Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
File: imlbOroepOZUeIxRZBRYzJlXgEA.mft (raw, json)
Hash identifier: t8ooamToIZVFpzWInQeU4XO/zx8EWXkNRlrfXBMfTwA=
Subject key identifier: BC:F8:E4:F7:70:D3:C4:28:52:A7:9B:3E:1D:3D:4A:D5:DE:AF:3F:83
Authority key identifier: 8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40
Certificate issuer: /CN=8a695b3aba1ea4e654788c51641458cc99578040
Certificate serial: 019A533F8720E849368B42E65460B7CAC138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 09:01:03 +0000
Manifest this update: Wed 05 Nov 2025 09:01:03 +0000
Manifest next update: Thu 06 Nov 2025 09:01:03 +0000
Files and hashes: 1: imlbOroepOZUeIxRZBRYzJlXgEA.crl (hash: kmpIJzHnSXqvKb3x+uy0rvYpZMTke0WuJIkF9eNLFpU=)
2: xXvpynv9RLlNuhH_ScFehFzRtz4.roa (hash: QSdQRW1EuXcu0ntbVvgh9fj5LXlqpMEhY2XBCGX6qp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:87:20:e8:49:36:8b:42:e6:54:60:b7:ca:c1:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a695b3aba1ea4e654788c51641458cc99578040
Validity
Not Before: Nov 5 09:01:03 2025 GMT
Not After : Nov 6 09:01:03 2025 GMT
Subject: CN=bcf8e4f770d3c42852a79b3e1d3d4ad5deaf3f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f9:32:d8:df:e1:32:eb:b2:46:ed:4c:3c:59:
ee:f7:d3:7f:6c:b1:04:09:0b:29:eb:e3:46:c9:bf:
76:c6:ab:1b:37:6b:6e:f4:8b:57:bd:6e:6a:36:ed:
6e:08:0f:46:28:90:2b:a0:d6:45:5c:71:5d:8c:23:
f6:ef:f4:cb:39:6f:b0:c5:55:ff:b4:39:73:aa:4d:
a0:12:8d:da:8f:e4:8b:ca:62:9e:0b:73:84:49:6d:
4c:c1:1d:e3:42:44:12:3e:ef:bb:95:96:4e:52:15:
ee:d3:00:b9:d8:ce:f6:56:f3:92:78:45:b9:83:64:
74:31:20:2c:71:b6:09:ac:75:3e:ef:5d:43:b3:a1:
cf:fc:52:4b:a5:ac:24:fe:0c:0b:36:19:a0:86:6d:
cf:2c:fc:bd:f4:03:25:bf:d6:ee:99:89:91:1d:2c:
12:d4:d0:6e:81:f2:12:b8:74:11:87:a1:09:c9:3a:
07:f7:c4:02:03:6e:48:c4:4a:e7:4a:4d:3c:37:11:
32:6d:18:4f:55:a0:a1:71:53:f2:0b:89:f1:fb:10:
96:ca:54:78:7c:87:92:1c:4d:da:71:a0:b6:4a:c3:
56:1b:1d:73:f0:b6:50:b4:9b:64:dc:60:cb:d6:0a:
25:84:24:d7:62:0c:3e:c0:a3:22:96:93:4d:50:9f:
3c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F8:E4:F7:70:D3:C4:28:52:A7:9B:3E:1D:3D:4A:D5:DE:AF:3F:83
X509v3 Authority Key Identifier:
keyid:8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:af:13:65:bc:40:d6:27:7f:34:39:d8:e3:2b:e8:97:7d:07:
65:02:ae:10:bb:07:ae:59:37:ad:86:93:32:e6:d0:46:7c:ca:
26:67:7f:ce:3b:e3:8b:5c:83:92:c1:60:3a:33:1a:85:ea:e1:
be:c7:a5:70:47:a1:e4:e0:77:dd:6a:ad:4c:cd:2f:c1:fc:9a:
9b:55:dc:61:6c:59:52:01:c5:56:e4:af:bb:8b:c2:4c:c1:44:
47:77:df:f8:62:d9:e0:52:f7:7f:e7:ac:e4:4e:d4:f9:19:63:
ac:f5:27:dd:f6:6f:f4:78:26:bf:0a:6d:2c:fb:65:50:a8:80:
11:4a:86:16:42:f0:ae:84:b9:4b:25:3f:96:66:8f:af:0c:03:
b3:fa:67:72:67:99:c7:36:07:ce:50:06:79:6c:fe:87:d0:79:
11:86:e1:ef:7c:b6:c5:dd:27:d9:11:40:c7:9d:31:af:a4:ef:
04:5a:f3:6c:78:c0:f2:ae:61:8a:03:01:e4:fa:29:5a:ab:fc:
67:b2:5d:d6:d4:b4:57:8a:8e:09:ce:77:92:83:d6:a5:18:c2:
99:9e:51:0c:a4:8c:bb:92:e6:59:d1:f8:f7:5a:d4:19:76:06:
13:04:02:09:13:5b:d8:43:7b:35:d3:6a:7f:b0:3c:89:8e:13:
a5:52:12:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:23:16 2025 by rpki-client