Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft
File: ImidD5E9Kcxj1skmy0Yssn8YRAg.mft (raw, json)
Hash identifier: CNbXIK75WOBytZ6P6PVKnuJaIzGa5pqfdXrhCBv1ohI=
Subject key identifier: 27:99:B2:CC:97:A9:42:59:E6:5D:5F:5B:09:58:12:D4:CD:43:65:05
Authority key identifier: 22:68:9D:0F:91:3D:29:CC:63:D6:C9:26:CB:46:2C:B2:7F:18:44:08
Certificate issuer: /CN=22689d0f913d29cc63d6c926cb462cb27f184408
Certificate serial: 019A4EF5D163AD466B074AE965E744345ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImidD5E9Kcxj1skmy0Yssn8YRAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:02:03 +0000
Manifest this update: Tue 04 Nov 2025 13:02:03 +0000
Manifest next update: Wed 05 Nov 2025 13:02:03 +0000
Files and hashes: 1: ImidD5E9Kcxj1skmy0Yssn8YRAg.crl (hash: WaRuOZ6IeJa+ty0cRi9Vi3QHdrhk5KhP70FQdZngumw=)
2: PnGxbbyenKRUkbRi2afvxfE-S9E.roa (hash: JW3Jf++XQ8LN1xPVRRNLBe2ZMK/kXqbkLdynsPQmUsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ImidD5E9Kcxj1skmy0Yssn8YRAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:d1:63:ad:46:6b:07:4a:e9:65:e7:44:34:5a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22689d0f913d29cc63d6c926cb462cb27f184408
Validity
Not Before: Nov 4 13:02:03 2025 GMT
Not After : Nov 5 13:02:03 2025 GMT
Subject: CN=2799b2cc97a94259e65d5f5b095812d4cd436505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:29:12:8e:5d:16:06:d7:ac:33:3e:23:9a:8f:
14:40:59:d2:8e:38:85:7b:a9:ef:eb:82:94:93:b6:
ca:32:d1:a9:45:fd:57:5c:71:80:88:4c:43:a6:17:
af:5f:c4:76:0e:73:9f:09:b1:28:8c:57:19:1f:c9:
e7:57:49:48:8d:a9:6b:a2:1c:83:a6:96:f3:20:4c:
46:41:57:80:b8:55:87:ea:c2:d3:f9:c2:e8:4b:5d:
22:a0:d8:b2:92:f2:99:a5:53:f7:92:30:ea:b1:d0:
a1:5a:80:1f:f1:0d:33:28:ea:20:aa:51:85:06:08:
c8:e9:4d:e1:8e:dc:80:c3:6d:46:48:23:0f:a3:fa:
02:48:6c:8d:50:a1:48:27:50:53:05:dc:de:64:a5:
7f:83:08:f4:66:47:f0:f5:fd:7c:1c:3b:48:b6:5d:
f7:3f:4c:5b:c5:82:c4:9b:7e:43:29:94:8a:27:07:
7b:82:df:c0:e2:09:81:1f:11:04:b1:67:c2:f3:f1:
36:6b:1b:2a:c8:c5:78:e1:a9:d0:c4:62:20:45:47:
74:25:51:40:9f:b2:07:5e:40:44:22:fd:21:a7:31:
52:35:c5:f9:5f:a5:50:35:d0:bd:ab:8e:8a:25:2d:
a0:f9:0c:26:19:9a:46:09:4a:4f:a8:76:72:f6:f1:
b3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:99:B2:CC:97:A9:42:59:E6:5D:5F:5B:09:58:12:D4:CD:43:65:05
X509v3 Authority Key Identifier:
keyid:22:68:9D:0F:91:3D:29:CC:63:D6:C9:26:CB:46:2C:B2:7F:18:44:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImidD5E9Kcxj1skmy0Yssn8YRAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:9b:1b:9e:06:31:bd:dd:0b:6f:ba:92:f6:53:72:1c:36:a4:
73:7c:89:05:31:cb:64:2a:35:d3:50:c9:c9:46:67:bb:68:99:
72:b6:3e:9e:41:f2:fa:75:57:7e:5b:f8:76:e0:88:bd:bf:bb:
29:ea:fb:71:9c:07:c4:f8:36:af:90:ea:64:d5:11:3a:d8:14:
a5:f5:70:dc:98:fa:cc:8a:81:36:66:ff:2b:42:bc:1e:ca:68:
9e:1f:1a:e2:f3:36:2d:47:71:ec:b6:ed:34:94:a0:db:eb:0a:
ff:6c:49:ce:b5:9a:e5:1f:84:cb:eb:55:3d:fe:03:83:1e:5c:
b8:af:ca:9b:56:53:07:d7:de:2f:ad:88:8d:bb:c5:bd:a6:2a:
c0:36:11:a2:9f:06:de:13:80:ce:ed:ae:9c:9c:e1:9a:0a:cc:
8e:3e:3d:dd:27:04:4f:07:88:f0:c2:7b:97:c1:74:54:96:c3:
37:32:9e:35:da:2f:77:ff:21:50:5b:ae:5a:9e:a6:aa:45:ea:
d9:a0:9c:61:4f:f0:bb:e9:f2:30:03:96:75:d0:d5:a6:61:d1:
f2:ee:bc:80:e7:82:ab:a4:dc:86:82:86:68:e1:b1:d6:2c:05:
42:d0:02:6c:82:ee:ab:23:66:ea:37:e7:50:21:e6:11:af:a4:
39:a1:04:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:57:22 2025 by rpki-client