Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
File: imo0EVg-JhQzSS5QR88xxGw9LB0.mft (raw, json)
Hash identifier: 1bpy62KlrXaggh3hF3KzabPWtRXdupui5SG55vJx1a8=
Subject key identifier: CC:3D:0E:EB:4B:EE:85:57:10:E4:67:09:35:40:66:04:BE:AC:24:FE
Authority key identifier: 8A:6A:34:11:58:3E:26:14:33:49:2E:50:47:CF:31:C4:6C:3D:2C:1D
Certificate issuer: /CN=8a6a3411583e261433492e5047cf31c46c3d2c1d
Certificate serial: 0197B7EA4A1EAA5EA4E54CB49FA714468326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 19:01:14 +0000
Manifest this update: Sat 28 Jun 2025 19:01:14 +0000
Manifest next update: Sun 29 Jun 2025 19:01:14 +0000
Files and hashes: 1: imo0EVg-JhQzSS5QR88xxGw9LB0.crl (hash: s0SlFEINDGO8uU1ty/WTk8OEqoRN187k7cvZcxDrqLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:4a:1e:aa:5e:a4:e5:4c:b4:9f:a7:14:46:83:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6a3411583e261433492e5047cf31c46c3d2c1d
Validity
Not Before: Jun 28 19:01:14 2025 GMT
Not After : Jun 29 19:01:14 2025 GMT
Subject: CN=cc3d0eeb4bee855710e4670935406604beac24fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fd:3c:5a:a8:6f:d9:de:7b:d0:20:28:b8:ff:
5b:23:56:a3:57:a7:dc:0e:a5:fd:c5:74:52:80:ee:
76:80:36:56:bc:74:8f:92:71:3a:0d:c2:d6:56:ad:
ae:a7:c1:92:a2:49:3a:15:e8:d4:2d:5e:83:80:79:
c2:53:d7:0c:c9:27:ff:54:e2:1d:bf:90:26:e5:af:
2c:9e:b0:2b:0e:ea:07:c9:0b:e1:c3:0f:f6:f7:36:
6c:b0:28:79:ac:df:ca:d8:72:62:8f:49:c5:98:85:
76:f4:67:30:86:ee:61:ea:80:1e:cc:08:2b:3f:f3:
d3:d7:66:8e:6e:4a:f4:39:0a:a5:72:23:0d:37:54:
66:5e:13:91:dc:ff:e5:ce:f6:b3:64:d9:8b:ac:c7:
81:7a:90:9c:02:3a:38:11:6d:14:8f:27:08:c8:ce:
e9:25:82:de:10:9d:8e:92:f6:67:6b:87:0c:d8:10:
e9:a0:cb:5b:3e:04:9a:d9:94:31:23:de:04:3b:76:
12:64:b1:25:7f:72:f6:5a:9f:55:ab:f2:bf:28:32:
90:84:13:89:19:71:56:6a:e3:bc:a9:84:5f:a2:95:
3a:ef:79:8d:2d:53:b5:c3:62:3c:92:6d:e8:f8:a5:
16:2d:b2:78:e4:71:c2:b7:5f:78:f3:b1:63:c1:5b:
85:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3D:0E:EB:4B:EE:85:57:10:E4:67:09:35:40:66:04:BE:AC:24:FE
X509v3 Authority Key Identifier:
keyid:8A:6A:34:11:58:3E:26:14:33:49:2E:50:47:CF:31:C4:6C:3D:2C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:29:f5:8f:28:c2:48:4e:6f:8e:3d:cf:1f:42:d1:46:9c:d8:
c7:5c:c6:b6:6e:cb:44:c6:0f:3a:7d:f4:7f:5b:66:52:5d:5b:
a6:bc:aa:7c:fd:5d:ff:15:44:d1:7f:2d:9b:3d:b5:e4:7f:70:
6c:de:12:da:ba:db:93:97:e8:bb:f8:a8:6b:14:f8:f0:1a:00:
3a:56:5b:21:74:c1:e3:15:48:bd:bf:bc:ad:f8:3a:d5:28:6e:
e1:bf:b2:42:6f:02:bb:e4:0b:8e:2a:0c:d8:c0:bb:50:81:f2:
2f:9f:34:80:15:57:8d:63:99:25:87:01:b9:29:28:7c:65:3a:
ce:62:a0:23:c0:96:7a:25:ea:06:e3:1e:8a:20:73:97:44:36:
de:bc:08:68:61:cc:d9:82:64:45:01:3b:f9:40:9d:d8:30:cf:
8a:7c:bc:ef:d7:61:19:01:bc:a2:c9:0c:2d:59:0c:2e:ab:ad:
a1:55:c5:27:1d:0d:ca:a8:46:1e:06:13:64:67:b8:f9:8b:bc:
dc:27:c2:37:b8:af:e8:68:86:7e:15:d6:62:92:69:7e:d8:db:
17:2e:83:bf:cf:7b:c1:12:ac:5b:ed:c9:93:d7:f9:c0:f0:a2:
e0:c1:3d:1d:44:c9:80:d7:cf:31:f1:29:19:6a:ce:2d:01:dc:
a9:6a:49:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:17 2025 by rpki-client