc:
40:f6:29:0b:6e:43:ea:bb:f9:7e:9f:3a:4f:f5:ff:
d0:47:e5:74:02:cb:36:18:e0:46:bb:84:c6:63:65:
f1:6b:c5:f8:af:74:0a:cb:51:9d:e1:b4:f8:a8:c5:
49:12:b2:cc:1b:8c:82:30:fc:30:5e:ef:fd:53:88:
a5:bd:1f:0d:53:ff:14:39:67:e0:2e:96:9e:d7:8e:
c3:47:5e:a5:ca:f4:59:d6:64:4f:f6:40:e9:d8:35:
02:59:9d:7a:db:6c:49:a2:16:b2:ba:a2:4d:bc:ad:
6b:e1:3e:4a:d5:c4:20:5f:8a:34:8e:0b:52:2f:fb:
f9:f7:c2:d9:48:5c:40:32:75:6d:51:0f:ba:19:0d:
3a:dc:f9:2f:2e:d4:84:ca:ea:93:c5:9f:18:33:2d:
8a:37:fa:a1:29:f5:ad:cd:36:c5:93:17:39:b1:82:
14:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1E:53:62:32:41:02:E5:3E:DC:86:D2:A3:16:D1:31:DA:59:44:D7
X509v3 Authority Key Identifier:
keyid:44:83:31:85:1B:35:59:D3:CC:82:99:F6:B0:20:EF:37:8E:2E:4B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:1f:69:c4:50:c3:ce:d2:de:5f:a7:84:c4:eb:7a:ce:59:ba:
1c:95:e1:e6:32:77:07:04:43:05:77:48:82:39:2c:a8:e2:29:
31:f3:8a:b8:3a:45:5d:ac:9a:4d:37:f8:f1:32:97:ae:c3:1a:
c2:93:32:8c:b1:c5:f1:2c:8d:29:bb:7f:64:31:53:a6:13:12:
e8:92:18:12:a0:ba:86:14:c8:bb:81:b6:96:46:87:ae:b3:38:
e6:bf:90:b6:6e:65:a9:c8:85:18:5d:82:83:07:c9:84:5b:de:
78:b8:87:ad:2b:7e:cb:42:f7:4c:13:9c:48:a2:06:2c:0f:8d:
a2:76:be:19:37:19:37:59:a3:12:92:1c:6a:3a:cb:b7:12:3b:
03:7b:a8:b4:17:a5:8e:dd:5a:16:00:76:5f:e6:7e:40:d5:0b:
2c:00:0a:88:b6:ce:c9:27:39:1c:b3:b3:9c:a0:ae:14:e0:6f:
63:54:e2:7f:3c:34:4c:18:7a:1f:c0:fe:09:9c:6d:75:30:c0:
37:2d:18:18:9c:cb:0d:ed:7c:6e:48:4c:d9:df:fa:83:59:1a:
4c:b8:69:3c:89:e6:ad:07:a7:94:4a:b5:03:e5:ee:cb:40:4d:
32:ea:c9:65:7f:11:13:81:09:29:d2:f6:4c:84:f2:c2:58:fc:
fa:09:3c:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJfAJC8+vgmQXAuh/JGlEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ODMzMTg1MWIzNTU5ZDNjYzgyOTlmNmIwMjBlZjM3OGUy
ZTRiMDQwHhcNMjUxMTExMDkwMTIwWhcNMjUxMTEyMDkwMTIwWjAzMTEwLwYDVQQD
EyhjOTFlNTM2MjMyNDEwMmU1M2VkYzg2ZDJhMzE2ZDEzMWRhNTk0NGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHoAl7LH/yyxViPLPon0z/EOH7Yy
f7z+ZetkQ2Nx/nvsNZYfzkI9Uj5Ibfto4AgOLqQZfr03Ni821MgW/xG5PmSxC/Bm
s8NYimAcOFvYqr738Wbr2Gzj+rxA9ikLbkPqu/l+nzpP9f/QR+V0Ass2GOBGu4TG
Y2Xxa8X4r3QKy1Gd4bT4qMVJErLMG4yCMPwwXu/9U4ilvR8NU/8UOWfgLpae147D
R16lyvRZ1mRP9kDp2DUCWZ1622xJohayuqJNvK1r4T5K1cQgX4o0jgtSL/v598LZ
SFxAMnVtUQ+6GQ063PkvLtSEyuqTxZ8YMy2KN/qhKfWtzTbFkxc5sYIUYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMkeU2IyQQLlPtyG0qMW0THaWUTXMB8GA1UdIwQY
MBaAFESDMYUbNVnTzIKZ9rAg7zeOLksEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUklNeGhSczFXZFBNZ3BuMnNDRHZONDR1U3dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8yYTlhY2YtMmYxZS00YzljLWI4MTAt
YTA0NzgxNmQ2MjgzLzEvUklNeGhSczFXZFBNZ3BuMnNDRHZONDR1U3dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8yYTlhY2YtMmYxZS00YzljLWI4MTAtYTA0NzgxNmQ2Mjgz
LzEvUklNeGhSczFXZFBNZ3BuMnNDRHZONDR1U3dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArh9pxFDD
ztLeX6eExOt6zlm6HJXh5jJ3BwRDBXdIgjksqOIpMfOKuDpFXayaTTf48TKXrsMa
wpMyjLHF8SyNKbt/ZDFTphMS6JIYEqC6hhTIu4G2lkaHrrM45r+Qtm5lqciFGF2C
gwfJhFveeLiHrSt+y0L3TBOcSKIGLA+Nona+GTcZN1mjEpIcajrLtxI7A3uotBel
jt1aFgB2X+Z+QNULLAAKiLbOySc5HLOznKCuFOBvY1Tifzw0TBh6H8D+CZxtdTDA
Ny0YGJzLDe18bkhM2d/6g1kaTLhpPInmrQenlEq1A+Xuy0BNMurJZX8RE4EJKdL2
TITywlj8+gk8tw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:40 2025 by rpki-client