Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.mft
File: IMjVw3OmvzurIpOUNguG0Alq7L0.mft (raw, json)
Hash identifier: gvh/w0kYU9RCl7keObQoyfXOXA0RUP+aHzIn06Z08Io=
Subject key identifier: 3A:84:7B:2D:8E:E2:4C:97:AB:12:BB:18:41:7D:51:BA:81:42:B3:F6
Authority key identifier: 20:C8:D5:C3:73:A6:BF:3B:AB:22:93:94:36:0B:86:D0:09:6A:EC:BD
Certificate issuer: /CN=20c8d5c373a6bf3bab229394360b86d0096aecbd
Certificate serial: 019894ED8F9D72E5156A6D029E5BDE7B01CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMjVw3OmvzurIpOUNguG0Alq7L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.mft
Manifest number: 11C3
Signing time: Sun 10 Aug 2025 17:00:53 +0000
Manifest this update: Sun 10 Aug 2025 17:00:53 +0000
Manifest next update: Mon 11 Aug 2025 17:00:53 +0000
Files and hashes: 1: IMjVw3OmvzurIpOUNguG0Alq7L0.crl (hash: 0xOKbtvK16JtZ4DQhh38viA8ymLDk5HiRaE+oEX+qEE=)
2: eKykDDSSUelkgfwH3TO0n13mPZk.roa (hash: P9dt2Lrz0okP2zrUj3Cql2lI4c4A2LE13LjuP2FhidE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMjVw3OmvzurIpOUNguG0Alq7L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:ed:8f:9d:72:e5:15:6a:6d:02:9e:5b:de:7b:01:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c8d5c373a6bf3bab229394360b86d0096aecbd
Validity
Not Before: Aug 10 17:00:53 2025 GMT
Not After : Aug 11 17:00:53 2025 GMT
Subject: CN=3a847b2d8ee24c97ab12bb18417d51ba8142b3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b6:4e:6f:32:04:84:6e:4f:99:f8:a3:12:74:
8f:a2:57:2d:b1:c4:68:7d:de:2b:7d:99:14:c2:35:
b9:8e:c6:b2:33:f7:5c:b7:3c:e7:40:d5:ee:d3:75:
f5:a4:fb:04:33:d3:05:e2:e4:3b:21:4a:4b:bf:f0:
c6:1a:6a:49:4f:e6:49:1d:0f:2d:03:f7:4b:79:8a:
68:43:2e:76:ab:cc:55:3f:88:5e:8c:90:6d:5a:8c:
99:7e:98:33:e7:fe:e8:fa:c4:c5:d8:08:38:a0:7e:
b7:fe:34:03:90:6f:9d:ae:09:fe:3a:11:18:11:d1:
a3:94:10:76:25:2a:87:76:e6:a8:79:fd:f9:fc:3b:
d9:4c:16:7c:0d:8b:0d:f8:73:88:7c:c9:28:be:26:
14:e4:ec:49:e4:d3:c5:f5:cc:ca:19:4a:95:d7:45:
3f:27:50:c7:32:15:23:4b:57:fb:81:4b:05:c6:9a:
81:15:d7:ff:66:79:76:ce:1d:87:c7:a2:ed:8b:94:
28:25:23:0e:29:8c:95:6d:17:4a:24:7c:df:94:75:
cb:11:93:9a:41:3e:a7:44:85:8c:e5:47:67:c3:30:
6f:6c:70:f7:73:91:eb:4c:e2:da:30:f3:60:d4:39:
59:60:65:26:77:d6:de:75:6c:49:f2:7a:8c:d8:d5:
70:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:84:7B:2D:8E:E2:4C:97:AB:12:BB:18:41:7D:51:BA:81:42:B3:F6
X509v3 Authority Key Identifier:
keyid:20:C8:D5:C3:73:A6:BF:3B:AB:22:93:94:36:0B:86:D0:09:6A:EC:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMjVw3OmvzurIpOUNguG0Alq7L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8e9855-5989-486e-9436-50a7c92591d0/1/IMjVw3OmvzurIpOUNguG0Alq7L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:d7:6b:fd:69:f3:a6:29:9c:e6:b5:99:73:8f:7a:8e:52:73:
