Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
File: imBgNTuY9TMW0CL6AdKZ11__ItY.mft (raw, json)
Hash identifier: FQJ3UCqh+eQ1N8A/XiXehXvVD4BeWd9H1duFlA3Dqec=
Subject key identifier: 07:E1:96:B6:2B:82:88:88:21:47:E8:67:00:75:FD:A5:C2:25:28:E0
Authority key identifier: 8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
Certificate issuer: /CN=8a6060353b98f53316d022fa01d299d75fff22d6
Certificate serial: 019A4F62723892850B08C684F4C50B3AF601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
Manifest number: 043D
Signing time: Tue 04 Nov 2025 15:00:43 +0000
Manifest this update: Tue 04 Nov 2025 15:00:43 +0000
Manifest next update: Wed 05 Nov 2025 15:00:43 +0000
Files and hashes: 1: 053VQxunxAeUFWyp53gx-beqwOw.roa (hash: 7JicntomGJy1FdKv/+65cawmZt1C37Ox3QqgLF1dC6U=)
2: imBgNTuY9TMW0CL6AdKZ11__ItY.crl (hash: fYGyeKtAjFAKyi7kZntgTgCVEVkVeTosC6b4d5PGPdo=)
3: sY_8uI_Vy_Kyk6ImGlPdHmVKVYk.roa (hash: NexMNxJOVKLfI4XsOD08LdcHHjE/wZ9FYtwH9p7yFUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:72:38:92:85:0b:08:c6:84:f4:c5:0b:3a:f6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6060353b98f53316d022fa01d299d75fff22d6
Validity
Not Before: Nov 4 15:00:43 2025 GMT
Not After : Nov 5 15:00:43 2025 GMT
Subject: CN=07e196b62b8288882147e8670075fda5c22528e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f3:83:6b:18:76:18:30:01:b3:f4:1a:96:3c:
3d:0e:ce:41:30:1f:24:36:8e:d3:c5:e3:12:51:5c:
5d:bf:7e:91:f5:dd:f2:55:f6:7d:ca:50:3a:f4:e3:
e1:77:80:63:52:f1:22:84:77:65:56:06:ba:d2:fe:
fd:9b:ac:cc:0c:74:9d:c6:df:8b:a3:a0:99:66:5c:
60:84:54:b8:90:69:64:9e:48:c5:36:3a:3e:e6:30:
5c:b0:30:59:e8:ff:07:bb:82:25:be:8d:1f:48:77:
84:d1:e7:8b:26:79:5b:8f:1c:d9:de:f5:40:8c:e9:
e9:7b:8d:4b:90:64:a0:45:a2:a4:64:60:87:c7:50:
56:fe:cb:e9:b9:58:34:f3:56:36:64:82:b1:5b:f0:
fe:65:72:29:ca:36:d7:fd:ca:4b:0e:9f:ce:4e:81:
19:c7:19:c3:e5:b3:e6:fc:f1:6b:53:8b:7f:37:fd:
9e:80:40:4f:c6:b3:77:ee:3a:fc:be:5f:e9:2e:fb:
d6:be:d8:cf:99:2a:66:4c:27:ef:e3:6b:20:27:4f:
1a:a5:d4:80:74:ea:41:dd:6a:3c:92:d2:6a:81:75:
71:56:fa:b6:cc:00:99:15:55:1b:59:4a:e0:81:06:
ec:f5:4f:ef:dd:98:d4:71:0f:69:2b:ed:e9:56:6c:
67:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E1:96:B6:2B:82:88:88:21:47:E8:67:00:75:FD:A5:C2:25:28:E0
X509v3 Authority Key Identifier:
keyid:8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:48:ba:de:da:b1:99:9c:98:06:29:e8:ea:03:d4:ad:b7:47:
b8:62:ab:c5:42:64:ad:b6:71:e0:a3:eb:23:91:85:fe:6c:88:
44:3b:15:54:0a:a6:6e:37:05:bd:39:6b:45:b7:63:3c:8b:92:
c6:53:c2:fd:05:83:17:31:b6:bb:55:ff:b1:a6:ae:0d:6f:01:
01:1d:58:58:9a:26:dc:5b:2f:c5:92:51:c0:89:56:d8:4b:8e:
ef:63:90:f3:7e:9c:87:f1:4f:e4:e2:78:99:6f:0f:5b:9b:a7:
f7:7b:97:39:44:ce:8e:22:0d:7c:60:bc:9a:bd:4b:67:1e:ad:
09:26:cd:53:4a:c3:06:05:6b:c7:af:81:51:73:95:0d:81:ab:
4f:f8:98:23:ba:86:f8:6b:17:89:9b:b9:c8:e9:4c:09:9e:8b:
1d:15:2a:27:5b:71:4e:73:38:96:a6:11:9e:07:2c:88:4d:8a:
d4:fd:c0:a4:d7:4a:2d:56:99:2c:73:32:c9:33:31:04:37:7f:
8d:a1:d6:f9:d0:59:e2:72:7c:a6:e0:cc:a8:cf:6b:41:b0:e1:
20:50:5d:9d:6f:f9:e4:be:bb:b6:59:2b:95:95:38:47:50:04:
bd:72:5b:dd:51:49:bc:3a:a2:34:f5:5f:4c:a8:6e:d1:0d:59:
32:b9:5c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:12 2025 by rpki-client