Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
File: IMXuAtLgWGHdkG_gazhE8E03jHM.mft (raw, json)
Hash identifier: mzRjnUvdGntqKR1hJXFIsjmc7lIcX7xG2wQj5CNE4zo=
Subject key identifier: 7B:2D:9C:B1:10:6B:87:AE:F3:C6:4E:A0:31:CD:AF:8F:CD:22:9C:35
Authority key identifier: 20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73
Certificate issuer: /CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
Certificate serial: 019761DDF885E8D37744F2A5EE8105556738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
Manifest number: 0452
Signing time: Thu 12 Jun 2025 02:00:26 +0000
Manifest this update: Thu 12 Jun 2025 02:00:26 +0000
Manifest next update: Fri 13 Jun 2025 02:00:26 +0000
Files and hashes: 1: 7xOhUPHtrbr-aDnyk2sqIXaZxmE.roa (hash: kq8yM7VvfoH1+ATjkQ5zBAmoZIPQA7DySnzjc28AM7I=)
2: EO7_sAa5INTWdb0sB8KoIZTsSpE.roa (hash: SZljpS9Me6EqFyINGEQdOy6JlEANEGEhl0H6HmWV3fM=)
3: IMXuAtLgWGHdkG_gazhE8E03jHM.crl (hash: 8VrXtXYTqUARLGsACuwe3jOOaVcQYzniYNEbhVjG30s=)
4: Wr8EOmHckxzTGd0Aamj6K9DADdU.roa (hash: OPshObN2z5FsqJnygnFeWGUMJE0uYykW0pM3DUOjmQQ=)
5: YqXOQdzyJGKEIsRRKloxLXSE6Ms.roa (hash: oxg1KeTKZ090F7XaYRFBJpN4jEk7flH1GMsXEE67BF0=)
6: wS-ZYWnE9Zk6DJUs3sCV5yBn3ak.roa (hash: 4bRb80RRs/QoIhxBs4Ime6HGYShS2787nhwQD+lr7Xw=)
7: wnHzclbUTpmI2i25YXVP3hxML5Y.roa (hash: aE81auZ0/hL8t66uhuMDoL2Ds7gb0agCHWXH7RqZEB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:dd:f8:85:e8:d3:77:44:f2:a5:ee:81:05:55:67:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
Validity
Not Before: Jun 12 02:00:26 2025 GMT
Not After : Jun 13 02:00:26 2025 GMT
Subject: CN=7b2d9cb1106b87aef3c64ea031cdaf8fcd229c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ec:ac:c6:a8:fc:fb:f5:11:1a:0d:7d:3e:24:
21:d3:ee:74:ed:da:57:de:bd:8a:35:0f:4e:2a:31:
24:63:77:56:49:95:7c:53:06:a5:9d:a7:99:f7:44:
ec:ae:8c:f2:dd:2d:dc:3a:f8:e9:ce:ab:d3:70:87:
8b:9a:7a:b9:51:37:8a:15:6a:32:1e:98:15:54:94:
42:42:b7:07:35:55:e4:f4:33:23:1f:50:a8:d4:fd:
f3:cf:a5:22:d0:b3:f3:47:d9:69:08:3c:b9:72:95:
72:72:d8:9c:82:39:61:8f:56:60:ad:f7:f9:fa:35:
a4:fc:9e:67:bd:0f:c0:e9:33:df:77:c1:1c:74:8a:
19:f5:2f:e5:81:85:ce:5f:5e:76:bb:d2:1d:25:66:
ff:20:00:a0:f2:67:72:e0:11:e9:66:7e:da:d0:da:
0c:e2:a5:eb:03:fa:c7:3b:ab:aa:c1:79:c0:5b:15:
4f:96:09:43:c4:90:93:97:61:18:e4:3d:2f:09:7c:
1c:2d:3f:40:2a:51:63:6e:73:c6:ec:df:74:4d:5c:
8f:36:09:da:79:75:a6:d3:94:7c:eb:19:38:fe:dd:
23:09:a6:8f:7a:b8:48:b3:67:3f:59:11:1d:a3:88:
75:6c:5e:6f:a5:5c:f1:13:d0:74:21:30:05:86:c6:
86:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2D:9C:B1:10:6B:87:AE:F3:C6:4E:A0:31:CD:AF:8F:CD:22:9C:35
