Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
File: IMotTLPla10plwqX_GResv1odqE.mft (raw, json)
Hash identifier: fz90Oqs6viT5Va3e6FmL/MYrbAV21quNKrpQmfO5ogU=
Subject key identifier: C8:92:5F:81:41:27:7E:C2:34:6E:DF:44:B3:4F:1C:98:67:05:8A:39
Authority key identifier: 20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
Certificate issuer: /CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Certificate serial: 019A52D1502B930A0F0C2C6F7952C710EB84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
Manifest number: 1442
Signing time: Wed 05 Nov 2025 07:00:40 +0000
Manifest this update: Wed 05 Nov 2025 07:00:40 +0000
Manifest next update: Thu 06 Nov 2025 07:00:40 +0000
Files and hashes: 1: IMotTLPla10plwqX_GResv1odqE.crl (hash: dZeL+XPhWU3vzJv0yVvMIoo5ftVxO+GfH8286DyXX9o=)
2: PrisiX9cIn99AliDWgpNGUfmj_8.roa (hash: rN8Y2pR83WML1BI+RzSSfaDf/yYr4j471dxo3B4dyzY=)
3: bSEsv80VTIqhxykqIB8M44nU7N8.roa (hash: Ooz65LuwKjo+iPeOY+Zh+YXr8ijMf6WnGg7hpdHzR2I=)
4: mDAtJGSElDm2O92EFy5g2Ab4svc.roa (hash: 06wyeaq77omoVi1U61nSXVnjJJye2vIP4bDLXfzxENg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:50:2b:93:0a:0f:0c:2c:6f:79:52:c7:10:eb:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Validity
Not Before: Nov 5 07:00:40 2025 GMT
Not After : Nov 6 07:00:40 2025 GMT
Subject: CN=c8925f8141277ec2346edf44b34f1c9867058a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2d:bb:79:b1:02:0e:8f:ea:c6:c1:fe:1a:77:
c0:52:85:4b:23:74:74:bf:ed:cf:46:59:d2:a4:fa:
91:87:fd:07:d5:e2:dd:88:8f:f3:f9:db:24:ee:c2:
33:bd:1f:ab:77:0e:77:f7:b2:04:73:d4:17:db:84:
df:27:a3:0a:ad:a7:83:ce:e1:11:a9:d0:24:be:5d:
98:b3:3f:f6:ae:d9:0f:bd:b7:ed:5f:ca:35:63:9f:
12:f8:ca:a2:6f:07:8b:db:98:49:f3:2e:cc:19:36:
80:3f:66:4e:cd:14:80:37:23:5a:53:6c:a6:af:ef:
c0:61:5d:04:7c:1c:b3:f6:02:51:cc:59:05:e5:fb:
04:b6:39:9c:55:37:91:ab:57:18:fd:80:80:96:fd:
61:a8:cc:d4:c6:f3:a6:e6:46:b4:49:e4:26:09:d2:
1d:2d:22:08:a5:4e:aa:25:bd:29:98:e8:04:29:e8:
e5:23:1d:d1:f2:43:79:c1:04:89:15:40:f8:76:66:
2b:a4:14:e9:22:ff:f7:fe:f8:c6:c7:7c:8e:ac:c9:
42:b5:f5:76:e7:3c:96:ca:07:27:50:b6:ce:a8:48:
86:17:2d:6c:2d:38:a6:47:a6:d9:07:12:ca:58:9a:
b7:08:76:e2:0c:0b:d4:e2:d9:8d:07:8f:e1:1c:05:
48:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:92:5F:81:41:27:7E:C2:34:6E:DF:44:B3:4F:1C:98:67:05:8A:39
X509v3 Authority Key Identifier:
