Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
File: ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft (raw, json)
Hash identifier: JTwSQSDpfze2Ca71qYuv9sKZB+IWPPE3esjTevHivCc=
Subject key identifier: 45:DA:3E:98:FE:22:91:CC:AE:EE:58:36:A7:AF:B0:A4:A6:56:70:73
Authority key identifier: 22:6A:87:21:6D:7E:3C:59:31:5F:77:8B:2C:8F:4A:9E:F4:78:B9:3E
Certificate issuer: /CN=226a87216d7e3c59315f778b2c8f4a9ef478b93e
Certificate serial: 0197B8FD02AB32C238FDD175B647630E7C26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
Manifest number: 08D6
Signing time: Sun 29 Jun 2025 00:01:18 +0000
Manifest this update: Sun 29 Jun 2025 00:01:18 +0000
Manifest next update: Mon 30 Jun 2025 00:01:18 +0000
Files and hashes: 1: ImqHIW1-PFkxX3eLLI9KnvR4uT4.crl (hash: 1IHMKZHl5oe1MQ/1da7V9QrmgySfqCMR9zDbDxpupv4=)
2: LmHDwcZ0P773I2DpMatr3rQ-X-8.roa (hash: 5kJqTJl/6GtvZrCUi8E6q77SOJaK4OPEzeCstrG7klc=)
3: T1Y1gDousbxvwwsbtZaj-joDVoU.roa (hash: q7TNUs0D+VmakPZEeRGmF+IIFBvhiGx/mkCVwJhSBnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:02:ab:32:c2:38:fd:d1:75:b6:47:63:0e:7c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=226a87216d7e3c59315f778b2c8f4a9ef478b93e
Validity
Not Before: Jun 29 00:01:18 2025 GMT
Not After : Jun 30 00:01:18 2025 GMT
Subject: CN=45da3e98fe2291ccaeee5836a7afb0a4a6567073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:31:03:65:31:40:b4:cb:10:77:a9:63:b2:58:
cc:9e:b2:92:c5:18:d2:27:11:c2:e3:78:83:b2:bd:
a0:c4:e6:9e:9a:2e:7a:e0:32:bf:33:11:71:50:b8:
91:f9:39:26:8e:bc:ab:1c:e4:b9:8c:1b:49:61:70:
48:8d:9d:70:79:b1:37:ac:96:7f:09:67:36:e5:37:
bc:4c:cb:2b:cc:0f:15:60:75:9b:65:a5:b9:0c:09:
3c:02:e7:ac:ca:e4:48:78:54:91:5a:02:27:b5:c8:
16:9f:5e:ce:66:5f:5b:05:6e:c0:c9:a3:a6:81:01:
01:eb:e5:ee:84:3f:43:3d:dd:5f:bb:1b:09:40:75:
4c:3a:f8:d7:49:46:9b:84:e4:47:fd:4d:83:8e:ca:
00:a9:d5:c3:26:bf:f6:a3:9a:fb:e1:37:a1:7b:7a:
db:29:94:f3:39:25:23:e0:59:b1:69:cd:53:ee:db:
c1:d2:b3:f8:81:39:da:ce:c2:14:03:7b:f8:8a:ce:
95:60:04:d0:ef:69:57:13:4d:d8:15:10:d8:2f:ff:
94:7c:67:5c:4d:ed:ea:f7:73:23:3a:6f:52:f3:f6:
33:d9:0d:5c:78:4d:ab:e0:d4:55:a3:a7:41:f6:f9:
20:1a:a1:30:2d:f5:d0:06:1a:4e:37:1f:76:6c:7a:
92:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DA:3E:98:FE:22:91:CC:AE:EE:58:36:A7:AF:B0:A4:A6:56:70:73
X509v3 Authority Key Identifier:
keyid:22:6A:87:21:6D:7E:3C:59:31:5F:77:8B:2C:8F:4A:9E:F4:78:B9:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:08:0d:b0:02:8b:1b:4a:23:9a:16:f3:31:79:04:bb:45:e8:
41:d0:af:b6:a2:13:eb:c8:74:8f:22:46:07:47:d8:e3:d0:b3:
07:de:47:1f:c1:e5:4c:9a:26:14:d4:0e:62:38:77:e1:85:1b:
56:f8:36:92:92:b9:2e:67:2b:fa:7b:2a:30:44:4d:ae:d6:62:
f0:d3:35:68:b7:fb:19:f5:99:d1:4b:10:e6:52:14:34:6a:d4:
4f:9a:1b:fa:cb:f5:7a:13:1a:e1:d2:33:80:77:ea:ca:b4:df:
a4:ca:a5:50:c2:45:ba:3a:21:4c:f3:5b:23:39:2e:e9:c2:78:
fa:62:01:e4:20:c0:1b:32:8c:be:0a:5f:7b:84:e1:f3:e8:e8:
68:0f:f6:5b:81:fa:7f:b6:a3:dc:af:15:21:df:bc:15:e6:a2:
b4:ca:38:22:e5:71:42:f3:99:39:2b:2e:a6:07:62:c3:29:dc:
ee:a7:79:5d:56:c3:74:24:67:58:d1:9c:48:5d:68:72:5e:c4:
9c:6d:d6:c1:5b:63:06:f8:db:9b:0a:45:c1:8e:05:68:cc:ed:
a1:ca:ea:f5:2c:86:99:5b:7c:10:ea:72:92:ff:48:36:35:85:
39:5e:9c:1c:b2:9e:2b:25:51:13:34:ad:14:ea:c0:ac:11:9e:
5f:ce:2b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:29:24 2025 by rpki-client