Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
File: imBgNTuY9TMW0CL6AdKZ11__ItY.mft (raw, json)
Hash identifier: XbqJv/0Dt9ZW0HqdadTIuQHlifb+Wov/MIjkzlLu8EU=
Subject key identifier: 8E:FA:69:74:43:E0:2D:9B:4D:05:19:06:7F:29:83:3D:FF:47:EF:9A
Authority key identifier: 8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
Certificate issuer: /CN=8a6060353b98f53316d022fa01d299d75fff22d6
Certificate serial: 019743660F7B6AC14B74FEC22EB05DF352E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
Manifest number: 02A9
Signing time: Fri 06 Jun 2025 04:00:51 +0000
Manifest this update: Fri 06 Jun 2025 04:00:51 +0000
Manifest next update: Sat 07 Jun 2025 04:00:51 +0000
Files and hashes: 1: 053VQxunxAeUFWyp53gx-beqwOw.roa (hash: 7JicntomGJy1FdKv/+65cawmZt1C37Ox3QqgLF1dC6U=)
2: imBgNTuY9TMW0CL6AdKZ11__ItY.crl (hash: mlUWVUuLcYnD6mbe6euU1sqbaR8aSDUdWzQHCSVVUyI=)
3: sY_8uI_Vy_Kyk6ImGlPdHmVKVYk.roa (hash: NexMNxJOVKLfI4XsOD08LdcHHjE/wZ9FYtwH9p7yFUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:43:66:0f:7b:6a:c1:4b:74:fe:c2:2e:b0:5d:f3:52:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6060353b98f53316d022fa01d299d75fff22d6
Validity
Not Before: Jun 6 04:00:51 2025 GMT
Not After : Jun 7 04:00:51 2025 GMT
Subject: CN=8efa697443e02d9b4d0519067f29833dff47ef9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fe:c4:ab:e3:cb:88:52:47:46:00:e9:7c:18:
fb:49:b7:cb:db:d7:f4:8b:c8:3d:92:08:dd:49:c7:
37:ae:69:4e:e2:3c:37:b4:7f:2f:97:2b:72:44:06:
db:ba:63:06:a0:76:8c:0d:7a:98:0a:b6:c3:be:49:
d5:d2:7e:e2:84:77:69:40:55:08:27:89:c6:95:3d:
68:af:5c:0c:9b:bd:b1:a6:6f:8e:20:62:81:ca:9f:
a2:e2:81:10:d3:19:0d:00:17:72:dd:20:7b:65:12:
b7:36:e5:3a:b0:9e:28:26:df:ec:fc:bb:49:33:73:
15:82:2a:5a:12:6b:ad:d9:d0:63:85:0d:18:af:87:
a4:13:e5:e7:53:30:91:6f:88:a1:6a:24:80:fb:da:
91:4e:aa:87:0b:04:1e:a7:1f:83:8d:11:6c:e5:c4:
34:57:7a:f1:26:db:fd:98:31:b8:35:68:ac:fe:fa:
a8:f9:4d:cf:c1:fd:75:28:d3:da:e6:94:3b:b4:e1:
1e:9a:2e:45:30:01:0c:ff:aa:99:c3:35:f6:ab:38:
ff:29:25:e1:16:00:de:06:81:c0:19:74:a4:f3:9f:
37:be:1b:fe:ca:1a:9f:87:91:d8:a6:72:75:00:7d:
4e:e3:83:d8:75:5d:10:b0:73:49:15:57:1e:43:2b:
50:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FA:69:74:43:E0:2D:9B:4D:05:19:06:7F:29:83:3D:FF:47:EF:9A
X509v3 Authority Key Identifier:
keyid:8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:7b:ee:c4:c5:db:35:90:6f:ec:ec:8a:ea:36:6f:80:6c:fe:
ca:65:d5:c4:f9:ec:e8:5c:e1:f3:f8:67:81:58:b4:22:42:af:
ef:d5:6f:33:9f:bb:51:ed:74:30:0e:a5:1f:e9:ca:c0:50:83:
6d:14:14:f7:12:02:b3:7c:6f:e7:ed:bb:e7:13:8a:e2:49:a6:
eb:37:c8:19:63:67:61:7c:4b:9c:75:ff:d3:01:8c:d8:bd:33:
e0:7d:f3:80:b1:7f:d2:1c:37:5f:0c:e9:f8:93:41:17:80:7e:
67:dc:09:83:f2:e3:a5:9a:3b:b7:6c:f9:6c:75:3d:9c:6a:f3:
92:4b:dc:57:39:1b:14:19:56:1a:0d:46:5b:78:c3:4c:05:30:
29:39:72:dc:45:2d:bd:a9:e2:5b:eb:2a:7d:91:33:06:b0:c9:
80:b0:4f:a6:08:89:e6:a4:7e:ae:e8:06:68:fb:67:62:3e:f8:
ca:34:d7:11:35:58:db:8a:73:fa:81:06:ad:29:c2:ee:8d:ca:
3c:77:05:2b:51:38:ca:ce:1d:16:2d:a2:a3:16:24:66:50:e6:
0f:29:cb:b3:e4:75:8d:26:9e:78:17:6a:66:bc:11:40:04:f8:
3e:9f:ad:c0:92:b9:3e:98:47:82:36:79:0c:95:7e:45:63:01:
b0:6e:7b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 10:59:56 2025 by rpki-client