Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
File: imlbOroepOZUeIxRZBRYzJlXgEA.mft (raw, json)
Hash identifier: 3aOkWuZKNAE6nOa7YPA7bwogBW9mZJEDT53zkXvvtrY=
Subject key identifier: EC:0E:68:4B:5D:27:D3:41:51:7B:E8:93:96:6E:90:98:C7:70:0F:6B
Authority key identifier: 8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40
Certificate issuer: /CN=8a695b3aba1ea4e654788c51641458cc99578040
Certificate serial: 01989147E2FCF124500D4B3BC1D5E5912A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
Manifest number: 1625
Signing time: Sun 10 Aug 2025 00:01:04 +0000
Manifest this update: Sun 10 Aug 2025 00:01:04 +0000
Manifest next update: Mon 11 Aug 2025 00:01:04 +0000
Files and hashes: 1: imlbOroepOZUeIxRZBRYzJlXgEA.crl (hash: yQie6UEGIKQV+QSdDcjDcyGzmVCQSgFZQJkMWZZV2y4=)
2: xXvpynv9RLlNuhH_ScFehFzRtz4.roa (hash: QSdQRW1EuXcu0ntbVvgh9fj5LXlqpMEhY2XBCGX6qp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:47:e2:fc:f1:24:50:0d:4b:3b:c1:d5:e5:91:2a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a695b3aba1ea4e654788c51641458cc99578040
Validity
Not Before: Aug 10 00:01:04 2025 GMT
Not After : Aug 11 00:01:04 2025 GMT
Subject: CN=ec0e684b5d27d341517be893966e9098c7700f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:25:0f:c3:fc:67:a3:72:09:3a:d8:a1:ec:7e:
e6:5e:17:b8:44:8e:39:03:8c:88:96:a2:53:76:6d:
ee:20:4f:c8:00:43:89:89:69:41:f5:50:87:66:22:
78:5e:a6:8d:20:d0:77:27:46:f4:1b:64:7f:f1:d1:
60:c9:dd:d4:5b:86:73:15:ef:a8:c8:60:1f:b3:86:
04:fe:b8:89:3c:a4:96:47:0a:53:17:45:52:a1:1c:
6f:f3:90:90:a9:b5:f2:c6:f2:d3:7d:57:f0:30:b4:
d0:fa:19:6e:0e:7a:69:55:e3:bc:91:bc:b2:b4:48:
89:8d:fb:b6:3c:b6:82:83:90:36:ba:26:22:09:26:
e8:be:54:8e:19:c2:98:d9:30:dd:14:9a:9a:ae:ea:
d8:83:ba:18:2b:16:3d:45:b0:61:02:24:89:40:7c:
22:62:76:61:c1:88:a7:2c:ee:8c:c7:76:09:96:f6:
8a:2d:dc:ce:71:85:38:b7:30:68:93:96:05:b8:1d:
e8:a4:3f:04:f8:34:13:92:7b:b7:2a:4c:56:88:41:
eb:f0:cd:5b:28:e7:18:53:0f:e8:ec:24:fd:a5:04:
ef:af:82:59:a8:54:4c:ca:c4:a2:c0:26:63:27:67:
e5:c7:da:a4:b7:80:b1:23:c8:d2:72:c1:bb:cf:d8:
01:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0E:68:4B:5D:27:D3:41:51:7B:E8:93:96:6E:90:98:C7:70:0F:6B
X509v3 Authority Key Identifier:
keyid:8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f2:81:13:4c:69:2c:a1:12:2e:a3:f6:e2:b4:60:8c:5a:81:
20:a7:69:71:76:62:ea:5e:b7:42:65:41:cf:27:cd:44:17:e8:
15:b3:89:31:9c:1c:f1:68:fa:1a:b6:a2:c2:00:e3:9b:25:ca:
42:99:ac:f0:5f:28:e3:63:d5:89:ad:01:cd:c7:38:4c:0a:58:
e9:44:33:84:9b:32:21:4d:cc:b2:db:3a:99:b3:c8:95:25:11:
7a:4c:38:38:6f:ba:fc:6a:a9:ea:19:26:99:49:29:d6:23:78:
d7:de:a4:28:32:9f:d4:b9:63:f5:99:fe:6b:07:2b:b8:7d:f4:
5f:ad:e6:ba:61:1f:ba:ef:2e:16:d9:af:79:85:e7:6e:30:ca:
81:2d:ac:85:fe:81:34:c1:90:c8:76:5f:1e:15:f6:9e:50:ef:
a3:c8:9c:62:73:cb:b9:0a:7d:a9:85:c8:50:49:85:00:af:e5:
e6:bc:26:df:5d:64:4e:99:d8:c6:c9:1c:70:b6:dc:12:a6:48:
51:f3:63:f6:19:16:8d:06:be:03:73:a5:b9:c9:99:73:fe:21:
e0:e4:7b:5d:db:4a:2c:65:af:42:78:d4:a4:4f:7e:1b:da:d4:
56:ef:65:c0:4e:99:64:40:16:bb:de:ec:7d:73:d1:7b:ce:26:
cc:93:ae:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:50:55 2025 by rpki-client