Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
File: imauQAwtaBlg6FU_yzFXi42c37Y.mft (raw, json)
Hash identifier: nkuLLVDa2crWbceRcst8EIGcUU1YDsrr4q30x4ghIPQ=
Subject key identifier: 00:39:16:81:D3:CD:42:EE:A6:48:7C:A3:E5:BC:32:7E:65:E5:FA:62
Authority key identifier: 8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6
Certificate issuer: /CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6
Certificate serial: 019A4EF44131668DE71EB651B6CABED93CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
Manifest number: 033C
Signing time: Tue 04 Nov 2025 13:00:21 +0000
Manifest this update: Tue 04 Nov 2025 13:00:21 +0000
Manifest next update: Wed 05 Nov 2025 13:00:21 +0000
Files and hashes: 1: PuzSFCpssVQvjZAtpt-uOtGr7hY.roa (hash: SPN1lNtFS0koIE09mFP53lEypWhv8lUH53A6TRYkysY=)
2: imauQAwtaBlg6FU_yzFXi42c37Y.crl (hash: 9Vheb21sC2kBupZjc8n3LWdaBosvzH1Q9gsI/IvGGT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:41:31:66:8d:e7:1e:b6:51:b6:ca:be:d9:3c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6
Validity
Not Before: Nov 4 13:00:21 2025 GMT
Not After : Nov 5 13:00:21 2025 GMT
Subject: CN=00391681d3cd42eea6487ca3e5bc327e65e5fa62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:88:3a:5e:81:21:0b:41:7e:83:3b:2b:b6:a6:
db:2d:a9:9a:28:54:97:bc:25:c8:a5:36:ea:20:e9:
53:1e:1f:0f:9d:c4:8a:d6:0e:c1:e3:81:68:7a:3a:
d5:42:dd:69:74:bd:6f:37:4d:b4:33:c6:95:8a:90:
c3:ed:2d:0b:8d:b6:06:cb:dc:89:e0:e3:7f:94:28:
62:7f:22:c8:60:ec:ec:c1:2f:89:a3:f3:e3:90:4c:
b0:01:16:f6:85:a6:13:b0:c1:b7:e2:e9:4a:97:f9:
e5:95:64:fe:0a:0f:f3:25:91:db:7e:fe:2b:4c:cd:
18:ab:c6:1b:f5:9a:a8:78:66:95:bf:8a:1f:84:52:
ed:c5:86:ad:de:76:2e:3c:c1:62:0d:15:50:ee:f2:
50:e1:6f:43:5c:09:65:44:1d:e5:79:2a:99:7c:31:
5f:42:c3:4b:ff:33:59:6d:62:0b:f7:51:d5:5e:d6:
68:51:3e:d0:00:bc:15:5a:ea:b2:d3:ba:48:3f:95:
03:3a:0b:2c:21:16:7c:c4:c7:90:46:5c:89:34:43:
af:2c:9d:61:81:90:26:1d:60:ce:5a:c8:e2:53:04:
c0:cf:6a:2c:34:a2:e5:0b:cc:f1:7e:fb:b0:f3:6e:
de:f2:e5:78:db:63:2b:a9:5a:50:1e:aa:67:e1:d6:
6f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:39:16:81:D3:CD:42:EE:A6:48:7C:A3:E5:BC:32:7E:65:E5:FA:62
X509v3 Authority Key Identifier:
keyid:8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ef:63:ec:6d:10:24:5d:31:e4:df:b7:be:ba:57:53:d1:3e:
ab:e3:eb:cf:59:c0:34:a0:01:fc:60:34:3d:22:75:01:59:e8:
db:33:62:43:a0:1e:a3:1e:ae:d9:6c:e4:96:a4:37:07:d0:ff:
16:90:5b:32:69:ec:0d:47:8d:90:1a:ce:b4:64:73:7a:a7:47:
16:46:3b:a7:f5:d3:d8:4b:d7:3c:34:07:fb:eb:0a:b6:72:1c:
e7:c7:57:9d:a2:83:e6:ce:66:07:62:03:aa:f0:6d:0f:6d:df:
fb:f5:db:3b:6b:da:df:00:ac:b8:85:96:56:18:62:01:6e:c2:
08:92:67:cf:4c:ea:54:55:95:15:c2:e3:93:c9:2a:d5:eb:04:
9c:94:71:9f:8c:d1:cd:9e:ea:a9:d0:a1:04:83:5c:4e:5d:c9:
4d:f1:b1:ba:e8:c8:08:51:99:16:46:2d:34:2f:a5:e8:44:a6:
4f:7e:fc:2a:4a:df:59:4f:91:66:f5:45:75:7c:a8:cd:9c:b6:
85:24:2d:73:14:2c:75:05:bb:00:72:40:90:1c:a7:76:a4:ef:
07:9a:20:92:11:55:3e:81:72:0e:c8:64:10:f6:5e:68:21:80:
a3:e1:b2:30:03:f8:29:f7:05:7c:6e:cf:01:ac:f7:dc:b0:49:
17:e3:13:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9EExZo3nHrZRtsq+2TzaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNjZhZTQwMGMyZDY4MTk2MGU4NTUzZmNiMzE1NzhiOGQ5
Y2RmYjYwHhcNMjUxMTA0MTMwMDIxWhcNMjUxMTA1MTMwMDIxWjAzMTEwLwYDVQQD
EygwMDM5MTY4MWQzY2Q0MmVlYTY0ODdjYTNlNWJjMzI3ZTY1ZTVmYTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIg6XoEhC0F+gzsrtqbbLamaKFSX
vCXIpTbqIOlTHh8PncSK1g7B44FoejrVQt1pdL1vN020M8aVipDD7S0LjbYGy9yJ
4ON/lChifyLIYOzswS+Jo/PjkEywARb2haYTsMG34ulKl/nllWT+Cg/zJZHbfv4r
TM0Yq8Yb9ZqoeGaVv4ofhFLtxYat3nYuPMFiDRVQ7vJQ4W9DXAllRB3leSqZfDFf
QsNL/zNZbWIL91HVXtZoUT7QALwVWuqy07pIP5UDOgssIRZ8xMeQRlyJNEOvLJ1h
gZAmHWDOWsjiUwTAz2osNKLlC8zxfvuw827e8uV422MrqVpQHqpn4dZv0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAA5FoHTzULupkh8o+W8Mn5l5fpiMB8GA1UdIwQY
MBaAFIpmrkAMLWgZYOhVP8sxV4uNnN+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jMzNhZjYtMzZhOS00N2IwLTgzZTct
OGJiYzNhOWU0ZjQzLzEvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jMzNhZjYtMzZhOS00N2IwLTgzZTctOGJiYzNhOWU0ZjQz
LzEvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABO9j7G0Q
JF0x5N+3vrpXU9E+q+Prz1nANKAB/GA0PSJ1AVno2zNiQ6Aeox6u2WzklqQ3B9D/
FpBbMmnsDUeNkBrOtGRzeqdHFkY7p/XT2EvXPDQH++sKtnIc58dXnaKD5s5mB2ID
qvBtD23f+/XbO2va3wCsuIWWVhhiAW7CCJJnz0zqVFWVFcLjk8kq1esEnJRxn4zR
zZ7qqdChBINcTl3JTfGxuujICFGZFkYtNC+l6ESmT378KkrfWU+RZvVFdXyozZy2
hSQtcxQsdQW7AHJAkByndqTvB5ogkhFVPoFyDshkEPZeaCGAo+GyMAP4KfcFfG7P
Aaz33LBJF+MTqQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:22 2025 by rpki-client