Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
File: imAdLqH5SMoBjDNb7actvsB51uY.mft (raw, json)
Hash identifier: mwPoO/YYi/xxsB7M0Uy6j8mVe1IlYTbxjKavrsrV/5E=
Subject key identifier: EC:C7:E2:62:4F:1F:58:E4:1F:82:06:44:E3:A0:64:1E:E2:F6:10:50
Authority key identifier: 8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
Certificate issuer: /CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
Certificate serial: 0197B7B34E8D9570F562943C1E23D05B81AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
Manifest number: 04A1
Signing time: Sat 28 Jun 2025 18:01:10 +0000
Manifest this update: Sat 28 Jun 2025 18:01:10 +0000
Manifest next update: Sun 29 Jun 2025 18:01:10 +0000
Files and hashes: 1: gBpXU6HMs3EdVnZKM3W9dtj0eWk.roa (hash: /5HDlgNXt08tmw8LTatvLunizw0Atkb/+jC9ix7IJ4k=)
2: imAdLqH5SMoBjDNb7actvsB51uY.crl (hash: oDrjd8chBalsVWXC4gtPxa0lQQgOv26+jRQZDzUd9uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:4e:8d:95:70:f5:62:94:3c:1e:23:d0:5b:81:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
Validity
Not Before: Jun 28 18:01:10 2025 GMT
Not After : Jun 29 18:01:10 2025 GMT
Subject: CN=ecc7e2624f1f58e41f820644e3a0641ee2f61050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:29:d6:34:82:8a:7f:ee:13:4b:66:18:b0:81:
26:26:7f:fd:bb:e0:a7:28:a6:63:cf:d3:a7:59:67:
0a:96:7a:10:3f:1f:73:86:59:3e:9a:98:cf:0e:1f:
e1:2d:12:c1:c7:ee:8f:0b:34:38:0a:52:c1:6d:02:
32:4e:93:1d:20:57:16:15:0d:67:72:b6:6c:d7:b0:
a9:8b:68:85:93:f1:ab:fc:4a:13:e7:54:7c:c1:60:
88:2a:6e:0b:a8:0d:72:42:fd:21:c4:c5:66:02:22:
21:6a:89:4e:50:fe:06:cc:65:54:b5:e4:11:8b:d1:
eb:3b:3b:81:df:6d:4b:00:6b:2d:75:38:1f:00:69:
be:53:a9:c8:34:21:62:ad:be:07:e7:01:13:1d:8e:
0e:55:a1:9c:87:13:f6:f7:a7:81:77:95:3d:4e:2a:
41:a8:dc:4b:15:17:44:a5:cc:61:91:28:24:2d:72:
4d:63:d3:fd:a2:c0:99:03:28:03:9f:d3:ca:46:ee:
db:2c:c5:e8:96:ca:96:14:ec:7f:28:3e:bb:c6:51:
b3:48:16:b1:a5:75:36:0a:25:e4:b1:45:49:18:ff:
55:5f:c3:e0:03:fb:99:5e:f2:69:39:c5:86:e9:7c:
32:16:47:22:88:ce:60:e9:1c:83:de:a4:11:ed:aa:
21:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C7:E2:62:4F:1F:58:E4:1F:82:06:44:E3:A0:64:1E:E2:F6:10:50
X509v3 Authority Key Identifier:
keyid:8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6b:a4:de:85:40:32:56:b1:36:9a:c7:50:ed:4f:72:56:2e:
b2:2f:49:c6:85:23:26:ad:8e:78:1e:fb:44:e7:41:25:d6:f0:
ec:4c:bc:57:ca:84:42:bb:66:64:85:72:9a:84:9f:71:1d:08:
97:93:16:87:b8:0c:34:5d:36:5c:41:46:28:72:33:79:b9:b6:
8f:ff:69:01:bf:72:b6:4a:0d:9e:42:5b:bf:dc:c6:55:dd:48:
1a:b6:26:0c:6d:71:96:d0:92:e1:c5:e0:84:d4:27:39:8f:60:
56:dd:c8:ad:3c:54:d4:12:a2:4d:36:2e:59:a6:cb:60:2b:19:
37:04:f7:9e:26:b2:5a:2b:01:fb:a3:05:be:91:8b:e3:52:5a:
14:57:05:d7:e2:32:13:49:93:1f:31:b4:bd:6f:89:ca:09:af:
26:c1:46:65:e5:cb:55:97:ef:33:c7:73:4e:e4:69:74:18:38:
15:ca:cf:64:af:13:61:34:45:a9:d5:2f:56:d9:15:5e:f3:e8:
fe:c4:72:73:da:fa:5e:bd:0f:c0:a7:b4:98:4d:59:62:1a:f1:
d0:9d:49:37:67:f8:38:17:bc:48:5e:f4:71:2c:fb:3d:81:27:
15:90:7c:e3:15:14:84:46:c8:ed:b7:03:11:c5:ed:35:20:f1:
5b:e1:29:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:44 2025 by rpki-client