Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
File: imAdLqH5SMoBjDNb7actvsB51uY.mft (raw, json)
Hash identifier: xH942Hlioqy1Wbxaeo5pzKyhBaBKtA5/7wrLwhoxEZA=
Subject key identifier: 52:49:EA:0E:BC:54:E7:A9:A1:64:82:89:B1:17:84:5B:06:20:A6:98
Authority key identifier: 8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
Certificate issuer: /CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
Certificate serial: 0198D7734860463F9BAC4EE5D9792C12A4E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
Manifest number: 0536
Signing time: Sat 23 Aug 2025 15:01:53 +0000
Manifest this update: Sat 23 Aug 2025 15:01:53 +0000
Manifest next update: Sun 24 Aug 2025 15:01:53 +0000
Files and hashes: 1: gBpXU6HMs3EdVnZKM3W9dtj0eWk.roa (hash: /5HDlgNXt08tmw8LTatvLunizw0Atkb/+jC9ix7IJ4k=)
2: imAdLqH5SMoBjDNb7actvsB51uY.crl (hash: zZ37SxR6tMLnSfB0s2Z34iOdaVddKdHGoT6sftPWZxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:48:60:46:3f:9b:ac:4e:e5:d9:79:2c:12:a4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
Validity
Not Before: Aug 23 15:01:53 2025 GMT
Not After : Aug 24 15:01:53 2025 GMT
Subject: CN=5249ea0ebc54e7a9a1648289b117845b0620a698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f0:66:3a:b4:14:96:9a:49:60:2f:c5:23:d3:
1d:28:74:66:c1:82:24:3b:61:6f:98:9f:59:ff:2a:
f6:a1:b4:28:5e:38:3c:ed:82:0c:a8:25:2d:5f:fa:
76:c0:f0:af:8d:24:ca:e7:a0:a3:b2:c9:6f:d2:6f:
7e:48:cd:be:b7:d5:79:81:a3:61:f0:30:61:d5:66:
62:52:4b:d5:55:6b:1f:5d:e3:59:4d:50:69:b2:08:
71:f1:a9:b4:b9:8d:fa:78:64:8e:00:47:c3:b7:48:
19:5f:4b:ef:bc:a5:8c:6e:ab:5a:da:cd:ac:1c:22:
e2:2e:0b:40:c3:ce:da:8b:fc:fa:b2:37:5e:5d:75:
3d:f7:8f:45:4a:d5:1d:f7:10:0e:4f:40:d7:15:31:
a6:19:43:ef:68:39:bc:99:bf:86:ec:fd:b0:de:2e:
27:06:d7:d6:02:60:81:4d:d7:17:09:2d:8d:c6:8e:
c8:ae:65:2e:43:63:47:af:19:40:d8:55:3c:5b:7a:
9b:e8:9e:83:8f:59:ad:8c:b4:ff:98:35:3d:0f:4b:
0e:5b:1e:5a:f5:d8:3f:f6:b9:d0:9d:51:1b:7b:5e:
44:7f:c0:f1:35:6b:1a:1f:be:29:c4:f8:09:49:1a:
ae:e7:56:cd:7e:dc:7a:0b:2d:4a:e1:41:e3:bb:f3:
50:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:49:EA:0E:BC:54:E7:A9:A1:64:82:89:B1:17:84:5B:06:20:A6:98
X509v3 Authority Key Identifier:
keyid:8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d8:a4:6f:f1:c5:e3:a6:aa:74:5e:40:0a:d6:0c:e6:fc:49:
8a:58:32:27:53:b2:59:06:67:4c:62:13:fa:e6:03:8c:c4:eb:
55:fd:b5:5b:90:c2:a7:dc:71:b4:cd:58:03:ea:96:58:42:ed:
ba:49:89:bc:b7:74:d8:65:ec:30:da:c9:94:d1:c0:fe:b7:56:
82:24:8f:1e:6a:e8:1d:ed:4d:98:6c:b0:ae:33:cf:e5:e4:81:
c3:c5:9d:59:8e:da:95:e8:2c:6a:7c:df:ba:b0:3b:95:aa:7c:
d8:75:21:62:64:98:29:47:b1:fd:ee:46:f2:a3:44:b6:68:2c:
e8:c7:00:6d:c8:b8:bd:e0:6d:31:01:6f:48:23:a7:f0:8e:5a:
c8:40:df:ee:b7:2b:b1:bc:6b:52:38:e5:4b:3d:41:9a:f0:44:
ee:9b:05:f8:16:f6:b2:9c:f9:07:7d:a6:02:09:0f:9c:16:43:
05:27:6c:e3:6f:07:3b:a4:60:00:d1:0f:4f:7f:f8:c4:75:14:
d2:5d:f5:23:50:0d:35:8d:88:43:57:e1:5d:47:4a:e0:6f:dc:
0d:dd:ac:48:a3:c6:f5:03:10:54:9f:6e:48:cf:ee:23:80:e5:
2b:1d:c3:b4:28:8a:1a:f2:70:71:2f:68:b5:ae:5b:4d:8d:05:
b9:74:d0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:42:38 2025 by rpki-client