Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
File: imlbOroepOZUeIxRZBRYzJlXgEA.mft (raw, json)
Hash identifier: BjFCZDdoPqZQ8roqY53nQ+tMnR/g3XZXI0pgtZs6fJM=
Subject key identifier: E0:AD:79:C3:BB:99:30:E2:8C:40:81:5B:35:6F:60:57:8F:45:F6:5C
Authority key identifier: 8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40
Certificate issuer: /CN=8a695b3aba1ea4e654788c51641458cc99578040
Certificate serial: 0198D6CD23DCC7807505FDA28A468BE3925F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 12:00:24 +0000
Manifest this update: Sat 23 Aug 2025 12:00:24 +0000
Manifest next update: Sun 24 Aug 2025 12:00:24 +0000
Files and hashes: 1: imlbOroepOZUeIxRZBRYzJlXgEA.crl (hash: K4fPrI1Sx5w+GswMiTpEpQgR28IO0odljfJ3l/n8H2Y=)
2: xXvpynv9RLlNuhH_ScFehFzRtz4.roa (hash: QSdQRW1EuXcu0ntbVvgh9fj5LXlqpMEhY2XBCGX6qp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:23:dc:c7:80:75:05:fd:a2:8a:46:8b:e3:92:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a695b3aba1ea4e654788c51641458cc99578040
Validity
Not Before: Aug 23 12:00:24 2025 GMT
Not After : Aug 24 12:00:24 2025 GMT
Subject: CN=e0ad79c3bb9930e28c40815b356f60578f45f65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:95:1b:cd:54:28:bc:ed:89:1d:e8:97:51:02:
26:3b:fd:63:e0:f7:bf:c4:65:4e:f2:b0:07:f5:e5:
3f:ec:8c:15:48:0e:f3:e6:42:71:14:e6:57:a9:5d:
76:b3:c0:b4:0b:c7:a1:54:81:ac:41:f7:9a:92:e5:
78:bf:3f:47:96:0b:ca:09:69:52:63:11:d8:84:5e:
09:a4:b6:34:46:7e:a7:3b:c3:80:96:b2:ba:13:54:
6e:f1:54:30:27:57:37:d8:b5:d7:2c:ef:43:ff:3a:
0c:b7:a8:f5:17:50:e9:8b:d8:25:0f:3e:20:c5:ce:
78:d4:4c:e3:a0:28:4b:9b:59:b0:f1:5b:44:7d:6a:
b0:86:7d:3d:41:16:2b:6f:6d:23:87:61:30:a1:70:
ba:a1:2d:99:4c:a4:08:48:6f:0e:5f:a0:2d:ac:c5:
d4:22:18:e7:4b:12:cd:61:06:d6:a3:13:ee:dc:41:
fe:6d:0e:46:a6:e4:44:ea:ff:1d:1e:17:3b:d4:14:
1a:f5:38:a2:b8:70:8f:11:51:2f:d7:f2:96:0e:09:
d3:e0:b2:ee:74:41:df:81:12:25:88:5c:13:8b:c1:
18:5f:80:5c:2e:2b:f2:bc:d2:b5:c0:25:13:72:e8:
91:26:eb:67:98:23:e7:99:d1:0d:00:6b:85:a1:43:
a1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AD:79:C3:BB:99:30:E2:8C:40:81:5B:35:6F:60:57:8F:45:F6:5C
X509v3 Authority Key Identifier:
keyid:8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:9c:3a:2d:c9:d1:99:f2:da:1e:04:68:af:2d:e0:f0:50:6a:
6e:b1:81:09:f6:3d:ea:8c:9b:f8:5a:67:48:e3:e8:cc:3b:99:
ce:63:20:7f:26:a2:31:95:a0:a3:2c:22:ed:f2:fa:43:da:96:
b6:de:1e:e9:b2:7a:04:19:19:0d:cd:69:e0:36:f1:08:ff:71:
7b:4c:73:74:4b:5b:c4:c4:08:fc:11:a7:be:76:a6:56:ec:b0:
fb:79:9c:f6:8e:43:2e:39:93:d8:85:24:7e:ae:e3:ce:ed:ee:
c1:0a:5f:74:2e:94:5f:e0:f1:c0:48:64:ee:2d:4b:95:a6:b8:
6d:1b:3f:d3:0d:a1:81:9f:f1:11:ba:03:6e:c2:01:8c:50:26:
0f:61:68:b4:1f:0d:3e:8e:da:d8:47:0c:35:9a:bb:0e:cd:ba:
95:71:5d:d7:08:be:01:b5:d2:5c:a2:75:05:60:95:84:02:39:
b9:23:27:a4:3b:0d:00:f1:4a:df:16:1a:d3:84:48:c9:ca:0d:
2b:ae:4a:de:a2:71:8e:d9:dc:f1:ab:1b:ed:8a:ed:46:0b:16:
3b:70:9c:53:57:04:2d:42:cd:db:58:70:b4:b4:ba:8b:e8:05:
77:7e:f4:43:98:6a:66:97:13:34:4a:e9:1b:c4:91:9d:f4:07:
ed:e1:b8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:24:32 2025 by rpki-client