Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
File: imBgNTuY9TMW0CL6AdKZ11__ItY.mft (raw, json)
Hash identifier: ZG3IeMmXXpVV0ejj5XTPMIR2ZR17ueNek3Rj07+6yWM=
Subject key identifier: AD:A1:CF:1D:77:F7:91:30:C0:54:81:D1:B8:4F:E7:74:FE:22:40:F6
Authority key identifier: 8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
Certificate issuer: /CN=8a6060353b98f53316d022fa01d299d75fff22d6
Certificate serial: 01969F3F0A8D0C5F64A5ED672F9304173752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
Manifest number: 0254
Signing time: Mon 05 May 2025 07:00:30 +0000
Manifest this update: Mon 05 May 2025 07:00:30 +0000
Manifest next update: Tue 06 May 2025 07:00:30 +0000
Files and hashes: 1: 053VQxunxAeUFWyp53gx-beqwOw.roa (hash: 7JicntomGJy1FdKv/+65cawmZt1C37Ox3QqgLF1dC6U=)
2: imBgNTuY9TMW0CL6AdKZ11__ItY.crl (hash: hEbjr0QzZy0GK8NQZos3/TffJQxyFGaK9T3FraAiGQg=)
3: sY_8uI_Vy_Kyk6ImGlPdHmVKVYk.roa (hash: NexMNxJOVKLfI4XsOD08LdcHHjE/wZ9FYtwH9p7yFUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:0a:8d:0c:5f:64:a5:ed:67:2f:93:04:17:37:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6060353b98f53316d022fa01d299d75fff22d6
Validity
Not Before: May 5 07:00:30 2025 GMT
Not After : May 6 07:00:30 2025 GMT
Subject: CN=ada1cf1d77f79130c05481d1b84fe774fe2240f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a8:cc:f0:a0:11:a3:23:01:fa:53:7f:5c:3a:
fc:73:89:62:cb:73:66:e7:42:7e:2a:c0:b9:d1:65:
2e:b0:84:da:81:5f:f6:f2:b1:31:dd:1c:22:27:ea:
79:c2:2b:86:9f:47:17:fc:34:df:2a:74:a9:20:14:
3c:ef:14:48:81:fe:a1:5b:0f:52:14:ae:b9:85:ad:
12:3d:7c:d2:47:e2:28:86:9b:e0:1c:5b:2e:c7:33:
cf:e8:ae:7a:9b:61:c1:3c:b9:eb:12:d7:28:2a:f1:
75:90:ec:43:62:85:62:c1:50:4d:33:68:d5:d0:5a:
a9:1f:7b:d3:df:b1:16:36:45:ee:59:65:4d:48:64:
0e:33:23:f8:8e:de:dc:37:43:75:a3:a9:38:4f:c7:
61:19:12:27:79:00:3b:44:4b:b2:88:bd:0b:8e:ef:
dc:c7:06:c6:d8:61:bb:82:56:eb:3e:49:21:1f:10:
30:27:a2:4a:19:da:9a:22:c1:35:02:2b:71:09:b5:
e1:11:43:c1:97:97:60:71:b3:c2:f1:ce:61:76:c5:
db:c8:90:49:74:6d:b6:7b:a8:fe:53:e3:d6:1c:f8:
d5:37:bb:5b:ce:85:b7:1b:0b:58:cb:47:ce:74:1d:
6a:77:2c:2a:af:da:bf:0a:d7:02:1e:d8:e5:5e:20:
e2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A1:CF:1D:77:F7:91:30:C0:54:81:D1:B8:4F:E7:74:FE:22:40:F6
X509v3 Authority Key Identifier:
keyid:8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:0a:d5:fb:6c:f7:e7:42:55:13:19:24:56:23:d6:d4:e9:98:
