Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
File: ImTYqhh4-dwUJNL9reQDnhINWxE.mft (raw, json)
Hash identifier: ALthtISYfrwUxZOI2/OO2tv15rPStCKLBWq0/9Yaq6o=
Subject key identifier: E6:6C:FD:90:8B:3D:B8:E1:41:F1:A9:7A:64:E4:D8:B8:7D:E7:FA:7B
Authority key identifier: 22:64:D8:AA:18:78:F9:DC:14:24:D2:FD:AD:E4:03:9E:12:0D:5B:11
Certificate issuer: /CN=2264d8aa1878f9dc1424d2fdade4039e120d5b11
Certificate serial: 0196BE5C90B19CD9F6C8A5D9050FB34162F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
Manifest number: 0111
Signing time: Sun 11 May 2025 08:00:59 +0000
Manifest this update: Sun 11 May 2025 08:00:59 +0000
Manifest next update: Mon 12 May 2025 08:00:59 +0000
Files and hashes: 1: FqDrfbDtI4Hs58fMgjUv81Cu_7g.roa (hash: EJb3Kv4NZ5uykz2bapaHUVNVx3Yhwe8+JKhWBXNnXgc=)
2: ImTYqhh4-dwUJNL9reQDnhINWxE.crl (hash: H+OoMI6clCkNyCTBbiAepw/ohtWSRoZlQ0W20Mp3IGU=)
3: ik9pAs-oXBS0l0utPLQdJhXZ5X0.roa (hash: LmKUQUveU3bNm/doGhpBXkqduAWf1pf1v3+L9U63Su8=)
4: uc150UpyVmM0lf0Kf7nSAGa2PLU.roa (hash: z6Z1141CZgjCa4I7tNTWjh0/Dh9WixbtG/HNloenv6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:90:b1:9c:d9:f6:c8:a5:d9:05:0f:b3:41:62:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2264d8aa1878f9dc1424d2fdade4039e120d5b11
Validity
Not Before: May 11 08:00:59 2025 GMT
Not After : May 12 08:00:59 2025 GMT
Subject: CN=e66cfd908b3db8e141f1a97a64e4d8b87de7fa7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:af:69:ff:a7:ba:8c:87:d3:13:83:66:a8:8c:
c6:64:5f:2e:d2:ec:9d:a9:80:8f:0d:89:0d:7f:c3:
e3:d5:50:37:ee:2c:84:4f:46:06:b2:70:c3:1f:3b:
91:8c:92:2d:48:0c:66:35:39:a9:31:4a:8b:d2:2e:
c7:22:72:ab:4e:54:83:85:98:de:e2:5b:59:34:60:
e5:d8:b0:08:d5:81:f2:fe:e1:60:1d:57:9e:05:91:
98:a6:20:55:18:b5:28:c9:77:be:c0:c4:32:f7:3f:
45:72:ab:ce:34:d3:df:78:79:d5:49:85:c3:42:7e:
cb:c2:d8:9f:4f:d9:67:a7:2c:22:c0:68:b3:ed:9d:
72:6d:92:77:52:16:bb:5f:49:72:45:d1:ad:37:98:
b4:e9:25:ac:63:c1:17:fa:e3:e0:27:7c:a1:d8:ea:
07:a8:a8:dc:b6:59:a8:6c:7b:18:cc:f4:14:d0:bd:
58:c3:7c:1b:85:c1:12:95:cf:f3:01:a8:3a:c3:66:
75:34:a6:ef:c5:09:60:23:c3:bc:e4:ab:3f:ce:f9:
ac:a7:55:5b:5e:99:1e:56:97:c9:8f:41:44:e6:77:
e8:4d:34:db:d6:f0:5e:be:10:82:92:ea:56:b0:03:
52:94:6f:e4:6b:07:61:38:d8:cc:f0:4f:c8:2e:bc:
17:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6C:FD:90:8B:3D:B8:E1:41:F1:A9:7A:64:E4:D8:B8:7D:E7:FA:7B
X509v3 Authority Key Identifier:
keyid:22:64:D8:AA:18:78:F9:DC:14:24:D2:FD:AD:E4:03:9E:12:0D:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:d5:5d:3b:a4:c3:f5:f9:c5:d6:a3:b5:ee:27:31:f9:89:5d:
