Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
File: IMC5sz3OXroK6mSJFY0_snAirOc.mft (raw, json)
Hash identifier: Gukghzdw7/+UnhXzLVgYIka1owLjVFjAw4GN86x5FOA=
Subject key identifier: C4:A8:48:09:82:E5:3E:95:FA:2A:C8:A9:1A:B2:F1:AE:4B:A1:76:9B
Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Certificate serial: 019A72CA464EF6DF44B1FC9BAB48F0D9E452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
Manifest number: 1046
Signing time: Tue 11 Nov 2025 12:00:50 +0000
Manifest this update: Tue 11 Nov 2025 12:00:50 +0000
Manifest next update: Wed 12 Nov 2025 12:00:50 +0000
Files and hashes: 1: IMC5sz3OXroK6mSJFY0_snAirOc.crl (hash: tukNmrWJ0f+/jqv3DCe8YERBxnjs6wxyIHolvem/7i8=)
2: _t0G-nTb4aukqy0OCUwpkcnZ1II.roa (hash: KNLLqIEJ5dlRl5uPgTAYCRT2GgZHFc+269aOuK3BWNQ=)
3: iIfA58agMV_RqJ74K2RRl6EqU28.roa (hash: lku32PUlX5LHQflLOMldhRZ2jvWTzkqH2DWG39ZWQfM=)
4: tPeq-jjd1LfJCGPS7kRFioCnf1s.roa (hash: IHjSVV+vrTNKBQIJ5PbeYeBS76QGn2Ghw7Cv5izSDhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:46:4e:f6:df:44:b1:fc:9b:ab:48:f0:d9:e4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Validity
Not Before: Nov 11 12:00:50 2025 GMT
Not After : Nov 12 12:00:50 2025 GMT
Subject: CN=c4a8480982e53e95fa2ac8a91ab2f1ae4ba1769b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5d:40:e7:6d:44:2e:08:9e:c3:f5:7f:28:40:
83:7d:09:81:a2:7a:03:90:f0:53:28:f9:f1:72:f3:
4e:bc:c1:48:97:9d:1d:4c:07:e1:d1:63:7a:1d:d2:
74:3a:a4:fb:00:7c:91:20:35:3c:51:72:cf:c1:d9:
e1:50:0a:d4:ce:c3:b5:fa:14:f0:5f:d3:0b:20:3b:
d7:52:d3:25:f2:53:73:41:2d:71:93:27:7a:31:68:
54:d4:ad:bd:f0:88:45:80:70:3c:48:6b:76:86:f7:
6b:9f:99:27:3d:14:24:1f:6e:62:b5:42:dc:f4:32:
f7:b0:73:dc:2f:c8:fd:43:ba:79:0b:58:6f:1c:6e:
38:15:bf:d5:32:2e:c2:91:b9:af:86:31:1b:34:7e:
ae:84:44:12:6b:65:76:77:c9:22:78:fa:1b:e8:04:
dc:e3:9e:16:31:f2:9e:8e:d5:8d:24:50:3a:d5:e1:
9d:cc:fb:95:f8:35:35:0c:7e:64:8a:3d:c6:c3:8a:
23:56:d9:31:c7:bb:56:7f:2a:99:a9:2d:5d:1b:37:
d4:43:62:db:6b:1f:e6:d5:74:6f:a4:1c:60:cd:80:
e9:a2:9d:9d:23:f5:56:19:ad:01:91:27:77:b4:8e:
a8:3a:a5:ca:2a:48:e7:bd:8a:52:96:94:27:61:c2:
8d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A8:48:09:82:E5:3E:95:FA:2A:C8:A9:1A:B2:F1:AE:4B:A1:76:9B
X509v3 Authority Key Identifier:
keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:08:f0:55:7e:8e:56:23:29:3b:1d:7a:34:a0:02:2b:a5:b9:
80:75:6e:83:47:6a:bb:01:ac:b1:98:79:bf:7c:b5:6d:7d:8c:
76:9f:2a:55:1c:72:65:ea:08:d8:a5:9a:4b:4b:c6:89:3b:a7:
8b:2b:db:8c:2e:30:0c:8a:cb:86:8f:c5:f4:b1:0b:31:c4:59:
18:95:4b:f5:5b:bc:b1:26:c4:e1:a4:75:54:3a:f4:a1:d5:cc:
e0:92:28:40:d9:86:05:9a:bd:32:1c:20:ef:1b:09:d7:ae:49:
d9:db:51:c3:57:f0:67:7d:e6:93:a2:9c:a7:7b:ef:dc:ae:f7:
95:24:22:13:ec:1f:9a:48:67:09:4a:71:0b:60:f3:74:7f:c7:
61:4c:9f:25:cf:c9:34:0c:de:b9:8c:ee:bf:d1:0e:6c:f2:4d:
54:50:34:2f:4e:68:c0:0c:55:ec:fd:e4:8a:cc:5c:4d:a5:d3:
2b:0c:ac:1a:d8:30:05:f1:d7:d4:71:64:10:68:26:c4:ba:a4:
a8:8f:40:86:34:76:4a:ee:a8:4d:d7:3e:26:fe:0f:f9:66:fa:
4c:81:d0:49:28:b6:58:c9:31:f4:b9:59:0a:8f:89:c5:3d:66:
d8:01:6e:b4:81:f7:5f:c5:61:50:88:5e:3c:ee:8d:cb:b8:47:
9b:c3:9c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:37 2025 by rpki-client