de:e4:c4:ea:6a:7c:d8:54:a5:db:b8:c1:1a:2b:0a:64:38:0a:
00:72:30:40:fc:3d:70:f5:c6:cc:07:b0:44:7b:1c:ac:e4:78:
f1:09:83:f6:7b:b4:d1:e2:80:c1:3d:40:cf:ab:74:ac:0a:69:
2a:70:af:6b:28:d3:30:30:31:b6:76:aa:dc:f3:80:45:53:58:
d1:6f:54:d7:b8:95:8e:e0:f8:e9:ba:1e:9d:2f:f9:94:bd:ab:
fd:2d:0b:01:70:51:df:f6:cd:04:8f:b9:74:9b:d4:59:12:a2:
3d:58:c8:7c:7d:61:a2:1d:0f:76:a4:cf:6a:ce:6c:c9:57:2f:
0a:44:58:ce:a4:26:39:77:8a:3c:55:84:f0:2a:00:d4:6f:ec:
b1:50:6a:f4:38:9d:7c:78:12:f6:30:e8:02:b4:4f:8f:ee:b0:
9b:18:72:6d:64:4e:59:b0:cf:79:21:5f:97:e4:48:d0:87:53:
e1:9e:4d:be:0e:ce:e0:12:da:f8:9e:69:51:2c:d9:10:1c:36:
b8:fc:88:b5:bb:76:76:65:80:f6:5b:1c:83:d1:c6:33:a2:d6:
c1:0f:9e:1f:28:ee:d1:f6:2f:3b:55:73:dd:62:c7:00:ec:03:
4b:e6:3e:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafPwqNDF9kpe1nL5MEFzdSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNjA2MDM1M2I5OGY1MzMxNmQwMjJmYTAxZDI5OWQ3NWZm
ZjIyZDYwHhcNMjUwNTA1MDcwMDMwWhcNMjUwNTA2MDcwMDMwWjAzMTEwLwYDVQQD
EyhhZGExY2YxZDc3Zjc5MTMwYzA1NDgxZDFiODRmZTc3NGZlMjI0MGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgajM8KARoyMB+lN/XDr8c4liy3Nm
50J+KsC50WUusITagV/28rEx3RwiJ+p5wiuGn0cX/DTfKnSpIBQ87xRIgf6hWw9S
FK65ha0SPXzSR+IohpvgHFsuxzPP6K56m2HBPLnrEtcoKvF1kOxDYoViwVBNM2jV
0FqpH3vT37EWNkXuWWVNSGQOMyP4jt7cN0N1o6k4T8dhGRIneQA7REuyiL0Lju/c
xwbG2GG7glbrPkkhHxAwJ6JKGdqaIsE1AitxCbXhEUPBl5dgcbPC8c5hdsXbyJBJ
dG22e6j+U+PWHPjVN7tbzoW3GwtYy0fOdB1qdywqr9q/CtcCHtjlXiDiIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2hzx1395EwwFSB0bhP53T+IkD2MB8GA1UdIwQY
MBaAFIpgYDU7mPUzFtAi+gHSmddf/yLWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW1CZ05UdVk5VE1XMENMNkFkS1oxMV9fSXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85NjlkYzItZmE1Ni00NWI2LWEzZGUt
NTJlZTQzNjQyZTEwLzEvaW1CZ05UdVk5VE1XMENMNkFkS1oxMV9fSXRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS85NjlkYzItZmE1Ni00NWI2LWEzZGUtNTJlZTQzNjQyZTEw
LzEvaW1CZ05UdVk5VE1XMENMNkFkS1oxMV9fSXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnwrV+2z3
50JVExkkViPW1OmY3uTE6mp82FSl27jBGisKZDgKAHIwQPw9cPXGzAewRHscrOR4
8QmD9nu00eKAwT1Az6t0rAppKnCvayjTMDAxtnaq3POARVNY0W9U17iVjuD46boe
nS/5lL2r/S0LAXBR3/bNBI+5dJvUWRKiPVjIfH1hoh0PdqTPas5syVcvCkRYzqQm
OXeKPFWE8CoA1G/ssVBq9DidfHgS9jDoArRPj+6wmxhybWROWbDPeSFfl+RI0IdT
4Z5Nvg7O4BLa+J5pUSzZEBw2uPyItbt2dmWA9lscg9HGM6LWwQ+eHyju0fYvO1Vz
3WLHAOwDS+Y+1A==
-----END CERTIFICATE-----
Generated at Mon May 5 11:46:36 2025 by rpki-client