Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
File: IM1XQoSmAY5bA2Neml1lj99XNPA.mft (raw, json)
Hash identifier: wKUx06uhzXSHq2wcljQZ5ftlA7Kum4g3i4NwjxWLp5Q=
Subject key identifier: DB:2B:BD:8A:CA:31:2A:AB:84:95:B5:68:49:77:82:9A:C5:BB:98:2D
Authority key identifier: 20:CD:57:42:84:A6:01:8E:5B:03:63:5E:9A:5D:65:8F:DF:57:34:F0
Certificate issuer: /CN=20cd574284a6018e5b03635e9a5d658fdf5734f0
Certificate serial: 01984A77A53A1BD4C7E66D0F43B1D405153D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
Manifest number: 1347
Signing time: Sun 27 Jul 2025 06:00:11 +0000
Manifest this update: Sun 27 Jul 2025 06:00:11 +0000
Manifest next update: Mon 28 Jul 2025 06:00:11 +0000
Files and hashes: 1: IM1XQoSmAY5bA2Neml1lj99XNPA.crl (hash: zUXwPcUfI2H7vLP5c+b7hxkdozsXZNAlbkOJGzx+mRM=)
2: MWwIJyVW-xGM8HHmiPSGu90ysVM.roa (hash: 9euJkhmoCQb1LOfkGIPpqowd4pomSIjB0l7bFL7u4Yg=)
3: PiMCmpetvGyOad9hAP8fiU1Qa8U.roa (hash: W2k0p2aLpcmF1pGu+mKgyVPY0tAWg3LNT6+Z7BuBqqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:a5:3a:1b:d4:c7:e6:6d:0f:43:b1:d4:05:15:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20cd574284a6018e5b03635e9a5d658fdf5734f0
Validity
Not Before: Jul 27 06:00:11 2025 GMT
Not After : Jul 28 06:00:11 2025 GMT
Subject: CN=db2bbd8aca312aab8495b5684977829ac5bb982d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:da:31:9d:64:28:ae:1a:00:9f:5e:3b:05:68:
64:50:79:99:35:43:44:65:4f:82:2b:b0:ba:69:67:
72:48:ab:ff:e6:3f:b4:d7:bf:9f:64:bb:92:40:01:
26:0f:26:f0:0b:ba:22:72:d7:c6:30:38:93:36:b4:
21:3a:39:e8:5a:04:ef:ab:16:5e:39:72:c2:78:9b:
25:4b:32:8a:c8:a2:cc:49:d1:ff:fb:3b:39:2b:aa:
65:0e:bb:62:01:58:4c:14:e4:4a:b3:8c:18:05:34:
4e:b5:97:f4:04:da:a9:48:20:65:86:b0:18:50:41:
97:67:24:92:3b:5f:56:bd:e9:0e:ee:9e:24:3b:86:
a2:55:bf:62:e7:f5:45:13:82:52:7d:da:80:27:90:
ac:1a:84:a1:bd:9d:37:8b:01:24:27:77:ad:1e:f5:
ac:53:a3:65:eb:03:60:e4:70:50:2e:0d:1f:d9:59:
82:0b:31:9c:5b:48:9c:aa:2a:dc:7a:ff:70:40:d5:
ee:24:8e:25:65:af:91:e9:83:df:f4:32:8e:30:4c:
75:6f:b5:b4:df:22:f2:f1:ef:4a:6f:7e:6d:29:02:
7b:27:e9:4d:a4:84:65:d1:bc:de:39:97:12:ee:ee:
0d:60:0e:5b:6d:e9:ea:ac:04:c3:29:af:9a:a3:1e:
54:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2B:BD:8A:CA:31:2A:AB:84:95:B5:68:49:77:82:9A:C5:BB:98:2D
X509v3 Authority Key Identifier:
keyid:20:CD:57:42:84:A6:01:8E:5B:03:63:5E:9A:5D:65:8F:DF:57:34:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:97:ef:30:23:8f:21:74:d9:32:cf:aa:e8:46:d7:16:e5:14:
6a:95:5f:bf:97:0e:b4:6a:01:95:a8:ef:e5:09:74:09:22:25:
57:d0:0b:20:f0:7c:7d:15:d6:fa:89:e9:0b:68:c3:62:4e:5f:
7c:b2:59:7e:0a:61:60:ef:a0:f3:8f:10:62:55:8c:28:cd:c6:
8c:be:05:38:f2:d2:d2:78:a7:91:71:0e:82:5d:66:aa:f5:16:
a8:8d:35:f6:7d:18:ab:a2:7f:84:9c:90:19:63:8c:20:e6:90:
b1:db:90:a9:31:2c:80:ae:b3:37:1a:dc:a4:f4:25:48:31:05:
81:cf:d1:e0:dc:23:28:7e:76:50:b5:e9:c8:2b:19:ed:7b:58:
a9:ee:3f:0d:da:c9:bb:b9:f3:ed:1d:55:1a:1f:64:3a:d2:6d:
50:8d:aa:1c:41:3c:9a:a0:39:3a:0f:f3:fc:25:3a:e1:0b:8a:
35:32:52:3e:33:05:06:dc:b5:ce:cb:7e:7a:a0:f5:95:c4:ee:
b2:3a:9a:82:ec:e2:d4:b2:d9:d5:e5:b4:9a:96:4c:ec:d4:bf:
05:d4:33:2a:d7:30:66:5b:1c:2d:c9:e7:ba:5c:0d:7b:09:8b:
0a:07:85:a2:6d:16:2a:82:22:5b:c7:11:8a:b5:4a:41:00:07:
27:91:9e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:01:19 2025 by rpki-client