Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
File: IMz236cJVzqCG2PEy2lWBf0maAs.mft (raw, json)
Hash identifier: 0KiAFJuJ96jAjaEpScMloGj5QItg0F4/PF5hk/TlXNk=
Subject key identifier: 5B:A7:27:9A:F1:5D:16:47:77:25:3A:CB:B8:D9:6D:31:34:EF:DB:37
Authority key identifier: 20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B
Certificate issuer: /CN=20ccf6dfa709573a821b63c4cb695605fd26680b
Certificate serial: 019854FCC403B7527A312E15FF3E47DF6323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
Manifest number: 030D
Signing time: Tue 29 Jul 2025 07:01:47 +0000
Manifest this update: Tue 29 Jul 2025 07:01:47 +0000
Manifest next update: Wed 30 Jul 2025 07:01:47 +0000
Files and hashes: 1: HO9laPPsdq6sfNd_PR3udt1kywk.roa (hash: ySqE/9cHXiOyjfUHGzF3+AzH1p8/SUImSsDU40s2CbI=)
2: IMz236cJVzqCG2PEy2lWBf0maAs.crl (hash: KwIN5SON0Y/EqSalM5J+d/i1HHajW2hSuPcKdB9JzmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fc:c4:03:b7:52:7a:31:2e:15:ff:3e:47:df:63:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ccf6dfa709573a821b63c4cb695605fd26680b
Validity
Not Before: Jul 29 07:01:47 2025 GMT
Not After : Jul 30 07:01:47 2025 GMT
Subject: CN=5ba7279af15d164777253acbb8d96d3134efdb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:df:cb:45:34:15:43:94:1e:c4:4d:33:4b:ff:
7d:5c:19:0f:d3:7b:85:7f:c8:79:a7:96:85:be:a7:
07:4e:3b:4d:05:40:59:55:42:c7:bd:26:ec:cd:29:
29:4e:01:65:9e:06:77:1c:03:1b:08:06:7a:25:12:
d8:e1:0c:c0:b9:14:a4:51:ec:64:81:28:5d:bb:92:
bd:8e:77:18:5b:48:c9:a3:80:80:52:c2:7f:c8:ff:
d3:b7:02:6c:69:0f:e4:61:4a:50:88:2f:35:f1:60:
ca:34:89:01:bb:11:39:8f:93:5f:cd:ee:ab:cd:8e:
8b:eb:87:3c:f4:85:cd:cc:7b:c8:09:3f:3b:88:88:
81:c1:5b:71:77:e2:30:14:b7:02:83:9f:91:70:de:
87:14:23:08:e4:44:e1:a2:f8:0b:2f:9c:99:a9:b6:
e9:e7:41:5f:a7:f7:34:fd:4b:82:af:ad:56:b0:4d:
f5:da:bf:30:cf:bc:27:b8:d1:61:f1:f2:17:24:ca:
33:47:78:cf:82:da:a4:6f:fd:54:88:1c:27:92:db:
29:f2:3b:33:19:51:44:e7:8e:62:b2:bc:8a:73:64:
41:b5:be:47:ee:51:a4:06:33:52:7e:b6:6d:32:a3:
4e:0e:9f:ef:1c:10:a0:20:f0:ee:98:5e:bc:3a:d7:
42:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A7:27:9A:F1:5D:16:47:77:25:3A:CB:B8:D9:6D:31:34:EF:DB:37
X509v3 Authority Key Identifier:
keyid:20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:49:46:6f:43:59:3d:81:62:f7:a1:92:b9:91:9d:ab:a1:39:
43:92:fa:1d:83:38:ff:f4:83:9a:9c:4f:14:0a:7f:50:d5:7d:
