Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
File: imAdLqH5SMoBjDNb7actvsB51uY.mft (raw, json)
Hash identifier: rGB83ektJaqrEM0pZ6nMRZhS0B/5cYBD8ciyMj4oT5g=
Subject key identifier: D2:A5:87:46:7C:54:DB:26:C1:70:0B:49:BE:E6:B7:46:5C:16:9A:AA
Authority key identifier: 8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
Certificate issuer: /CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
Certificate serial: 01984A778FA5E6BDC8817FADE36D1CA37100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
Manifest number: 04ED
Signing time: Sun 27 Jul 2025 06:00:06 +0000
Manifest this update: Sun 27 Jul 2025 06:00:06 +0000
Manifest next update: Mon 28 Jul 2025 06:00:06 +0000
Files and hashes: 1: gBpXU6HMs3EdVnZKM3W9dtj0eWk.roa (hash: /5HDlgNXt08tmw8LTatvLunizw0Atkb/+jC9ix7IJ4k=)
2: imAdLqH5SMoBjDNb7actvsB51uY.crl (hash: qkHe6Jc4/aG40UqU0pkAXFh3tf2FqHVcl4QTD4g3idw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:8f:a5:e6:bd:c8:81:7f:ad:e3:6d:1c:a3:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
Validity
Not Before: Jul 27 06:00:06 2025 GMT
Not After : Jul 28 06:00:06 2025 GMT
Subject: CN=d2a587467c54db26c1700b49bee6b7465c169aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a5:d1:e0:12:97:cc:40:d3:ad:57:c5:fb:09:
d6:7b:76:bf:33:3f:82:21:8c:95:e0:2a:ec:76:a0:
36:17:cc:45:ba:bd:df:cb:28:41:94:fe:dc:67:75:
9a:a6:93:50:4e:f5:95:ec:ce:39:84:d4:fc:aa:69:
a0:09:a8:40:7e:a2:41:74:ad:48:f0:ac:67:b3:68:
54:d4:31:9c:53:4c:94:29:be:d8:e9:97:24:fc:fa:
66:2b:50:9e:53:f7:54:33:bf:ae:28:05:0b:d0:3d:
55:a0:a2:34:3b:01:50:73:fb:ad:a4:13:e4:b3:cf:
98:83:f4:1c:b0:cd:42:62:4b:29:93:a1:6f:09:b1:
89:1c:46:dc:0e:50:45:74:ea:12:45:6f:4b:e7:a2:
02:0a:30:5e:3a:ac:67:6a:f6:2e:2e:90:31:56:b4:
3f:d1:d0:4e:69:1f:0c:b7:71:6e:dc:ad:8a:11:2a:
bb:25:aa:8c:3f:ff:7a:c8:a4:45:7c:18:cf:23:32:
75:75:13:56:af:ca:31:cf:68:e3:b6:32:1a:82:79:
67:84:06:18:de:61:c9:bc:05:69:f2:55:22:52:b9:
5c:df:74:77:0f:9d:88:78:fc:3f:51:40:99:ff:33:
17:a3:8f:c6:ae:ec:cb:54:54:ae:13:1c:cc:cf:c0:
41:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A5:87:46:7C:54:DB:26:C1:70:0B:49:BE:E6:B7:46:5C:16:9A:AA
X509v3 Authority Key Identifier:
keyid:8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a9:6e:38:9c:d4:8a:1e:02:a2:03:6b:3e:57:1b:90:91:b2:
ee:d8:e2:23:62:e5:55:84:7a:74:18:a8:d3:0a:35:b5:c9:a1:
1b:18:29:b1:84:55:ee:1d:73:03:22:ec:b5:10:22:99:3b:71:
2c:bc:fc:a7:bd:f8:97:b8:cc:59:88:7d:72:56:e3:72:54:e2:
00:6f:98:d1:62:e8:73:be:08:ce:df:ff:a3:0a:c1:89:78:26:
46:6f:09:f9:12:18:cc:31:33:25:0c:46:87:ea:19:a5:51:ae:
76:73:b8:7b:4c:24:68:96:2e:de:bc:71:c6:d9:60:d2:73:42:
7c:5c:15:14:9a:72:04:7c:79:ea:03:65:ff:5e:84:b4:70:c7:
27:d8:d3:f4:86:64:0c:3f:d0:9c:59:e4:13:e0:3d:a8:5f:85:
20:d1:a7:cf:84:31:8c:da:31:52:72:63:bd:dc:69:2b:49:ea:
c3:d1:52:e4:f1:e5:c5:92:48:70:c3:d9:1b:65:9e:18:31:52:
37:fa:90:56:24:ac:60:9f:85:a5:63:9d:0b:2b:0c:b7:9c:b9:
8d:3e:cc:84:df:8a:43:c5:78:14:05:00:12:0c:76:46:55:ff:
cc:34:01:22:9e:51:c5:ed:f2:bd:b3:a8:70:51:d6:d7:3e:49:
66:1b:c7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:30:12 2025 by rpki-client