Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
File: IMC5sz3OXroK6mSJFY0_snAirOc.mft (raw, json)
Hash identifier: 42H/EQadjVslZrQ+GRTbPDyWIZQyyQJe6rfrmmow3qU=
Subject key identifier: 57:6B:3C:86:A5:EA:21:75:D5:17:2C:ED:5E:BD:44:B4:15:A7:9B:B1
Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Certificate serial: 0198469AEF605E4CC2A30F2DBAE7B9D1EBBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
Manifest number: 0F26
Signing time: Sat 26 Jul 2025 12:00:15 +0000
Manifest this update: Sat 26 Jul 2025 12:00:15 +0000
Manifest next update: Sun 27 Jul 2025 12:00:15 +0000
Files and hashes: 1: IMC5sz3OXroK6mSJFY0_snAirOc.crl (hash: +eyYYffzrAQrxPrgZPkpbu2ohA3CHD1wrKUnQ2cndXU=)
2: _t0G-nTb4aukqy0OCUwpkcnZ1II.roa (hash: KNLLqIEJ5dlRl5uPgTAYCRT2GgZHFc+269aOuK3BWNQ=)
3: iIfA58agMV_RqJ74K2RRl6EqU28.roa (hash: lku32PUlX5LHQflLOMldhRZ2jvWTzkqH2DWG39ZWQfM=)
4: tPeq-jjd1LfJCGPS7kRFioCnf1s.roa (hash: IHjSVV+vrTNKBQIJ5PbeYeBS76QGn2Ghw7Cv5izSDhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9a:ef:60:5e:4c:c2:a3:0f:2d:ba:e7:b9:d1:eb:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Validity
Not Before: Jul 26 12:00:15 2025 GMT
Not After : Jul 27 12:00:15 2025 GMT
Subject: CN=576b3c86a5ea2175d5172ced5ebd44b415a79bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:02:8c:a5:47:e2:0c:14:d6:59:99:6c:61:e3:
98:2d:b8:14:e1:33:26:84:31:3f:fe:a6:dc:9d:ae:
92:2f:6c:4b:bc:94:64:be:66:09:b8:b2:52:4a:4c:
ad:f6:31:d6:ec:60:7c:8a:8d:2e:d5:72:b4:2a:be:
8d:a7:c0:10:ad:9c:de:78:06:26:d0:dd:4f:a9:cb:
ad:3a:1c:9b:ff:2f:7c:65:aa:ed:79:fb:bf:fa:62:
44:f2:18:61:01:5d:d7:3d:d9:f5:b2:96:7b:8a:af:
b0:a7:b4:7b:c4:83:b8:b4:22:a2:04:f9:71:d6:1a:
29:ff:0b:eb:22:54:38:8b:29:b9:d2:c0:e5:d7:cc:
1e:7a:a2:cc:5c:53:1a:e5:51:18:27:50:76:ab:4a:
db:68:a7:d2:cb:76:02:0c:d3:07:0d:5d:d2:b7:e2:
a2:2e:94:d8:43:0a:e9:bb:79:1c:bb:0f:d5:fd:a9:
4f:bc:a0:86:7e:34:56:ce:68:71:72:de:02:5b:a0:
6a:83:2b:25:a6:f5:e9:68:2f:5a:f9:c0:26:f3:b7:
3e:c3:1f:10:ca:1c:16:a6:1c:1b:5e:a2:5f:0c:ea:
69:d8:5d:6c:19:80:f0:c8:01:f8:06:09:3b:e4:5f:
5e:24:00:af:cc:cf:b4:c6:30:00:b7:24:51:41:34:
12:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6B:3C:86:A5:EA:21:75:D5:17:2C:ED:5E:BD:44:B4:15:A7:9B:B1
X509v3 Authority Key Identifier:
keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b0:b9:a5:4c:cf:e8:87:38:73:a0:49:fd:18:d5:dd:72:4c:
8a:e9:c7:87:f2:b9:ff:de:b1:95:5f:c5:13:4a:64:b8:79:e0:
a3:75:23:7c:b3:11:fe:20:44:d8:22:e1:ed:da:b8:4d:b4:5f:
6d:0d:8d:88:39:b2:6c:6f:ef:e1:35:d4:b7:0f:5c:41:8a:30:
3a:f0:ab:03:a2:98:3f:3b:4b:65:b3:f5:07:0f:e1:e2:62:59:
e7:ac:27:67:98:58:05:db:a2:3a:0d:72:6a:d3:9d:d9:be:ab:
af:27:41:de:88:48:15:5d:cd:d1:1b:03:37:bd:27:da:5b:fb:
f4:82:97:2d:37:3f:9b:1d:cc:12:f5:a3:af:8e:b6:58:b7:18:
b0:22:9d:ff:65:8b:38:11:89:9c:76:73:af:2a:59:b3:24:b5:
5e:48:24:da:47:d1:2b:f7:a9:cf:25:9e:27:ec:2a:90:cc:32:
62:14:78:aa:e7:30:88:4d:75:36:16:74:52:e6:9f:7b:14:0e:
f8:f3:d4:0b:84:13:21:5c:fe:cb:59:02:29:0d:4e:6e:c2:d5:
e3:00:7a:69:63:5c:f1:db:6a:76:a4:42:04:1a:52:fc:f9:3f:
32:8a:a6:23:2a:b2:68:f3:e2:6f:b5:2b:b2:4a:f9:5b:9f:11:
bc:b4:8e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:34:03 2025 by rpki-client