92:9d:60:32:dd:94:e2:2c:9e:0c:df:48:67:1c:1c:96:31:71:
30:aa:b6:6a:c8:3a:a0:a8:40:44:c1:5a:33:89:56:41:16:25:
70:36:39:0f:1b:4c:3a:7c:0c:34:2a:42:f1:e6:60:4a:ec:16:
e4:f6:9e:fa:c5:cf:98:20:e9:ba:2b:11:25:3b:69:e6:0d:5d:
fc:cc:4d:b5:95:ce:7c:b6:d2:54:27:04:d2:6f:5e:3a:89:dd:
8f:ea:f2:2c:2d:96:0d:bc:70:9a:5c:a4:ae:e6:51:b7:aa:b1:
f9:16:8b:c1:e7:95:3e:cf:ca:1b:47:0f:7e:31:10:7e:ba:03:
b1:db:83:47:58:e8:f8:7d:f4:bb:49:ae:fd:7d:72:b2:8c:93:
2c:1f:a7:03:f9:5a:81:1d:9d:71:1d:79:04:7b:94:30:43:68:
26:a3:6c:61:07:7a:0b:10:4f:78:8c:56:85:0c:0b:f2:ac:60:
60:11:eb:9c:28:a2:10:37:7a:20:a6:63:4f:1b:c1:93:04:2d:
de:6e:e0:55:e1:d7:72:d5:fd:2e:fa:fe:b9:0c:9a:29:fa:39:
f5:53:8c:75:46:b8:61:41:92:de:05:42:3f:5a:9e:ae:46:4e:
d2:38:3f:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiU7Y+dcuUVam0CnlveewHNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYzhkNWMzNzNhNmJmM2JhYjIyOTM5NDM2MGI4NmQwMDk2
YWVjYmQwHhcNMjUwODEwMTcwMDUzWhcNMjUwODExMTcwMDUzWjAzMTEwLwYDVQQD
EygzYTg0N2IyZDhlZTI0Yzk3YWIxMmJiMTg0MTdkNTFiYTgxNDJiM2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLZObzIEhG5PmfijEnSPolctscRo
fd4rfZkUwjW5jsayM/dctzznQNXu03X1pPsEM9MF4uQ7IUpLv/DGGmpJT+ZJHQ8t
A/dLeYpoQy52q8xVP4hejJBtWoyZfpgz5/7o+sTF2Ag4oH63/jQDkG+drgn+OhEY
EdGjlBB2JSqHduaoef35/DvZTBZ8DYsN+HOIfMkoviYU5OxJ5NPF9czKGUqV10U/
J1DHMhUjS1f7gUsFxpqBFdf/Znl2zh2Hx6Lti5QoJSMOKYyVbRdKJHzflHXLEZOa
QT6nRIWM5UdnwzBvbHD3c5HrTOLaMPNg1DlZYGUmd9bedWxJ8nqM2NVwzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqEey2O4kyXqxK7GEF9UbqBQrP2MB8GA1UdIwQY
MBaAFCDI1cNzpr87qyKTlDYLhtAJauy9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU1qVnczT212enVySXBPVU5ndUcwQWxxN0wwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84ZTk4NTUtNTk4OS00ODZlLTk0MzYt
NTBhN2M5MjU5MWQwLzEvSU1qVnczT212enVySXBPVU5ndUcwQWxxN0wwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy84ZTk4NTUtNTk4OS00ODZlLTk0MzYtNTBhN2M5MjU5MWQw
LzEvSU1qVnczT212enVySXBPVU5ndUcwQWxxN0wwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzNdr/Wnz
pimc5rWZc496jlJzkp1gMt2U4iyeDN9IZxwcljFxMKq2asg6oKhARMFaM4lWQRYl
cDY5DxtMOnwMNCpC8eZgSuwW5Pae+sXPmCDpuisRJTtp5g1d/MxNtZXOfLbSVCcE
0m9eOondj+ryLC2WDbxwmlykruZRt6qx+RaLweeVPs/KG0cPfjEQfroDsduDR1jo
+H30u0mu/X1ysoyTLB+nA/lagR2dcR15BHuUMENoJqNsYQd6CxBPeIxWhQwL8qxg
YBHrnCiiEDd6IKZjTxvBkwQt3m7gVeHXctX9Lvr+uQyaKfo59VOMdUa4YUGS3gVC
P1qerkZO0jg/3w==
-----END CERTIFICATE-----
Generated at Mon Aug 11 01:45:08 2025 by rpki-client