Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
File: IMC5sz3OXroK6mSJFY0_snAirOc.mft (raw, json)
Hash identifier: GFOajqPphBplnN49nKf8oCgIaAVlm8Q6vUHUIjLK8YQ=
Subject key identifier: B8:9B:FC:11:85:DD:EC:31:24:01:D3:5F:D3:45:E2:37:31:36:99:A0
Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Certificate serial: 0197C5380C678C65EC84C9C7CB4BC6F741AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
Manifest number: 0EE3
Signing time: Tue 01 Jul 2025 09:01:13 +0000
Manifest this update: Tue 01 Jul 2025 09:01:13 +0000
Manifest next update: Wed 02 Jul 2025 09:01:13 +0000
Files and hashes: 1: IMC5sz3OXroK6mSJFY0_snAirOc.crl (hash: T9vRV33mmTO9otKby6xRnCsd2jArVltIT9LsZPFq7Go=)
2: _t0G-nTb4aukqy0OCUwpkcnZ1II.roa (hash: KNLLqIEJ5dlRl5uPgTAYCRT2GgZHFc+269aOuK3BWNQ=)
3: iIfA58agMV_RqJ74K2RRl6EqU28.roa (hash: lku32PUlX5LHQflLOMldhRZ2jvWTzkqH2DWG39ZWQfM=)
4: tPeq-jjd1LfJCGPS7kRFioCnf1s.roa (hash: IHjSVV+vrTNKBQIJ5PbeYeBS76QGn2Ghw7Cv5izSDhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:38:0c:67:8c:65:ec:84:c9:c7:cb:4b:c6:f7:41:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Validity
Not Before: Jul 1 09:01:13 2025 GMT
Not After : Jul 2 09:01:13 2025 GMT
Subject: CN=b89bfc1185ddec312401d35fd345e237313699a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a3:03:58:68:8e:72:b1:22:b5:b6:b0:e4:06:
88:a3:2f:f7:58:3d:85:5e:3e:c0:85:81:7a:1d:a7:
b9:99:d9:d0:4e:75:3c:ea:d1:4e:20:1d:a0:37:28:
50:f7:b6:41:24:27:f9:37:18:d2:f5:49:61:be:54:
07:0c:10:8b:73:b6:03:8e:c9:ab:04:58:bb:e7:4e:
ef:32:b5:eb:54:fd:8f:e2:e8:72:9f:9a:26:4e:94:
f5:fc:99:44:66:37:eb:f5:e1:6e:47:ae:3c:59:6e:
0b:4f:a4:98:3a:f7:74:2c:3d:44:7a:16:42:1b:38:
96:77:bc:fa:5e:59:15:28:8c:d9:78:58:10:1d:2c:
d0:92:67:89:ea:32:5d:e2:bc:8d:cb:aa:3c:d4:38:
0c:04:c2:f5:15:18:2e:2d:14:22:c3:80:a6:58:21:
5d:f6:c0:05:ac:d7:26:e7:e6:58:16:9b:4a:bf:0b:
d0:0e:a4:c3:a0:5e:2f:33:ea:a0:85:f0:c6:16:dd:
7f:1c:1e:c5:3f:d2:1c:59:dc:12:7a:3f:79:da:b6:
55:87:5f:47:2d:31:4d:db:ca:38:60:a4:c5:eb:a0:
fe:8a:52:6e:59:3b:28:66:e6:fe:78:8c:53:53:7c:
97:65:a4:89:d0:90:45:f1:78:f3:b9:28:4b:7c:0e:
14:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9B:FC:11:85:DD:EC:31:24:01:D3:5F:D3:45:E2:37:31:36:99:A0
X509v3 Authority Key Identifier:
keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3f:60:0e:13:d8:58:68:dd:11:86:5b:d0:8a:10:c8:48:5e:
0e:f9:af:31:92:d1:54:5b:06:ed:03:ff:b0:5b:57:fc:f4:97:
14:55:bc:9d:69:f2:b4:be:d3:26:37:0d:8a:e3:da:bd:27:cc:
d7:5c:ff:a2:73:e0:63:79:35:a1:9d:b5:9c:be:26:52:4c:9e:
06:96:3a:45:f1:b1:34:55:f7:cf:55:be:a2:18:49:4c:06:52:
0d:9e:ab:77:25:9d:69:32:2c:65:3b:91:79:7a:b7:48:d7:4c:
ad:4d:61:3b:7d:3e:89:0c:ce:9b:83:90:e4:ec:d4:00:8d:65:
e5:6e:44:ec:be:6f:12:8f:44:f7:da:88:7c:ae:ad:91:19:30:
a6:18:8d:c4:7b:6e:07:dd:d9:02:05:fe:18:20:63:b5:7f:15:
69:7a:36:8c:f9:0b:f8:31:0a:ba:8e:b6:dc:4a:58:d1:9c:ab:
ca:cf:57:79:c2:84:75:55:95:e5:ed:1e:2c:77:c4:06:f8:28:
f6:e3:a7:c1:c3:ca:da:94:9f:b5:ab:09:61:9f:54:96:b5:14:
40:7d:78:7b:f9:b0:af:25:c7:dd:63:80:96:00:1a:79:e9:c8:
2c:dd:fe:e8:20:ab:25:0e:a5:6f:bc:26:83:62:53:d7:26:ea:
52:73:05:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfFOAxnjGXshMnHy0vG90GrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYzBiOWIzM2RjZTVlYmEwYWVhNjQ4OTE1OGQzZmIyNzAy
MmFjZTcwHhcNMjUwNzAxMDkwMTEzWhcNMjUwNzAyMDkwMTEzWjAzMTEwLwYDVQQD
EyhiODliZmMxMTg1ZGRlYzMxMjQwMWQzNWZkMzQ1ZTIzNzMxMzY5OWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqMDWGiOcrEitbaw5AaIoy/3WD2F
Xj7AhYF6Hae5mdnQTnU86tFOIB2gNyhQ97ZBJCf5NxjS9UlhvlQHDBCLc7YDjsmr
BFi7507vMrXrVP2P4uhyn5omTpT1/JlEZjfr9eFuR648WW4LT6SYOvd0LD1EehZC
GziWd7z6XlkVKIzZeFgQHSzQkmeJ6jJd4ryNy6o81DgMBML1FRguLRQiw4CmWCFd
9sAFrNcm5+ZYFptKvwvQDqTDoF4vM+qghfDGFt1/HB7FP9IcWdwSej952rZVh19H
LTFN28o4YKTF66D+ilJuWTsoZub+eIxTU3yXZaSJ0JBF8XjzuShLfA4U+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLib/BGF3ewxJAHTX9NF4jcxNpmgMB8GA1UdIwQY
MBaAFCDAubM9zl66CupkiRWNP7JwIqznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yMGJiNDktZTUwOS00YzdiLThlNWEt
OGQzZGNjMzNhZDBhLzEvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yMGJiNDktZTUwOS00YzdiLThlNWEtOGQzZGNjMzNhZDBh
LzEvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYz9gDhPY
WGjdEYZb0IoQyEheDvmvMZLRVFsG7QP/sFtX/PSXFFW8nWnytL7TJjcNiuPavSfM
11z/onPgY3k1oZ21nL4mUkyeBpY6RfGxNFX3z1W+ohhJTAZSDZ6rdyWdaTIsZTuR
eXq3SNdMrU1hO30+iQzOm4OQ5OzUAI1l5W5E7L5vEo9E99qIfK6tkRkwphiNxHtu
B93ZAgX+GCBjtX8VaXo2jPkL+DEKuo623EpY0Zyrys9XecKEdVWV5e0eLHfEBvgo
9uOnwcPK2pSftasJYZ9UlrUUQH14e/mwryXH3WOAlgAaeenILN3+6CCrJQ6lb7wm
g2JT1ybqUnMFxg==
-----END CERTIFICATE-----
Generated at Tue Jul 1 16:58:33 2025 by rpki-client