Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
File: cimwOc-KrxQdbm1hbnwWkInLyzI.mft (raw, json)
Hash identifier: ofBsTMvOXweA28VyN3efMOhcoDANhrkB/uUi3RmCAyc=
Subject key identifier: 83:BF:40:FF:33:77:13:3B:F2:59:5D:13:64:25:A2:57:BC:63:3B:B4
Authority key identifier: 72:29:B0:39:CF:8A:AF:14:1D:6E:6D:61:6E:7C:16:90:89:CB:CB:32
Certificate issuer: /CN=7229b039cf8aaf141d6e6d616e7c169089cbcb32
Certificate serial: 019A51874E2FBEFAC9D51F25B5AF160BBD2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
Manifest number: 0E4B
Signing time: Wed 05 Nov 2025 01:00:12 +0000
Manifest this update: Wed 05 Nov 2025 01:00:12 +0000
Manifest next update: Thu 06 Nov 2025 01:00:12 +0000
Files and hashes: 1: _11c4KnryngFBZ3LrSwCjXVWAnI.roa (hash: 4suX3JVW+dbra41XqoLSgaNnHC7+X6k6GS1R8JLgxL8=)
2: cimwOc-KrxQdbm1hbnwWkInLyzI.crl (hash: ymqUF+zQN5RjE+uUvN5k6Nk287RFb4QrH4NJg0zv3gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:4e:2f:be:fa:c9:d5:1f:25:b5:af:16:0b:bd:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7229b039cf8aaf141d6e6d616e7c169089cbcb32
Validity
Not Before: Nov 5 01:00:12 2025 GMT
Not After : Nov 6 01:00:12 2025 GMT
Subject: CN=83bf40ff3377133bf2595d136425a257bc633bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7c:3d:6e:a9:85:1d:73:2b:5e:df:09:57:dc:
55:ad:b9:79:14:ac:64:6c:45:8a:32:1c:1e:80:1c:
2d:bd:5d:f6:46:6d:74:52:c4:92:c9:45:bb:4a:20:
20:43:f7:04:e0:f7:c3:e9:6e:e1:e2:c9:24:08:66:
7a:c5:97:88:d2:77:88:15:55:9c:29:07:36:e6:aa:
34:93:61:85:81:dc:0b:e7:a3:58:0a:d3:e4:0a:3e:
db:5a:54:0f:21:d5:11:33:3e:18:2e:5b:59:c8:0d:
2a:7a:5a:da:fd:eb:3c:e8:f1:88:2f:cc:fa:04:93:
f1:46:24:36:60:80:bd:be:6f:2a:96:2c:71:79:fb:
12:dd:5f:c2:d6:45:4f:47:df:a2:c0:b4:dd:17:93:
41:5c:a2:44:14:df:e6:58:42:c4:af:25:70:77:44:
5e:5b:31:fd:8c:d3:69:c6:77:f6:f7:4d:ad:66:26:
f6:1d:20:91:73:f9:b1:7e:de:e0:4b:45:39:a9:34:
b6:dd:bc:cd:13:b6:fb:06:bb:e8:f7:41:74:b5:91:
9d:01:7c:95:a1:01:e2:78:ff:27:9b:82:43:c8:bc:
ff:14:a5:66:af:68:90:9b:af:53:66:8b:1a:b8:c2:
fe:e4:3f:85:e0:e2:91:f8:52:d2:6d:36:83:09:8a:
9b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BF:40:FF:33:77:13:3B:F2:59:5D:13:64:25:A2:57:BC:63:3B:B4
X509v3 Authority Key Identifier:
keyid:72:29:B0:39:CF:8A:AF:14:1D:6E:6D:61:6E:7C:16:90:89:CB:CB:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ce:53:de:30:c0:ac:38:87:69:22:76:f2:67:76:09:29:e4:
78:21:3c:4e:4a:2c:37:05:36:d7:f9:9d:b1:73:aa:9d:70:82:
71:93:fe:72:5b:a1:d5:5b:33:82:5a:45:92:3e:f8:9f:44:96:
62:a3:a7:1e:8a:03:f4:4e:4f:fa:7a:f3:51:3e:62:6e:ed:ae:
9b:3a:e0:0d:4c:53:30:8e:e0:cc:43:44:ed:23:6b:93:bf:29:
5c:1a:c4:ac:63:83:8c:ea:22:15:dd:9b:c1:b3:9f:29:6a:7d:
86:da:f5:e0:a1:d3:35:f9:2a:50:03:44:cf:bd:26:c3:74:33:
89:fa:55:df:2f:ed:ad:06:1e:14:14:72:4a:8c:dc:a2:ea:8c:
8f:34:ac:06:d6:f4:be:27:7a:ff:f3:72:fc:0a:30:e2:1f:9c:
03:e8:8f:81:d5:d7:d5:a5:d9:05:65:db:b7:c2:69:37:52:df:
6a:84:63:c1:21:5a:7a:8e:05:22:69:26:ee:ab:be:e2:4b:48:
fc:b2:13:a7:3d:ec:0a:9b:44:62:0e:54:c2:c8:e2:4e:7b:77:
a7:9d:11:bc:a2:96:77:0f:30:18:bf:32:d8:3e:66:1c:8b:d5:
04:e4:3c:d1:65:42:99:49:43:ca:6e:58:1b:16:cb:4e:69:a6:
2c:3a:27:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:14:20 2025 by rpki-client