Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
File: IMC5sz3OXroK6mSJFY0_snAirOc.mft (raw, json)
Hash identifier: mL7q5EwynHHBB4DyLn/2uwJswTvOzZ9HyHfdH/2MMAQ=
Subject key identifier: 26:0F:DD:DC:AA:AE:AC:1D:81:B9:66:60:46:46:04:8F:21:D9:FB:8E
Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Certificate serial: 019945865BC0FB4A181DC53A74240DF2B3FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
Manifest number: 0FAA
Signing time: Sun 14 Sep 2025 00:00:57 +0000
Manifest this update: Sun 14 Sep 2025 00:00:57 +0000
Manifest next update: Mon 15 Sep 2025 00:00:57 +0000
Files and hashes: 1: IMC5sz3OXroK6mSJFY0_snAirOc.crl (hash: a2JpeRp9GHHBYaPwKSoa4RX9qLyh64mdQb8wj56ay+8=)
2: _t0G-nTb4aukqy0OCUwpkcnZ1II.roa (hash: KNLLqIEJ5dlRl5uPgTAYCRT2GgZHFc+269aOuK3BWNQ=)
3: iIfA58agMV_RqJ74K2RRl6EqU28.roa (hash: lku32PUlX5LHQflLOMldhRZ2jvWTzkqH2DWG39ZWQfM=)
4: tPeq-jjd1LfJCGPS7kRFioCnf1s.roa (hash: IHjSVV+vrTNKBQIJ5PbeYeBS76QGn2Ghw7Cv5izSDhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:45:86:5b:c0:fb:4a:18:1d:c5:3a:74:24:0d:f2:b3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Validity
Not Before: Sep 14 00:00:57 2025 GMT
Not After : Sep 15 00:00:57 2025 GMT
Subject: CN=260fdddcaaaeac1d81b966604646048f21d9fb8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3f:04:b4:ff:33:4b:54:8b:f4:8b:2b:d5:71:
c6:d4:57:e1:72:88:6b:95:58:a6:b4:c4:ff:8e:bf:
58:a8:26:be:d8:ff:41:b5:c4:f5:29:f1:81:dd:bf:
45:67:c4:30:4f:43:91:e7:95:a5:1b:4a:19:fa:6f:
58:ac:08:41:34:e1:fa:b3:49:18:a0:33:3f:16:fd:
49:42:d2:7f:d2:49:e5:79:90:a4:66:c1:aa:8b:4a:
57:d7:ef:3f:70:a6:e6:f1:96:46:50:3a:3a:5d:dd:
9e:7c:ef:05:4d:a7:0b:17:a1:c4:05:74:aa:18:59:
de:ff:b2:36:0a:fb:57:f4:6f:46:8e:1b:07:8b:12:
6c:01:90:1a:38:19:05:0c:0b:58:0d:d5:44:d4:6f:
45:f4:6f:65:f7:44:8e:18:c2:8f:6a:55:26:c7:cd:
1e:21:fa:c6:e6:aa:d6:2c:d9:03:1c:82:c3:10:9f:
3d:08:b2:54:85:64:9b:d1:3d:18:51:b6:04:fd:03:
6e:76:bf:61:7e:8a:38:e3:81:a7:2b:88:21:07:3b:
de:ad:2c:2a:eb:cc:cd:1d:43:1b:2b:6b:9f:80:dd:
14:ed:c2:27:19:bb:cc:4f:b5:63:13:9d:43:52:57:
f9:d3:35:0e:eb:35:0f:09:11:a4:c3:bd:27:d4:d9:
b7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0F:DD:DC:AA:AE:AC:1D:81:B9:66:60:46:46:04:8F:21:D9:FB:8E
X509v3 Authority Key Identifier:
keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e3:50:a9:c3:5d:6d:e1:2b:0b:ab:28:5d:9d:cd:85:57:bb:
