Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
File: ImTYqhh4-dwUJNL9reQDnhINWxE.mft (raw, json)
Hash identifier: MSEiNFpj6u/7WLbNcjnR5M3zdMVpjk2qaylDrpTk3aA=
Subject key identifier: E5:FF:3F:BB:27:85:09:35:5B:17:17:02:FD:E9:E4:C1:AB:13:AC:23
Authority key identifier: 22:64:D8:AA:18:78:F9:DC:14:24:D2:FD:AD:E4:03:9E:12:0D:5B:11
Certificate issuer: /CN=2264d8aa1878f9dc1424d2fdade4039e120d5b11
Certificate serial: 019751212D2552BAFEA90870ED85A40B8AD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
Manifest number: 015D
Signing time: Sun 08 Jun 2025 20:00:18 +0000
Manifest this update: Sun 08 Jun 2025 20:00:18 +0000
Manifest next update: Mon 09 Jun 2025 20:00:18 +0000
Files and hashes: 1: FqDrfbDtI4Hs58fMgjUv81Cu_7g.roa (hash: EJb3Kv4NZ5uykz2bapaHUVNVx3Yhwe8+JKhWBXNnXgc=)
2: ImTYqhh4-dwUJNL9reQDnhINWxE.crl (hash: wUSd5sBMqx+Q1THyi4V8mk3MKS4bY+haS4JVSbS7Crw=)
3: ik9pAs-oXBS0l0utPLQdJhXZ5X0.roa (hash: LmKUQUveU3bNm/doGhpBXkqduAWf1pf1v3+L9U63Su8=)
4: uc150UpyVmM0lf0Kf7nSAGa2PLU.roa (hash: z6Z1141CZgjCa4I7tNTWjh0/Dh9WixbtG/HNloenv6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:2d:25:52:ba:fe:a9:08:70:ed:85:a4:0b:8a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2264d8aa1878f9dc1424d2fdade4039e120d5b11
Validity
Not Before: Jun 8 20:00:18 2025 GMT
Not After : Jun 9 20:00:18 2025 GMT
Subject: CN=e5ff3fbb278509355b171702fde9e4c1ab13ac23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4c:c0:71:b2:0c:e5:13:13:19:da:fe:f5:2c:
b9:e1:cd:4f:35:c4:65:75:9d:5b:af:41:f1:5d:f6:
55:29:5a:3a:20:93:5b:a1:91:c3:78:81:1c:77:5d:
ce:d6:81:81:5c:4b:29:9f:e5:c1:60:7d:1b:cf:d7:
aa:c0:1a:e3:34:f8:b3:5a:79:80:bb:66:d9:a3:00:
41:07:68:37:54:3e:45:17:0d:79:57:d9:4e:b6:11:
41:99:db:64:a9:ea:20:a7:10:3a:ba:59:10:1e:57:
1a:ad:95:af:59:0b:73:11:98:41:c6:25:75:70:d2:
42:79:1e:c5:d3:f6:b2:1d:39:e8:bc:9a:16:b4:51:
fd:e9:c7:55:b6:c9:0b:6e:73:77:b4:21:3a:ff:5a:
2f:21:01:b9:40:d8:31:92:2a:aa:55:3e:f0:cf:91:
52:ac:91:65:db:23:67:82:57:a1:7c:01:5b:dc:74:
20:1c:32:41:fd:30:54:a5:a4:42:ca:ce:ab:41:b5:
e4:0f:8d:2b:40:5b:59:64:c5:84:9c:e3:01:ee:d2:
7b:9c:4e:b5:08:52:4c:4c:73:ad:2f:c9:d0:17:9a:
80:c7:43:72:a6:98:b2:1c:11:3b:39:14:ec:4d:b0:
e3:7e:c1:5e:a7:ca:20:ac:a3:75:f9:a7:5b:b5:ac:
07:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FF:3F:BB:27:85:09:35:5B:17:17:02:FD:E9:E4:C1:AB:13:AC:23
X509v3 Authority Key Identifier:
keyid:22:64:D8:AA:18:78:F9:DC:14:24:D2:FD:AD:E4:03:9E:12:0D:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:67:6a:32:49:c4:ac:f0:06:2b:d5:3e:9f:3e:0b:2e:84:19:
e7:2a:1b:67:b2:91:a7:dd:ae:66:8a:47:11:6e:8f:3a:82:2f:
06:d6:8e:35:a6:50:dc:16:94:1a:7a:35:19:b0:21:08:6e:80:
f1:81:7b:35:b1:29:41:de:f1:7d:cf:3a:9c:23:67:bf:4c:e6:
ba:84:cd:9c:f3:ff:38:63:98:2b:df:c7:a8:9e:7f:f2:a1:85:
63:53:99:66:6e:72:37:b8:8e:2b:52:fa:77:87:04:2b:a1:e8:
1d:8b:43:ea:e9:5c:e9:41:9c:af:8a:21:58:35:cb:c1:f7:88:
0e:35:53:41:7f:31:55:7b:16:33:ae:9d:ce:f8:45:cc:f1:1e:
da:6e:fd:e4:9e:97:e4:b6:76:0a:cc:d5:18:cb:83:ca:8e:be:
3d:fa:45:89:2a:41:40:9b:b7:2d:65:50:ad:7b:db:a8:84:a0:
a3:72:31:61:13:51:da:cd:15:ef:cd:fb:a8:05:a5:d0:4d:71:
82:c4:98:96:ca:e3:85:c1:fb:fa:07:fb:ca:fa:77:b2:35:30:
7f:62:b4:d7:ce:80:9e:e0:73:e9:99:3e:0d:0b:ee:fa:99:a4:
1b:c1:13:c5:a6:8b:df:04:c1:9b:8a:7e:cb:be:ae:20:92:42:
e2:b9:88:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:07:02 2025 by rpki-client