7c:15:c2:e3:3d:aa:61:35:c4:5a:3e:79:d2:77:c1:bc:d0:b3:
f5:fe:95:28:a8:40:ee:28:5b:f7:63:33:48:83:5c:56:65:5c:
48:72:50:24:d3:a3:1c:9e:b3:d9:d9:80:ce:90:99:ca:15:0b:
27:21:f2:56:73:b7:10:c3:df:1e:e6:19:d7:5a:ae:2a:d4:49:
b6:90:c2:31:1d:50:df:25:35:bf:c3:43:b8:ba:19:d6:71:ca:
32:d7:26:83:2b:c9:37:e5:44:13:bc:aa:9e:dc:db:72:69:12:
1b:67:10:f7:5f:ae:39:8d:65:01:7a:ef:55:9f:e8:3d:8b:8d:
3c:b2:d8:0a:f7:a2:bd:a3:0b:8e:74:23:67:37:84:7e:1b:c5:
3a:d0:e3:89:89:86:54:9e:e7:3f:28:4f:76:53:8c:cb:26:52:
31:90:02:9f:87:3f:e1:97:ae:07:38:67:d0:06:c6:12:17:57:
65:32:85:fc:19:3b:19:41:6a:e7:31:40:0b:cf:e7:dd:22:dc:
aa:16:04:7c:33:43:ac:2d:05:14:53:c2:74:26:5b:9b:fc:4d:
c2:80:0e:38:5a:34:c0:75:40:2f:c5:5f:8a:21:4a:45:e9:ec:
44:b2:bf:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+XJCxnNn2yKXZBQ+zQWL1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyNjRkOGFhMTg3OGY5ZGMxNDI0ZDJmZGFkZTQwMzllMTIw
ZDViMTEwHhcNMjUwNTExMDgwMDU5WhcNMjUwNTEyMDgwMDU5WjAzMTEwLwYDVQQD
EyhlNjZjZmQ5MDhiM2RiOGUxNDFmMWE5N2E2NGU0ZDhiODdkZTdmYTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3K9p/6e6jIfTE4NmqIzGZF8u0uyd
qYCPDYkNf8Pj1VA37iyET0YGsnDDHzuRjJItSAxmNTmpMUqL0i7HInKrTlSDhZje
4ltZNGDl2LAI1YHy/uFgHVeeBZGYpiBVGLUoyXe+wMQy9z9FcqvONNPfeHnVSYXD
Qn7LwtifT9lnpywiwGiz7Z1ybZJ3Uha7X0lyRdGtN5i06SWsY8EX+uPgJ3yh2OoH
qKjctlmobHsYzPQU0L1Yw3wbhcESlc/zAag6w2Z1NKbvxQlgI8O85Ks/zvmsp1Vb
XpkeVpfJj0FE5nfoTTTb1vBevhCCkupWsANSlG/kawdhONjM8E/ILrwXBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZs/ZCLPbjhQfGpemTk2Lh95/p7MB8GA1UdIwQY
MBaAFCJk2KoYePncFCTS/a3kA54SDVsRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSW1UWXFoaDQtZHdVSk5MOXJlUURuaElOV3hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hYzlhNGYtNTc3NC00ZWNjLTljMWQt
Yzk5OGYwMjkyMTM1LzEvSW1UWXFoaDQtZHdVSk5MOXJlUURuaElOV3hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9hYzlhNGYtNTc3NC00ZWNjLTljMWQtYzk5OGYwMjkyMTM1
LzEvSW1UWXFoaDQtZHdVSk5MOXJlUURuaElOV3hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1NVdO6TD
9fnF1qO17icx+YldfBXC4z2qYTXEWj550nfBvNCz9f6VKKhA7ihb92MzSINcVmVc
SHJQJNOjHJ6z2dmAzpCZyhULJyHyVnO3EMPfHuYZ11quKtRJtpDCMR1Q3yU1v8ND
uLoZ1nHKMtcmgyvJN+VEE7yqntzbcmkSG2cQ91+uOY1lAXrvVZ/oPYuNPLLYCvei
vaMLjnQjZzeEfhvFOtDjiYmGVJ7nPyhPdlOMyyZSMZACn4c/4ZeuBzhn0AbGEhdX
ZTKF/Bk7GUFq5zFAC8/n3SLcqhYEfDNDrC0FFFPCdCZbm/xNwoAOOFo0wHVAL8Vf
iiFKRensRLK/uQ==
-----END CERTIFICATE-----
Generated at Sun May 11 15:59:00 2025 by rpki-client