b8:28:07:3d:69:c6:5f:76:10:5d:d3:58:0c:ad:9a:2a:d7:62:
fd:af:1e:de:45:55:24:1f:a1:64:70:8e:79:36:b5:2a:c4:0f:
cc:de:a5:b9:64:e2:72:e5:da:aa:03:24:9c:8f:4f:42:50:ee:
d7:d7:3b:46:c5:6e:3d:9b:d3:f0:02:8b:38:12:d9:fa:93:6c:
ac:cd:68:07:02:7f:77:c2:3f:0e:de:01:16:bf:e1:e8:ce:8c:
a6:62:c8:c3:90:c6:16:59:1c:ad:8f:6f:c1:af:e9:02:89:0a:
15:f4:8b:a2:2c:7b:bd:43:c1:24:e2:70:9c:7a:b9:8e:be:89:
f6:b1:67:ff:01:b2:44:48:81:1d:54:bb:0c:8b:19:4a:43:4e:
f7:9c:26:1c:d5:cb:4c:d4:96:11:86:dd:e7:ea:bd:cc:4d:50:
b5:5b:8f:7f:58:83:4d:79:15:e0:3d:b2:ce:2f:90:2b:81:f0:
e2:e6:3e:00:2d:d7:76:33:61:c8:c4:96:b5:7d:4b:50:4f:9a:
66:48:1f:f4:8f:ca:00:ac:fd:04:ba:63:ef:8c:21:b4:60:a0:
73:de:63:de:93:23:83:27:04:8b:0f:b9:b9:ac:0a:24:4d:82:
ce:a5:76:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlFhlvA+0oYHcU6dCQN8rP+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYzBiOWIzM2RjZTVlYmEwYWVhNjQ4OTE1OGQzZmIyNzAy
MmFjZTcwHhcNMjUwOTE0MDAwMDU3WhcNMjUwOTE1MDAwMDU3WjAzMTEwLwYDVQQD
EygyNjBmZGRkY2FhYWVhYzFkODFiOTY2NjA0NjQ2MDQ4ZjIxZDlmYjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz8EtP8zS1SL9Isr1XHG1Ffhcohr
lVimtMT/jr9YqCa+2P9BtcT1KfGB3b9FZ8QwT0OR55WlG0oZ+m9YrAhBNOH6s0kY
oDM/Fv1JQtJ/0knleZCkZsGqi0pX1+8/cKbm8ZZGUDo6Xd2efO8FTacLF6HEBXSq
GFne/7I2CvtX9G9GjhsHixJsAZAaOBkFDAtYDdVE1G9F9G9l90SOGMKPalUmx80e
IfrG5qrWLNkDHILDEJ89CLJUhWSb0T0YUbYE/QNudr9hfoo444GnK4ghBzverSwq
68zNHUMbK2ufgN0U7cInGbvMT7VjE51DUlf50zUO6zUPCRGkw70n1Nm3OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYP3dyqrqwdgblmYEZGBI8h2fuOMB8GA1UdIwQY
MBaAFCDAubM9zl66CupkiRWNP7JwIqznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yMGJiNDktZTUwOS00YzdiLThlNWEt
OGQzZGNjMzNhZDBhLzEvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yMGJiNDktZTUwOS00YzdiLThlNWEtOGQzZGNjMzNhZDBh
LzEvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjuNQqcNd
beErC6soXZ3NhVe7uCgHPWnGX3YQXdNYDK2aKtdi/a8e3kVVJB+hZHCOeTa1KsQP
zN6luWTicuXaqgMknI9PQlDu19c7RsVuPZvT8AKLOBLZ+pNsrM1oBwJ/d8I/Dt4B
Fr/h6M6MpmLIw5DGFlkcrY9vwa/pAokKFfSLoix7vUPBJOJwnHq5jr6J9rFn/wGy
REiBHVS7DIsZSkNO95wmHNXLTNSWEYbd5+q9zE1QtVuPf1iDTXkV4D2yzi+QK4Hw
4uY+AC3XdjNhyMSWtX1LUE+aZkgf9I/KAKz9BLpj74whtGCgc95j3pMjgycEiw+5
uawKJE2CzqV2dA==
-----END CERTIFICATE-----
Generated at Sun Sep 14 01:56:23 2025 by rpki-client