Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
File: imBgNTuY9TMW0CL6AdKZ11__ItY.mft (raw, json)
Hash identifier: 9ayhU77JudEhdGj7jsn0jk14QXWFtTb4YvN2Z948Ifo=
Subject key identifier: 6D:50:6F:0E:8A:1A:63:45:96:2D:05:01:C0:62:28:EC:CF:9D:55:B3
Authority key identifier: 8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
Certificate issuer: /CN=8a6060353b98f53316d022fa01d299d75fff22d6
Certificate serial: 019918AD92BA521B19132CDABCB445562262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
Manifest number: 039C
Signing time: Fri 05 Sep 2025 07:00:52 +0000
Manifest this update: Fri 05 Sep 2025 07:00:52 +0000
Manifest next update: Sat 06 Sep 2025 07:00:52 +0000
Files and hashes: 1: 053VQxunxAeUFWyp53gx-beqwOw.roa (hash: 7JicntomGJy1FdKv/+65cawmZt1C37Ox3QqgLF1dC6U=)
2: imBgNTuY9TMW0CL6AdKZ11__ItY.crl (hash: 8VWbSSvaMw1k4iZGglOjFIb2tYv8u3Dalrhh2DLVLGs=)
3: sY_8uI_Vy_Kyk6ImGlPdHmVKVYk.roa (hash: NexMNxJOVKLfI4XsOD08LdcHHjE/wZ9FYtwH9p7yFUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:ad:92:ba:52:1b:19:13:2c:da:bc:b4:45:56:22:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6060353b98f53316d022fa01d299d75fff22d6
Validity
Not Before: Sep 5 07:00:52 2025 GMT
Not After : Sep 6 07:00:52 2025 GMT
Subject: CN=6d506f0e8a1a6345962d0501c06228eccf9d55b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7e:c0:67:4c:b7:f2:21:3e:7e:de:e7:1a:98:
31:b5:d3:1d:34:21:07:ca:6e:48:0f:a4:97:6d:e2:
22:40:5f:98:71:1b:69:45:90:0b:db:6d:00:42:16:
d9:b3:37:14:fe:87:31:3d:5f:18:b4:db:b0:f7:df:
51:5b:c7:66:ab:a7:bf:d2:43:36:e4:d8:c0:99:4f:
52:88:f7:b7:44:98:bd:f6:40:37:bf:8b:14:b8:7d:
34:d6:4f:0e:bd:0b:71:23:5b:9d:19:6e:8e:70:ba:
8a:39:4d:90:b7:e0:cd:36:ce:86:9d:e0:b1:20:7d:
2c:78:e2:0b:0d:e3:3d:a5:2c:8d:21:1a:cf:8c:08:
bb:6e:69:e7:f4:c2:76:11:ac:79:18:0d:30:4e:fe:
59:fb:75:37:17:77:16:7b:ba:06:56:57:9d:a8:15:
24:67:ff:33:5c:60:a6:5d:b7:0a:fd:0a:7f:f4:be:
e6:68:d4:fb:96:41:c3:b2:71:f9:18:d4:3c:60:2b:
2d:ba:d5:2e:9f:7c:8b:4d:04:a3:12:c5:18:0d:57:
ed:ad:5f:d6:1e:5f:b2:c8:d3:74:43:c7:7c:51:ab:
51:46:73:4d:0f:45:40:cd:38:cc:a3:7c:e7:8f:74:
80:74:b9:6f:b6:11:18:3b:42:b1:2a:73:e5:17:83:
d8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:50:6F:0E:8A:1A:63:45:96:2D:05:01:C0:62:28:EC:CF:9D:55:B3
X509v3 Authority Key Identifier:
keyid:8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:06:3f:63:68:c5:fb:d3:3e:a0:68:33:d4:97:40:bb:9c:45:
19:14:0b:b6:4a:ba:6b:0c:7b:06:3f:fd:bf:7c:17:91:48:28:
e9:cd:c1:fe:62:ce:65:c5:53:6c:65:df:98:d5:23:1f:f8:f3:
3f:f5:aa:ec:99:ae:02:2d:06:b3:de:e3:a3:6d:ba:c0:7f:69:
27:e9:33:8f:40:8d:c1:1c:3b:74:e9:64:5e:41:4f:7d:53:a4:
f6:51:e2:92:2d:a6:0a:7c:f2:11:bb:a9:48:16:d4:01:25:43:
3a:39:55:e6:f4:79:c5:a0:1d:8e:2f:97:f7:79:99:76:3f:84:
38:ae:d9:a9:91:3d:ae:9b:30:20:ec:7f:d2:44:74:d6:92:6d:
f5:a9:b1:eb:80:b1:70:ff:29:f1:cf:c9:14:85:48:ae:33:9d:
15:52:6f:a9:44:68:23:29:a8:c6:fb:44:2a:c8:2f:c1:ff:ba:
51:56:86:61:99:e9:59:ff:02:80:24:85:8e:94:12:89:54:94:
dd:18:81:85:43:4c:f8:87:5a:77:cf:b2:1f:da:3c:37:16:ca:
26:b8:d9:83:e4:ee:55:05:00:1c:bf:15:9c:1a:b0:c2:2b:26:
f2:ef:ad:b8:cf:16:65:b5:1d:52:4a:2d:6c:df:50:4b:a8:50:
b5:20:92:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 11:24:29 2025 by rpki-client