Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.mft
File: immKFPthpoevCmP3xlXAAfZwEoI.mft (raw, json)
Hash identifier: o9a8bYS2T63ZahqG7YLaBhZk+/n/GOEkFKSRnOXCPfs=
Subject key identifier: 11:3E:8F:0F:17:D6:40:3D:A3:D4:91:11:91:09:CD:B3:4C:EB:25:7E
Authority key identifier: 8A:69:8A:14:FB:61:A6:87:AF:0A:63:F7:C6:55:C0:01:F6:70:12:82
Certificate issuer: /CN=8a698a14fb61a687af0a63f7c655c001f6701282
Certificate serial: 019A4E18EB03D8ED2A60A93DE9D5E216A7F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/immKFPthpoevCmP3xlXAAfZwEoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.mft
Manifest number: 04A6
Signing time: Tue 04 Nov 2025 09:00:47 +0000
Manifest this update: Tue 04 Nov 2025 09:00:47 +0000
Manifest next update: Wed 05 Nov 2025 09:00:47 +0000
Files and hashes: 1: P1m93kQnbl9hCPZ7gjvBSz2QduY.roa (hash: Vw3jwkUFPb+4FTO/pTKFTwQSjK1reP+BMicWKiuZXfs=)
2: immKFPthpoevCmP3xlXAAfZwEoI.crl (hash: lqa4i5jj5ZcVR5u6VbwLpLi9qNtBYWnBFTySa6RaFoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/immKFPthpoevCmP3xlXAAfZwEoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:eb:03:d8:ed:2a:60:a9:3d:e9:d5:e2:16:a7:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a698a14fb61a687af0a63f7c655c001f6701282
Validity
Not Before: Nov 4 09:00:47 2025 GMT
Not After : Nov 5 09:00:47 2025 GMT
Subject: CN=113e8f0f17d6403da3d491119109cdb34ceb257e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:5c:62:d7:9e:bf:48:53:6e:91:45:3d:5d:
0f:0f:87:dd:50:f7:3e:24:3f:cf:4e:df:08:de:2e:
b5:ea:4a:8e:64:e6:9d:aa:66:25:b4:c2:e5:9f:17:
38:14:1c:a0:43:98:9b:45:a6:18:40:78:7d:5c:3e:
ed:ba:45:f6:34:c0:13:be:18:80:72:30:23:43:e5:
a0:7e:40:4c:82:03:c1:73:2e:14:11:08:09:13:fd:
4d:ba:6b:98:cb:ea:4c:1a:4a:1b:10:48:43:01:05:
a7:54:98:ea:d1:11:85:a0:55:f4:ce:da:6f:07:66:
f7:11:4d:e6:eb:e3:b0:38:ab:3d:52:da:0d:26:e7:
71:2f:f7:9d:aa:97:e4:f0:40:a7:89:c0:d3:24:7b:
aa:4c:66:d0:99:71:0b:77:8c:4d:03:5e:b1:0d:f2:
c4:e6:4e:ec:52:04:1b:24:ab:cf:5d:87:bb:ba:19:
4e:fd:bf:d3:53:4d:e8:a3:fa:69:16:4f:0a:f7:b8:
06:e3:79:a2:7f:b3:a3:36:12:3e:cd:fd:e9:92:d1:
aa:95:4b:e1:fb:6e:59:54:4b:60:b7:d2:54:0f:2f:
4e:25:16:97:3d:a4:a2:dc:30:98:b3:a5:65:6d:f2:
17:cd:04:73:99:76:f1:a7:ce:fc:4a:ba:23:43:5d:
53:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3E:8F:0F:17:D6:40:3D:A3:D4:91:11:91:09:CD:B3:4C:EB:25:7E
X509v3 Authority Key Identifier:
keyid:8A:69:8A:14:FB:61:A6:87:AF:0A:63:F7:C6:55:C0:01:F6:70:12:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/immKFPthpoevCmP3xlXAAfZwEoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8a:5d:b5:ed:7f:7d:a7:9f:e5:6b:e0:e7:e0:b7:2c:f9:1e:
fa:2e:9b:86:89:84:22:c6:1c:df:fe:ee:74:80:b9:b3:91:a3:
0a:f4:62:8d:ac:18:4e:ee:f9:3b:13:e5:79:d8:f3:44:30:27:
8d:fe:b1:50:ca:5e:6a:11:cb:43:27:6f:9d:44:fb:63:1a:9c:
35:52:17:0c:8f:5d:1b:19:b5:22:bd:ad:0a:34:67:da:e3:73:
9f:46:25:34:e1:69:b2:d6:20:21:75:64:6e:2b:48:4d:ec:f8:
00:b3:fc:f0:55:91:b4:0e:22:f5:9d:3d:a1:23:82:e8:a2:4f:
1f:a3:5f:64:7c:79:c0:9c:d5:ba:bf:92:f2:a0:1b:d4:40:f1:
01:24:82:24:4e:c5:85:33:82:e9:45:0c:1d:76:1d:4f:16:7c:
b3:55:0d:84:b5:3e:60:e2:77:39:e0:5e:76:e8:38:27:15:56:
d6:d1:84:a8:ba:9c:bb:ac:d7:44:c1:26:03:d0:32:31:6e:87:
08:da:c0:4d:41:5d:c8:ea:a4:06:5a:33:f1:1f:b2:d9:b6:21:
88:07:9a:92:ae:33:ff:cf:f5:93:b1:33:9e:b8:23:11:15:7e:
b2:fe:b0:04:54:e3:e3:22:ef:34:96:61:e6:31:23:17:2b:48:
76:23:29:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:45 2025 by rpki-client