9d:80:4e:ce:38:01:c1:cd:73:6d:f0:91:89:71:57:5c:9e:3c:
f2:55:49:52:d4:47:2d:da:34:7c:56:7a:13:f8:72:bb:6b:53:
55:30:30:c2:3d:4c:9c:d8:58:a0:07:0e:0b:81:ad:ce:a1:4f:
cb:c8:fd:47:a7:b7:3f:2f:e0:b6:78:08:1b:80:a1:6f:b3:ac:
ec:70:77:b6:60:fd:04:ea:7a:eb:37:62:64:2f:33:ac:61:26:
64:25:98:3b:05:47:d8:3d:72:79:22:91:53:47:1d:cb:9b:34:
c6:7a:fd:24:03:75:4c:67:99:0e:17:b1:01:a6:d7:71:3e:7d:
ef:0f:5b:b9:f0:b5:80:b3:4b:e3:2d:58:15:a1:b9:8e:f3:46:
0c:ca:73:4e:fd:d4:3d:8e:67:de:2b:3a:ad:81:7e:d1:12:08:
13:75:7e:75:fa:33:45:e3:0c:f9:21:47:fd:4e:13:07:77:12:
6a:1b:9b:33:36:86:05:b3:b0:fd:49:15:ca:eb:fa:75:c7:ed:
88:d1:f6:91:ae:29:df:e4:db:e8:08:5a:2b:80:d2:70:30:99:
eb:8d:0d:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhU/MQDt1J6MS4V/z5H32MjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwY2NmNmRmYTcwOTU3M2E4MjFiNjNjNGNiNjk1NjA1ZmQy
NjY4MGIwHhcNMjUwNzI5MDcwMTQ3WhcNMjUwNzMwMDcwMTQ3WjAzMTEwLwYDVQQD
Eyg1YmE3Mjc5YWYxNWQxNjQ3NzcyNTNhY2JiOGQ5NmQzMTM0ZWZkYjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd/LRTQVQ5QexE0zS/99XBkP03uF
f8h5p5aFvqcHTjtNBUBZVULHvSbszSkpTgFlngZ3HAMbCAZ6JRLY4QzAuRSkUexk
gShdu5K9jncYW0jJo4CAUsJ/yP/TtwJsaQ/kYUpQiC818WDKNIkBuxE5j5Nfze6r
zY6L64c89IXNzHvICT87iIiBwVtxd+IwFLcCg5+RcN6HFCMI5EThovgLL5yZqbbp
50Ffp/c0/UuCr61WsE312r8wz7wnuNFh8fIXJMozR3jPgtqkb/1UiBwnktsp8jsz
GVFE545isryKc2RBtb5H7lGkBjNSfrZtMqNODp/vHBCgIPDumF68OtdC3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFunJ5rxXRZHdyU6y7jZbTE079s3MB8GA1UdIwQY
MBaAFCDM9t+nCVc6ghtjxMtpVgX9JmgLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU16MjM2Y0pWenFDRzJQRXkybFdCZjBtYUFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOTI2OWMtOWQ1Yi00ZjA5LTk3ZWIt
M2EyOGY4YTljNzA3LzEvSU16MjM2Y0pWenFDRzJQRXkybFdCZjBtYUFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8xOTI2OWMtOWQ1Yi00ZjA5LTk3ZWItM2EyOGY4YTljNzA3
LzEvSU16MjM2Y0pWenFDRzJQRXkybFdCZjBtYUFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGElGb0NZ
PYFi96GSuZGdq6E5Q5L6HYM4//SDmpxPFAp/UNV9nYBOzjgBwc1zbfCRiXFXXJ48
8lVJUtRHLdo0fFZ6E/hyu2tTVTAwwj1MnNhYoAcOC4GtzqFPy8j9R6e3Py/gtngI
G4Chb7Os7HB3tmD9BOp66zdiZC8zrGEmZCWYOwVH2D1yeSKRU0cdy5s0xnr9JAN1
TGeZDhexAabXcT597w9bufC1gLNL4y1YFaG5jvNGDMpzTv3UPY5n3is6rYF+0RII
E3V+dfozReMM+SFH/U4TB3cSahubMzaGBbOw/UkVyuv6dcftiNH2ka4p3+Tb6Aha
K4DScDCZ640Ntw==
-----END CERTIFICATE-----
Generated at Tue Jul 29 16:20:42 2025 by rpki-client