Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
File: IMotTLPla10plwqX_GResv1odqE.mft (raw, json)
Hash identifier: raYKjKllIEmhFJo8+RgjxVuFkYXqAYzeJutbkoIxAcs=
Subject key identifier: 84:71:7A:FA:69:19:A3:47:5F:24:5E:91:58:D9:F9:6A:94:D6:80:71
Authority key identifier: 20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
Certificate issuer: /CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Certificate serial: 019A71B795AE949D140B9DD5E041AFCF25F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
Manifest number: 1452
Signing time: Tue 11 Nov 2025 07:00:48 +0000
Manifest this update: Tue 11 Nov 2025 07:00:48 +0000
Manifest next update: Wed 12 Nov 2025 07:00:48 +0000
Files and hashes: 1: IMotTLPla10plwqX_GResv1odqE.crl (hash: DcLwOCdEV+Tylqk/ywOVROooNbqm+4U9eBgSIHE9LDY=)
2: PrisiX9cIn99AliDWgpNGUfmj_8.roa (hash: rN8Y2pR83WML1BI+RzSSfaDf/yYr4j471dxo3B4dyzY=)
3: bSEsv80VTIqhxykqIB8M44nU7N8.roa (hash: Ooz65LuwKjo+iPeOY+Zh+YXr8ijMf6WnGg7hpdHzR2I=)
4: mDAtJGSElDm2O92EFy5g2Ab4svc.roa (hash: 06wyeaq77omoVi1U61nSXVnjJJye2vIP4bDLXfzxENg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:95:ae:94:9d:14:0b:9d:d5:e0:41:af:cf:25:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Validity
Not Before: Nov 11 07:00:48 2025 GMT
Not After : Nov 12 07:00:48 2025 GMT
Subject: CN=84717afa6919a3475f245e9158d9f96a94d68071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ac:d0:5c:60:ca:a5:3b:64:b3:5d:4c:f0:81:
31:1f:72:75:c3:72:ec:f6:f4:fa:22:47:f4:54:40:
a5:f5:0a:21:1f:0f:98:a3:e9:81:d7:6a:18:b5:01:
43:a3:ef:dd:ad:88:04:5b:e2:93:6a:93:92:ae:a6:
6e:ae:f3:68:63:c3:11:1b:91:59:ce:44:63:74:de:
6b:d7:a9:7b:8b:81:89:2a:63:fb:cb:8b:ab:e0:8b:
48:f1:c0:e5:a9:95:1a:c3:0f:08:00:cf:79:95:f5:
5d:e9:94:e5:b2:92:fd:43:5b:b7:da:06:95:eb:e7:
63:01:da:b0:19:c4:cb:99:86:e2:10:28:5d:74:53:
0c:04:97:ba:54:7c:96:6b:97:d9:82:4b:1a:e8:39:
60:2c:39:86:a3:ea:bb:98:86:6c:73:c5:34:2c:8e:
66:08:cf:ec:73:d1:15:b9:fd:b7:b0:88:7f:11:e0:
55:b5:ec:ba:5a:15:48:5b:79:0e:8d:03:b8:0c:a7:
5c:87:c4:8a:3a:2a:03:7b:17:40:70:3c:3e:d4:be:
a0:68:08:cf:2b:15:98:d6:d2:df:b7:7d:78:b7:3c:
ae:9c:8a:e9:5d:c4:2a:62:65:fe:8c:ea:7c:99:f0:
fc:fe:0d:28:ce:59:16:09:a9:29:6a:9a:ec:58:87:
d4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:71:7A:FA:69:19:A3:47:5F:24:5E:91:58:D9:F9:6A:94:D6:80:71
X509v3 Authority Key Identifier:
