Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
File: i_iimBQfwvRcBy0noL8mJlXLb1o.mft (raw, json)
Hash identifier: 9aLhfxRqlMOK0PNzM/hq/jb83HDuywBk5upd0Lpng6U=
Subject key identifier: 54:F8:C6:5F:2F:43:48:96:9D:5A:C2:31:A0:4E:31:B4:3C:7D:76:41
Authority key identifier: 8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
Certificate issuer: /CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Certificate serial: 019A52636035BB75E77FCDBC81BA83893801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
Manifest number: 0214
Signing time: Wed 05 Nov 2025 05:00:35 +0000
Manifest this update: Wed 05 Nov 2025 05:00:35 +0000
Manifest next update: Thu 06 Nov 2025 05:00:35 +0000
Files and hashes: 1: i_iimBQfwvRcBy0noL8mJlXLb1o.crl (hash: 4Vv9q1UhscOj35cTLsKZSv7VNC2h6DYP2xSfZ3FE98w=)
2: w8pMwx-vyyole256lyQ0C_5-WOI.roa (hash: K+srURRGs/DsNg/JW4KWXf2QN5EAfkcbY2aU8MAMJS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:60:35:bb:75:e7:7f:cd:bc:81:ba:83:89:38:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Validity
Not Before: Nov 5 05:00:35 2025 GMT
Not After : Nov 6 05:00:35 2025 GMT
Subject: CN=54f8c65f2f4348969d5ac231a04e31b43c7d7641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4d:53:4c:9b:59:22:32:38:6a:14:ec:39:45:
31:43:52:f7:34:b2:bb:f5:0e:9e:af:a8:2a:b9:c5:
b8:2d:d5:f3:5c:13:fa:44:e8:ea:4c:ca:9e:f5:ca:
ea:0f:38:ce:9b:29:14:f4:2e:0c:4e:80:68:ad:98:
10:95:d9:2a:af:db:8a:c5:34:fc:43:7a:1f:f5:20:
ef:34:2f:89:31:c9:38:a2:51:18:45:5f:5a:56:8a:
7a:57:2f:cc:25:88:56:1f:5c:98:c6:41:db:33:5f:
59:d4:ce:28:c6:c0:57:c3:45:04:8b:1c:33:81:79:
c7:8a:58:03:4f:e8:8d:1e:04:95:4d:c1:76:fa:b2:
b7:31:44:ac:00:98:8f:f6:af:a3:0a:2f:49:46:2f:
12:c2:4c:80:ae:10:34:12:b3:99:b0:a9:03:0f:17:
bb:b9:84:92:ca:25:f8:7d:77:6a:8f:14:d5:36:4d:
d9:b7:7f:d2:31:da:81:a0:29:44:45:8c:23:6e:82:
9a:59:a4:a1:ca:02:89:a5:63:5f:5c:bf:75:bf:dd:
0e:c9:20:69:ee:00:be:19:55:fe:b3:e0:b7:e3:5a:
2f:f3:40:4f:ab:77:dc:94:6b:c3:b8:2d:10:51:a9:
d1:02:e5:f3:13:1d:9e:33:39:af:9a:08:84:67:b3:
f1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F8:C6:5F:2F:43:48:96:9D:5A:C2:31:A0:4E:31:B4:3C:7D:76:41
X509v3 Authority Key Identifier:
keyid:8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:77:88:e0:cd:ab:c9:d1:81:52:bc:98:62:1f:5d:02:ed:97:
99:c3:39:ea:73:05:f2:d2:62:5f:0f:f8:0a:71:e5:87:87:c1:
33:7e:fa:6b:a8:da:0e:9d:a6:b4:1e:65:67:f8:d5:52:b6:4f:
c7:19:4a:3e:8f:dc:8e:82:41:33:70:65:d2:b4:b9:93:13:08:
1d:5d:2e:6e:fd:57:40:c9:2d:02:81:ef:92:0a:d8:34:69:d3:
aa:18:4b:00:e7:1c:c7:c8:7b:de:d3:29:33:64:8f:d5:66:e7:
1b:ff:f1:a2:82:3a:b5:43:c6:bc:4f:8a:79:68:90:ca:0b:b6:
11:37:a0:13:b6:3f:df:3d:5b:be:74:5f:69:ad:21:ac:2e:d3:
29:9b:9e:bc:6d:49:42:84:ee:b7:4d:60:87:14:7b:03:8a:40:
eb:2b:7b:f8:20:e1:c4:d8:0d:ee:4c:67:a7:a2:ab:e0:df:95:
9a:79:63:6c:6f:2a:82:b6:82:c4:b9:6f:18:de:cc:28:c5:09:
c9:86:c0:4d:da:ab:37:1e:4e:1d:07:c2:59:13:60:1a:a8:77:
11:0d:6c:fe:71:15:d1:6f:a5:1e:75:32:27:a7:3b:89:a0:00:
43:a1:4b:c9:2d:fd:d6:8d:05:1d:3a:fb:f4:f5:8a:4d:72:4c:
45:d8:92:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:55:27 2025 by rpki-client