Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
File: imBgNTuY9TMW0CL6AdKZ11__ItY.mft (raw, json)
Hash identifier: oxDRTHBsmje5GJzWrYxocEoTu4d6SmYfTcIAVSNUYzw=
Subject key identifier: 3A:F7:BB:CF:31:B2:57:56:22:BE:7B:AB:13:EC:35:66:D5:A8:44:DB
Authority key identifier: 8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
Certificate issuer: /CN=8a6060353b98f53316d022fa01d299d75fff22d6
Certificate serial: 019A72264898AEBB78D3D87D546A87AA1C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
Manifest number: 044F
Signing time: Tue 11 Nov 2025 09:01:42 +0000
Manifest this update: Tue 11 Nov 2025 09:01:42 +0000
Manifest next update: Wed 12 Nov 2025 09:01:42 +0000
Files and hashes: 1: 053VQxunxAeUFWyp53gx-beqwOw.roa (hash: 7JicntomGJy1FdKv/+65cawmZt1C37Ox3QqgLF1dC6U=)
2: imBgNTuY9TMW0CL6AdKZ11__ItY.crl (hash: BRcZfbAqIBFOmYXQEgtHGOOHrd+25YvAp1Kh6/dplUQ=)
3: sY_8uI_Vy_Kyk6ImGlPdHmVKVYk.roa (hash: NexMNxJOVKLfI4XsOD08LdcHHjE/wZ9FYtwH9p7yFUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:48:98:ae:bb:78:d3:d8:7d:54:6a:87:aa:1c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6060353b98f53316d022fa01d299d75fff22d6
Validity
Not Before: Nov 11 09:01:42 2025 GMT
Not After : Nov 12 09:01:42 2025 GMT
Subject: CN=3af7bbcf31b2575622be7bab13ec3566d5a844db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7d:bf:d8:b9:38:90:72:f1:27:32:c9:7d:ee:
09:ef:80:77:01:51:7d:66:a3:76:24:ca:2f:ce:33:
fb:51:9a:c9:ae:fa:f9:f3:2f:f0:cc:02:37:87:69:
11:3a:3f:43:eb:1e:b9:e5:7e:7a:16:36:ce:71:1d:
15:e2:01:16:a1:c4:78:cd:13:24:31:6c:cb:1a:6f:
25:2e:ff:5c:d0:43:0e:84:d2:18:ff:32:2a:50:df:
9d:9e:bc:c1:c7:34:8c:24:60:89:a0:b2:c6:86:95:
fd:be:a1:76:71:5a:d5:b8:1e:5f:06:7c:64:23:43:
0a:4f:84:20:a3:07:00:92:f7:87:8f:98:57:de:0d:
f6:b8:82:20:ad:a7:b0:11:f6:f3:dc:25:29:2f:94:
f0:8f:ee:56:1e:c8:e4:ee:b6:56:ac:c6:93:74:9a:
f2:d5:34:31:42:2c:ae:c8:43:4a:77:72:fc:44:01:
e8:62:77:da:a5:5d:7e:33:b1:9e:41:81:9c:6d:75:
d2:59:d9:62:be:9e:22:3e:cd:09:5d:c7:d9:2b:ae:
04:df:a4:a2:d7:7a:c4:d0:34:cb:89:19:5b:75:a3:
7c:47:c9:18:ac:88:03:fe:5d:e6:0e:cc:d0:3e:19:
7e:c1:d4:66:5f:dc:9e:37:bc:f0:94:86:c7:6d:be:
c9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F7:BB:CF:31:B2:57:56:22:BE:7B:AB:13:EC:35:66:D5:A8:44:DB
X509v3 Authority Key Identifier:
keyid:8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a3:fb:f5:ab:51:fe:55:54:d0:34:a0:73:e9:e0:b7:23:a7:
c2:e3:02:da:70:6e:20:da:e8:8e:62:de:1b:89:3b:aa:0f:02:
79:99:4d:e3:35:68:c4:c5:4f:d1:27:a5:19:09:cd:d8:19:f5:
1a:7d:9a:78:53:5b:25:e6:ad:a5:07:48:d7:82:fd:21:20:b1:
16:55:2a:70:33:c5:2e:ae:d1:af:6a:24:7f:d2:ac:ff:52:5e:
15:ea:e9:c8:ba:64:c0:bb:8e:cd:95:9c:3e:34:24:95:e0:14:
52:47:99:5d:18:58:03:8a:5c:0c:f1:db:06:87:6c:33:6b:87:
fc:64:31:9b:52:6f:ed:57:65:ce:0a:b8:71:e2:4d:d9:06:f2:
2d:01:9e:6b:a4:08:2d:f5:a8:ad:0f:ff:a8:c3:1e:49:52:c6:
63:df:68:32:37:d6:e3:45:e1:95:53:2c:87:9e:30:10:5f:e2:
a2:20:0d:5a:b5:cb:bc:6c:54:64:97:f3:40:42:2b:fd:1d:41:
78:00:3b:e0:cf:31:62:db:78:f5:43:7d:d0:0c:6e:f7:2e:a7:
d6:63:d5:25:e3:35:9f:12:11:2d:4d:e4:78:d1:d8:a2:d3:25:
3d:35:f8:36:7e:e9:63:9b:9f:32:4c:a2:da:73:4c:e9:b3:d0:
8e:c3:28:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:37 2025 by rpki-client