X509v3 Authority Key Identifier:
keyid:20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:2a:b6:90:80:13:f9:8d:b9:57:31:e5:b5:e7:2c:0f:76:bf:
15:a4:a8:bf:b4:0d:5f:25:4e:ae:c4:da:5f:43:74:de:d4:81:
e2:21:5d:a0:9f:1c:bc:c9:2b:71:35:6d:cb:b0:6e:6b:b7:fc:
ee:53:09:0e:67:83:57:5d:9d:bf:da:8c:87:9f:87:9e:dd:ad:
89:50:ad:11:17:68:f3:25:38:c3:b7:83:5a:9c:0a:a1:9d:12:
23:2b:f9:54:d5:44:9f:94:d7:27:00:29:ad:88:9e:cf:4a:79:
2f:70:64:c1:6e:10:54:cd:09:83:9f:97:29:e4:0b:45:14:7d:
2a:1d:3b:87:44:ff:f5:1b:84:a8:7a:d6:f7:22:40:3e:d1:25:
4b:dc:b3:0d:3b:20:88:49:7f:95:5d:c2:3d:76:b9:56:ad:14:
34:03:58:35:81:2b:e9:ad:68:b0:62:cc:e9:49:96:c6:60:dc:
1f:f4:1e:c1:d4:4b:7e:96:f8:9d:06:dd:c6:c0:e4:b9:87:86:
c3:93:67:95:79:36:ce:6c:a6:7f:cd:da:9c:1b:c4:3b:8d:c4:
b2:b8:e0:4d:df:47:d9:b3:06:cc:72:b8:d1:f6:ec:1b:04:39:
50:c6:a6:88:95:68:ca:ef:7b:00:45:f5:7a:cf:e6:de:d5:f8:
cd:4c:4c:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdh3fiF6NN3RPKl7oEFVWc4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYzVlZTAyZDJlMDU4NjFkZDkwNmZlMDZiMzg0NGYwNGQz
NzhjNzMwHhcNMjUwNjEyMDIwMDI2WhcNMjUwNjEzMDIwMDI2WjAzMTEwLwYDVQQD
Eyg3YjJkOWNiMTEwNmI4N2FlZjNjNjRlYTAzMWNkYWY4ZmNkMjI5YzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueysxqj8+/URGg19PiQh0+507dpX
3r2KNQ9OKjEkY3dWSZV8UwalnaeZ90Tsrozy3S3cOvjpzqvTcIeLmnq5UTeKFWoy
HpgVVJRCQrcHNVXk9DMjH1Co1P3zz6Ui0LPzR9lpCDy5cpVycticgjlhj1Zgrff5
+jWk/J5nvQ/A6TPfd8EcdIoZ9S/lgYXOX152u9IdJWb/IACg8mdy4BHpZn7a0NoM
4qXrA/rHO6uqwXnAWxVPlglDxJCTl2EY5D0vCXwcLT9AKlFjbnPG7N90TVyPNgna
eXWm05R86xk4/t0jCaaPerhIs2c/WREdo4h1bF5vpVzxE9B0ITAFhsaGJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHstnLEQa4eu88ZOoDHNr4/NIpw1MB8GA1UdIwQY
MBaAFCDF7gLS4Fhh3ZBv4Gs4RPBNN4xzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU1YdUF0TGdXR0hka0dfZ2F6aEU4RTAzakhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85NzkyOTYtZWY3YS00YmFjLThjMTUt
Njc3NzEzNTlhMmIzLzEvSU1YdUF0TGdXR0hka0dfZ2F6aEU4RTAzakhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC85NzkyOTYtZWY3YS00YmFjLThjMTUtNjc3NzEzNTlhMmIz
LzEvSU1YdUF0TGdXR0hka0dfZ2F6aEU4RTAzakhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJSq2kIAT
+Y25VzHltecsD3a/FaSov7QNXyVOrsTaX0N03tSB4iFdoJ8cvMkrcTVty7Bua7f8
7lMJDmeDV12dv9qMh5+Hnt2tiVCtERdo8yU4w7eDWpwKoZ0SIyv5VNVEn5TXJwAp
rYiez0p5L3BkwW4QVM0Jg5+XKeQLRRR9Kh07h0T/9RuEqHrW9yJAPtElS9yzDTsg
iEl/lV3CPXa5Vq0UNANYNYEr6a1osGLM6UmWxmDcH/QewdRLfpb4nQbdxsDkuYeG
w5NnlXk2zmymf83anBvEO43EsrjgTd9H2bMGzHK40fbsGwQ5UMamiJVoyu97AEX1
es/m3tX4zUxMug==
-----END CERTIFICATE-----
Generated at Thu Jun 12 10:37:02 2025 by rpki-client