keyid:20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:4a:51:a4:60:b7:8b:48:ad:6e:21:d9:08:05:70:c1:41:86:
f6:4a:d7:e0:61:42:57:7d:82:7e:64:1e:63:18:59:9c:91:92:
fd:e7:02:2a:17:77:39:f9:4a:ee:a7:2b:01:35:78:62:2f:08:
6a:c5:bd:8b:b3:9d:2e:46:3e:7b:d3:d9:29:94:02:ea:09:04:
d7:ea:10:e3:2a:7a:c6:43:23:00:f4:34:e8:7e:46:ac:ec:da:
9c:35:6d:96:e7:4f:a4:44:bd:97:d5:8c:15:d9:7a:91:f6:a4:
56:14:0c:17:39:63:0b:6c:65:76:8e:61:10:66:a2:3e:f4:27:
ef:41:94:3a:6a:a8:e2:90:cd:60:10:ea:19:d2:8f:e6:e6:9f:
71:4c:d1:42:79:f2:a7:03:ac:7f:c5:76:28:e2:b7:e2:f0:b6:
04:a5:79:55:f6:fa:c8:63:45:fb:af:91:86:54:fa:8c:a7:cc:
39:c7:97:a3:2e:51:53:39:2e:d3:0e:89:58:35:74:14:cc:fe:
0a:1a:ae:80:0b:97:60:b7:53:fc:77:f1:ea:cb:09:14:d9:87:
58:39:91:14:27:da:8a:d4:1b:aa:4c:22:d7:84:2d:7f:fb:79:
ab:39:fa:47:50:39:8a:b9:47:d3:2d:fc:bc:0f:f6:92:ae:c5:
03:e5:51:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0VArkwoPDCxveVLHEOuEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwY2EyZDRjYjNlNTZiNWQyOTk3MGE5N2ZjNjQ1ZWIyZmQ2
ODc2YTEwHhcNMjUxMTA1MDcwMDQwWhcNMjUxMTA2MDcwMDQwWjAzMTEwLwYDVQQD
EyhjODkyNWY4MTQxMjc3ZWMyMzQ2ZWRmNDRiMzRmMWM5ODY3MDU4YTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0y27ebECDo/qxsH+GnfAUoVLI3R0
v+3PRlnSpPqRh/0H1eLdiI/z+dsk7sIzvR+rdw5397IEc9QX24TfJ6MKraeDzuER
qdAkvl2Ysz/2rtkPvbftX8o1Y58S+MqibweL25hJ8y7MGTaAP2ZOzRSANyNaU2ym
r+/AYV0EfByz9gJRzFkF5fsEtjmcVTeRq1cY/YCAlv1hqMzUxvOm5ka0SeQmCdId
LSIIpU6qJb0pmOgEKejlIx3R8kN5wQSJFUD4dmYrpBTpIv/3/vjGx3yOrMlCtfV2
5zyWygcnULbOqEiGFy1sLTimR6bZBxLKWJq3CHbiDAvU4tmNB4/hHAVIjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMiSX4FBJ37CNG7fRLNPHJhnBYo5MB8GA1UdIwQY
MBaAFCDKLUyz5WtdKZcKl/xkXrL9aHahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yYzI4MTctMzcwMS00NzgzLThmYmQt
ZWVjNDg4NWM0ZjhkLzEvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yYzI4MTctMzcwMS00NzgzLThmYmQtZWVjNDg4NWM0Zjhk
LzEvSU1vdFRMUGxhMTBwbHdxWF9HUmVzdjFvZHFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACkpRpGC3
i0itbiHZCAVwwUGG9krX4GFCV32CfmQeYxhZnJGS/ecCKhd3OflK7qcrATV4Yi8I
asW9i7OdLkY+e9PZKZQC6gkE1+oQ4yp6xkMjAPQ06H5GrOzanDVtludPpES9l9WM
Fdl6kfakVhQMFzljC2xldo5hEGaiPvQn70GUOmqo4pDNYBDqGdKP5uafcUzRQnny
pwOsf8V2KOK34vC2BKV5Vfb6yGNF+6+RhlT6jKfMOceXoy5RUzku0w6JWDV0FMz+
ChqugAuXYLdT/Hfx6ssJFNmHWDmRFCfaitQbqkwi14Qtf/t5qzn6R1A5irlH0y38
vA/2kq7FA+VRYw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:09:09 2025 by rpki-client