Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
File: IMC5sz3OXroK6mSJFY0_snAirOc.mft (raw, json)
Hash identifier: HplOHjJjPxpZJkG9xJw/l3qKN+rjXkUQmw5CAh0G4uQ=
Subject key identifier: 56:7B:CB:7D:AC:97:E0:63:04:E2:9A:D6:88:7C:2A:D3:44:69:54:01
Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Certificate serial: 0199FB0F5476693B8AC46939C5091000AC76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
Manifest number: 1008
Signing time: Sun 19 Oct 2025 06:01:49 +0000
Manifest this update: Sun 19 Oct 2025 06:01:49 +0000
Manifest next update: Mon 20 Oct 2025 06:01:49 +0000
Files and hashes: 1: IMC5sz3OXroK6mSJFY0_snAirOc.crl (hash: DZqQXmGnd718Xi4vDBJcOVEpJvnRHDpDEqe/4c2MdFY=)
2: _t0G-nTb4aukqy0OCUwpkcnZ1II.roa (hash: KNLLqIEJ5dlRl5uPgTAYCRT2GgZHFc+269aOuK3BWNQ=)
3: iIfA58agMV_RqJ74K2RRl6EqU28.roa (hash: lku32PUlX5LHQflLOMldhRZ2jvWTzkqH2DWG39ZWQfM=)
4: tPeq-jjd1LfJCGPS7kRFioCnf1s.roa (hash: IHjSVV+vrTNKBQIJ5PbeYeBS76QGn2Ghw7Cv5izSDhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:54:76:69:3b:8a:c4:69:39:c5:09:10:00:ac:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Validity
Not Before: Oct 19 06:01:49 2025 GMT
Not After : Oct 20 06:01:49 2025 GMT
Subject: CN=567bcb7dac97e06304e29ad6887c2ad344695401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2a:86:2d:1c:56:49:99:4f:f9:88:aa:08:4f:
a9:a3:b0:26:6f:93:60:ba:45:dd:aa:21:0e:a4:fd:
a1:dd:93:da:42:bb:e1:a0:25:d2:16:a6:7a:e2:ad:
83:25:4b:9b:af:c7:5e:b6:2e:8a:e4:fd:af:c6:8d:
ba:ea:02:13:bf:e2:40:f4:ea:67:76:94:25:6e:65:
9d:03:59:c4:60:f9:69:93:0f:d0:d9:4a:b2:20:7e:
e7:16:82:e0:18:e4:72:be:a4:56:9a:c0:25:99:86:
00:b2:85:37:74:d8:81:f9:de:ce:05:51:04:f0:32:
58:71:ee:34:0b:37:16:47:09:d8:cc:cd:d4:d1:0c:
9a:ce:6d:ca:43:92:77:c2:c2:af:78:22:00:99:d6:
c1:dc:ea:8a:63:c1:17:b5:2d:7e:c1:f3:7a:d0:5f:
35:f3:80:6a:a8:6b:7a:fb:a5:10:a0:1a:8c:47:1e:
2e:51:69:37:93:85:0a:3d:c8:78:51:34:9d:74:b5:
b6:2a:85:e2:6c:c8:fa:3b:a8:35:1c:ec:47:c7:20:
e8:35:46:ac:dc:de:69:d8:20:14:09:6d:b1:4f:3d:
7d:a5:44:a6:33:7a:17:b2:0e:b8:25:db:ff:21:f9:
85:b6:2a:5c:b1:e8:69:77:f2:5e:92:77:cc:5d:14:
4e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7B:CB:7D:AC:97:E0:63:04:E2:9A:D6:88:7C:2A:D3:44:69:54:01
X509v3 Authority Key Identifier:
keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:53:4f:b0:37:87:ce:65:78:8d:e4:32:b9:1c:14:15:48:aa:
46:06:21:d2:ec:f1:59:93:9e:1f:d9:44:4e:d2:8f:c1:0b:a0:
de:77:2e:14:36:d5:cc:ff:f8:77:3b:03:8c:48:23:bf:87:06:
69:88:4b:2e:e2:22:81:a1:72:38:3a:dd:39:eb:a6:17:f9:4c:
89:3c:34:91:2d:57:c1:82:bf:37:05:e9:81:65:da:09:3c:7d:
db:37:71:4e:35:99:40:1a:b0:57:da:6e:5d:8f:90:01:4c:61:
3e:c1:ed:83:83:e8:49:ed:98:0e:c7:a7:ab:38:ef:a7:22:3a:
cf:4f:3d:72:ab:4d:2e:45:1f:31:8c:f8:65:40:c7:1a:2c:ba:
8e:b4:f1:9d:00:74:95:6a:31:f4:47:25:18:00:69:94:aa:4a:
0a:08:60:26:84:fd:07:54:3d:39:b2:66:73:e1:3c:be:5a:d8:
b0:b7:ea:0b:1e:08:0c:65:b9:48:78:47:63:5e:33:f9:ef:63:
7a:f2:f8:5f:83:60:7b:06:d7:cd:06:f3:f8:fe:f4:3b:f0:65:
73:15:44:d5:59:cd:18:4d:e8:87:7c:9e:84:1e:b2:57:e4:e5:
d3:ea:22:6a:39:aa:b8:21:eb:af:4a:73:91:50:b2:b0:9a:84:
1c:74:c1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:32 2025 by rpki-client