Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
File: ImTYqhh4-dwUJNL9reQDnhINWxE.mft (raw, json)
Hash identifier: 6IbGBV8PCgFeBzT7WkBJeKtWS6wlYoOG6LhYBqXLPZY=
Subject key identifier: A2:E4:49:A7:35:A8:A5:6E:6D:4B:AA:7A:E2:19:21:21:A6:84:5E:F6
Authority key identifier: 22:64:D8:AA:18:78:F9:DC:14:24:D2:FD:AD:E4:03:9E:12:0D:5B:11
Certificate issuer: /CN=2264d8aa1878f9dc1424d2fdade4039e120d5b11
Certificate serial: 0198880E13BDD02E65EAB0235B83EBA53407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
Manifest number: 01FE
Signing time: Fri 08 Aug 2025 05:01:20 +0000
Manifest this update: Fri 08 Aug 2025 05:01:20 +0000
Manifest next update: Sat 09 Aug 2025 05:01:20 +0000
Files and hashes: 1: FqDrfbDtI4Hs58fMgjUv81Cu_7g.roa (hash: EJb3Kv4NZ5uykz2bapaHUVNVx3Yhwe8+JKhWBXNnXgc=)
2: ImTYqhh4-dwUJNL9reQDnhINWxE.crl (hash: 8Qhj4RhRf9tnhDR/gvSdEm9UYekLGK0BmoC4tQISGYM=)
3: ik9pAs-oXBS0l0utPLQdJhXZ5X0.roa (hash: LmKUQUveU3bNm/doGhpBXkqduAWf1pf1v3+L9U63Su8=)
4: uc150UpyVmM0lf0Kf7nSAGa2PLU.roa (hash: z6Z1141CZgjCa4I7tNTWjh0/Dh9WixbtG/HNloenv6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:0e:13:bd:d0:2e:65:ea:b0:23:5b:83:eb:a5:34:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2264d8aa1878f9dc1424d2fdade4039e120d5b11
Validity
Not Before: Aug 8 05:01:20 2025 GMT
Not After : Aug 9 05:01:20 2025 GMT
Subject: CN=a2e449a735a8a56e6d4baa7ae2192121a6845ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:88:87:a2:9d:0c:7d:a6:10:e8:19:be:40:3f:
56:9c:9d:06:3d:2a:7f:0f:b9:cc:17:32:07:30:25:
bb:88:d7:40:ba:c0:0f:3b:8f:71:65:9d:47:84:d6:
47:08:e4:bc:45:31:0d:53:b3:c7:29:01:8d:39:59:
94:75:9b:19:c1:5a:05:e0:7c:4f:3e:49:51:bd:0e:
d0:31:b2:ba:9f:89:11:42:87:dd:59:9c:da:65:01:
88:f7:3e:4a:31:2c:78:14:c1:bd:1f:93:43:94:82:
73:e6:70:fd:cc:7b:04:05:d2:9f:61:e5:9f:64:02:
23:d4:04:66:5e:ae:4c:ee:09:00:59:39:9c:e5:67:
e3:28:c8:ad:7f:63:9b:21:78:07:a1:43:4e:cc:63:
64:45:63:4e:ae:ee:5e:4d:59:ed:21:82:23:89:3f:
e7:23:01:2d:fa:7d:03:a2:d1:08:9d:e6:9c:8d:74:
4e:71:45:c3:c9:e8:35:e1:56:e0:01:0d:c3:9f:8c:
05:2d:a8:df:04:83:8f:8f:18:4c:49:d2:87:76:88:
dc:41:a6:c6:bd:ac:ed:0c:d1:5b:f0:1f:52:c1:aa:
7b:65:9a:99:bc:18:f6:8c:92:a2:76:ca:1b:9f:83:
49:26:8e:76:c4:c5:bf:a9:d7:70:15:67:42:c4:39:
77:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E4:49:A7:35:A8:A5:6E:6D:4B:AA:7A:E2:19:21:21:A6:84:5E:F6
X509v3 Authority Key Identifier:
keyid:22:64:D8:AA:18:78:F9:DC:14:24:D2:FD:AD:E4:03:9E:12:0D:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:5c:ef:eb:a3:1b:de:27:fc:0e:5d:f7:f4:3a:8a:c1:eb:1a:
9f:a2:27:c6:18:6d:3c:e2:74:2f:08:8e:96:52:89:47:04:ae:
13:0d:e6:9e:39:87:57:ee:19:32:ee:ba:e6:a7:5a:4b:96:22:
93:3e:12:a9:1f:fd:d3:bb:e9:09:64:87:0c:ea:47:3f:56:72:
d7:80:22:76:65:c4:90:e4:c4:e4:d8:bc:87:b5:8d:5a:75:73:
cb:7e:5d:db:f9:b1:fb:38:8e:fc:69:2e:a4:64:0f:5f:36:2b:
aa:50:28:27:e1:01:1f:a2:8a:0d:9b:bd:bc:34:cd:f5:9e:3e:
95:30:5d:a5:e4:6b:2e:73:25:a0:1c:4e:2b:0b:6e:0e:3a:84:
f8:2b:28:ac:13:84:8c:ee:a1:09:a8:5c:86:cb:87:31:af:8e:
da:fd:29:90:c4:3d:dc:35:fc:e9:ca:a1:d6:aa:bd:b4:8c:02:
54:b0:63:9d:1f:f5:32:64:c9:7a:18:29:cf:09:ea:ba:af:93:
e4:a4:c7:fc:95:5e:fa:1d:04:0b:03:e3:fe:4c:bb:dc:a2:76:
7a:bb:fc:74:3d:0c:a5:60:8d:cd:e5:00:07:c4:6f:af:d6:13:
2c:72:d1:00:6f:dc:7d:a1:9a:b2:7d:51:7b:2f:41:30:ee:af:
12:d5:80:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiIDhO90C5l6rAjW4PrpTQHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyNjRkOGFhMTg3OGY5ZGMxNDI0ZDJmZGFkZTQwMzllMTIw
ZDViMTEwHhcNMjUwODA4MDUwMTIwWhcNMjUwODA5MDUwMTIwWjAzMTEwLwYDVQQD
EyhhMmU0NDlhNzM1YThhNTZlNmQ0YmFhN2FlMjE5MjEyMWE2ODQ1ZWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYiHop0MfaYQ6Bm+QD9WnJ0GPSp/
D7nMFzIHMCW7iNdAusAPO49xZZ1HhNZHCOS8RTENU7PHKQGNOVmUdZsZwVoF4HxP
PklRvQ7QMbK6n4kRQofdWZzaZQGI9z5KMSx4FMG9H5NDlIJz5nD9zHsEBdKfYeWf
ZAIj1ARmXq5M7gkAWTmc5WfjKMitf2ObIXgHoUNOzGNkRWNOru5eTVntIYIjiT/n
IwEt+n0DotEIneacjXROcUXDyeg14VbgAQ3Dn4wFLajfBIOPjxhMSdKHdojcQabG
vaztDNFb8B9Swap7ZZqZvBj2jJKidsobn4NJJo52xMW/qddwFWdCxDl3ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLkSac1qKVubUuqeuIZISGmhF72MB8GA1UdIwQY
MBaAFCJk2KoYePncFCTS/a3kA54SDVsRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSW1UWXFoaDQtZHdVSk5MOXJlUURuaElOV3hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hYzlhNGYtNTc3NC00ZWNjLTljMWQt
Yzk5OGYwMjkyMTM1LzEvSW1UWXFoaDQtZHdVSk5MOXJlUURuaElOV3hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9hYzlhNGYtNTc3NC00ZWNjLTljMWQtYzk5OGYwMjkyMTM1
LzEvSW1UWXFoaDQtZHdVSk5MOXJlUURuaElOV3hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA11zv66Mb
3if8Dl339DqKwesan6InxhhtPOJ0LwiOllKJRwSuEw3mnjmHV+4ZMu665qdaS5Yi
kz4SqR/907vpCWSHDOpHP1Zy14AidmXEkOTE5Ni8h7WNWnVzy35d2/mx+ziO/Gku
pGQPXzYrqlAoJ+EBH6KKDZu9vDTN9Z4+lTBdpeRrLnMloBxOKwtuDjqE+CsorBOE
jO6hCahchsuHMa+O2v0pkMQ93DX86cqh1qq9tIwCVLBjnR/1MmTJehgpzwnquq+T
5KTH/JVe+h0ECwPj/ky73KJ2erv8dD0MpWCNzeUAB8Rvr9YTLHLRAG/cfaGasn1R
ey9BMO6vEtWAEg==
-----END CERTIFICATE-----
Generated at Fri Aug 8 13:08:44 2025 by rpki-client