Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
File: imo0EVg-JhQzSS5QR88xxGw9LB0.mft (raw, json)
Hash identifier: PYvksawBTdhGQBvREE93L2bt8XBwBE0QMWD5J76IaRc=
Subject key identifier: 9D:4D:8C:94:A3:54:3A:FF:37:E3:2A:79:E6:C6:72:F9:67:47:70:79
Authority key identifier: 8A:6A:34:11:58:3E:26:14:33:49:2E:50:47:CF:31:C4:6C:3D:2C:1D
Certificate issuer: /CN=8a6a3411583e261433492e5047cf31c46c3d2c1d
Certificate serial: 019A4C6123B3A1DBB0F986F9A82E21608F5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 01:00:25 +0000
Manifest this update: Tue 04 Nov 2025 01:00:25 +0000
Manifest next update: Wed 05 Nov 2025 01:00:25 +0000
Files and hashes: 1: imo0EVg-JhQzSS5QR88xxGw9LB0.crl (hash: t75vaUWw1q0LsOQaskcWO09ULYwCbZ49zoPzQTLmvqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:23:b3:a1:db:b0:f9:86:f9:a8:2e:21:60:8f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6a3411583e261433492e5047cf31c46c3d2c1d
Validity
Not Before: Nov 4 01:00:25 2025 GMT
Not After : Nov 5 01:00:25 2025 GMT
Subject: CN=9d4d8c94a3543aff37e32a79e6c672f967477079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:09:e8:4d:3f:c6:ea:ff:1c:63:87:b9:87:d4:
8f:17:88:ac:5a:05:15:5b:b6:28:b6:e6:04:c0:fd:
98:68:05:e3:35:8b:65:f4:c9:cc:e4:28:a0:c1:55:
73:b3:7d:7a:f9:27:c2:29:bd:3d:c2:17:e1:d9:04:
92:fd:1c:42:0f:01:5b:a8:80:45:bc:c0:6f:99:29:
02:d5:d3:ed:72:f6:d8:3f:08:95:29:3c:00:57:fa:
06:b2:12:70:7d:8c:39:2c:ef:51:92:96:1b:d4:59:
84:10:48:53:f3:36:fe:d8:7c:37:4e:14:d3:f7:b1:
9b:cc:d1:4e:40:ab:67:9f:e4:07:c5:38:e0:db:cd:
e9:b2:5e:f2:9b:29:57:c3:67:f6:20:2f:6b:43:cd:
6e:3a:b8:3a:76:ab:32:8c:6e:bb:96:98:d7:46:fc:
c9:37:eb:3a:66:c8:18:e1:d7:3f:f6:47:e4:95:d7:
4c:03:2f:0c:b4:23:aa:0e:e2:8c:8a:c6:83:9d:c5:
4f:1e:d4:16:ab:24:0c:08:74:69:bd:0b:78:99:19:
b4:66:96:e1:ed:3b:6f:98:d6:05:b5:1f:e6:87:b7:
a1:53:bb:4c:c3:3a:2d:c9:4c:bf:d0:1e:ee:00:b3:
ad:88:a4:bf:f2:84:86:cb:14:2b:d3:79:bb:ff:d3:
fc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4D:8C:94:A3:54:3A:FF:37:E3:2A:79:E6:C6:72:F9:67:47:70:79
X509v3 Authority Key Identifier:
keyid:8A:6A:34:11:58:3E:26:14:33:49:2E:50:47:CF:31:C4:6C:3D:2C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1c:b9:93:e7:86:69:3d:97:d8:b8:80:8b:3b:54:ee:c0:d4:
df:3d:f5:c9:8b:ad:76:35:91:1b:7a:30:47:34:bf:a5:13:0a:
23:79:14:cc:7a:63:08:8b:c3:3a:27:5c:30:12:c1:e0:e8:91:
a2:9d:07:9f:79:26:c1:b5:d6:14:50:91:1e:8a:12:94:33:b4:
8a:fc:d9:8e:23:e1:5e:a5:a5:6e:b6:3a:5c:af:f2:8a:22:a6:
15:6e:9b:35:23:86:07:c0:66:8e:1f:ae:60:32:80:ba:61:0f:
c9:c2:77:22:5f:0c:d1:db:8d:e0:be:ec:7d:d0:5a:6d:40:56:
3f:b0:5e:55:81:9b:37:a8:07:25:89:7a:c1:bb:95:56:57:84:
e0:cd:53:00:48:58:0b:77:db:61:4f:ce:2b:88:5b:21:73:4e:
3a:60:f1:80:a3:11:72:d7:15:65:ed:af:df:ff:fc:a2:00:b7:
46:7f:25:be:90:c0:e4:29:ab:ea:39:be:b9:e8:f2:32:3d:c9:
08:5c:06:28:ff:c4:bd:4b:01:f0:ab:e6:ef:c4:12:ec:e6:fd:
b0:fa:10:f5:c9:0a:07:8d:8f:38:71:17:c0:cd:0f:cf:eb:32:
07:48:c9:2b:0f:2e:52:76:1a:e3:62:38:4f:1c:89:11:aa:52:
2b:fb:d4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:56 2025 by rpki-client