keyid:20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:fd:b3:d2:8f:c9:47:96:1e:d9:67:77:62:d9:72:6b:4e:c2:
c3:e8:12:ec:3c:cb:a6:44:19:e4:de:6b:9f:58:48:2a:e2:c1:
bc:87:5e:fe:53:6b:b8:6c:3e:f8:dd:f6:9e:8f:81:ff:02:75:
f1:0a:a5:b7:ba:2d:d2:a9:40:d9:51:04:5a:be:4e:e1:40:11:
3b:d1:84:a2:64:2e:3a:b5:91:0d:b4:80:f7:09:c3:28:d7:72:
60:ff:9b:60:04:40:d6:84:c7:66:3b:cf:35:fe:68:47:d1:f2:
e0:af:f5:f5:89:af:93:8e:0b:4a:c9:65:f2:c2:21:4a:c8:87:
9e:29:20:a9:13:65:8a:cf:c8:9b:d1:78:90:cb:ec:55:e9:e4:
65:f5:bc:5d:06:85:75:61:d4:66:ce:5d:75:81:c4:59:79:f4:
d1:ff:0f:79:85:b4:cc:74:a3:1e:f7:1a:46:52:b2:f8:b4:d5:
7b:19:a4:55:c0:eb:09:b5:e4:ea:b1:d8:73:dd:31:e2:6b:b5:
14:e6:46:85:ba:10:17:86:3e:38:dd:17:de:1b:33:18:1e:11:
08:ce:d0:6f:08:44:ed:d3:16:55:4d:48:58:86:b1:0e:e4:6d:
1e:f5:8a:9b:be:c7:96:5f:0f:5e:dc:f4:1f:e5:6e:ef:3e:bb:
97:e8:48:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt5WulJ0UC53V4EGvzyX0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwY2EyZDRjYjNlNTZiNWQyOTk3MGE5N2ZjNjQ1ZWIyZmQ2
ODc2YTEwHhcNMjUxMTExMDcwMDQ4WhcNMjUxMTEyMDcwMDQ4WjAzMTEwLwYDVQQD
Eyg4NDcxN2FmYTY5MTlhMzQ3NWYyNDVlOTE1OGQ5Zjk2YTk0ZDY4MDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6zQXGDKpTtks11M8IExH3J1w3Ls
9vT6Ikf0VECl9QohHw+Yo+mB12oYtQFDo+/drYgEW+KTapOSrqZurvNoY8MRG5FZ
zkRjdN5r16l7i4GJKmP7y4ur4ItI8cDlqZUaww8IAM95lfVd6ZTlspL9Q1u32gaV
6+djAdqwGcTLmYbiEChddFMMBJe6VHyWa5fZgksa6DlgLDmGo+q7mIZsc8U0LI5m
CM/sc9EVuf23sIh/EeBVtey6WhVIW3kOjQO4DKdch8SKOioDexdAcDw+1L6gaAjP
KxWY1tLft314tzyunIrpXcQqYmX+jOp8mfD8/g0ozlkWCakpaprsWIfUowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRxevppGaNHXyRekVjZ+WqU1oBxMB8GA1UdIwQY
MBaAFCDKLUyz5WtdKZcKl/xkXrL9aHahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yYzI4MTctMzcwMS00NzgzLThmYmQt
ZWVjNDg4NWM0ZjhkLzEvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yYzI4MTctMzcwMS00NzgzLThmYmQtZWVjNDg4NWM0Zjhk
LzEvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlP2z0o/J
R5Ye2Wd3Ytlya07Cw+gS7DzLpkQZ5N5rn1hIKuLBvIde/lNruGw++N32no+B/wJ1
8Qqlt7ot0qlA2VEEWr5O4UARO9GEomQuOrWRDbSA9wnDKNdyYP+bYARA1oTHZjvP
Nf5oR9Hy4K/19Ymvk44LSsll8sIhSsiHnikgqRNlis/Im9F4kMvsVenkZfW8XQaF
dWHUZs5ddYHEWXn00f8PeYW0zHSjHvcaRlKy+LTVexmkVcDrCbXk6rHYc90x4mu1
FOZGhboQF4Y+ON0X3hszGB4RCM7QbwhE7dMWVU1IWIaxDuRtHvWKm77Hll8PXtz0
H+Vu7z67l+hIxg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:47 2025 by rpki-client