Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
File: imlbOroepOZUeIxRZBRYzJlXgEA.mft (raw, json)
Hash identifier: HPLqRZUvTBI7Ma+4WmlxZzXBLzGRgcgaSXZPq3Vyzmg=
Subject key identifier: 0A:56:07:3D:BE:C8:7A:B8:ED:E8:CE:C9:D0:3A:3A:34:B5:E5:A0:7D
Authority key identifier: 8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40
Certificate issuer: /CN=8a695b3aba1ea4e654788c51641458cc99578040
Certificate serial: 0197718819E184C4E74A9F1736665438D802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
Manifest number: 1590
Signing time: Sun 15 Jun 2025 03:00:34 +0000
Manifest this update: Sun 15 Jun 2025 03:00:34 +0000
Manifest next update: Mon 16 Jun 2025 03:00:34 +0000
Files and hashes: 1: imlbOroepOZUeIxRZBRYzJlXgEA.crl (hash: sYgUGGaHNmKVxUp7FNuo2zbvPToXXg4zhpulosrCxXo=)
2: xXvpynv9RLlNuhH_ScFehFzRtz4.roa (hash: QSdQRW1EuXcu0ntbVvgh9fj5LXlqpMEhY2XBCGX6qp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:19:e1:84:c4:e7:4a:9f:17:36:66:54:38:d8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a695b3aba1ea4e654788c51641458cc99578040
Validity
Not Before: Jun 15 03:00:34 2025 GMT
Not After : Jun 16 03:00:34 2025 GMT
Subject: CN=0a56073dbec87ab8ede8cec9d03a3a34b5e5a07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b9:26:c5:ad:68:08:10:c7:86:f6:b4:bb:41:
3b:be:75:fb:c1:30:10:4d:48:61:a6:8c:36:ed:02:
2c:b4:b1:07:05:41:ea:95:be:58:74:2e:a1:19:c3:
70:2d:10:de:1b:46:ea:b2:9f:75:0d:38:63:61:00:
2d:d7:b2:57:ca:5e:a2:12:03:fb:65:99:92:87:dc:
eb:d8:5d:00:e1:a9:8a:30:bd:0b:38:ff:5c:b1:f2:
2a:0a:db:1d:97:be:01:e9:c8:56:99:5f:ec:5a:36:
c6:fd:b4:4a:af:a7:e2:d9:31:62:d6:3d:65:25:81:
c5:94:2a:67:95:7b:ee:dc:81:f9:da:81:6d:fd:f2:
f1:61:83:8e:59:11:91:38:f0:01:54:75:84:63:40:
c0:65:bc:02:87:b4:89:4a:58:42:79:ff:c9:48:67:
8a:27:80:bf:a9:f2:e7:72:f8:ae:f5:c4:95:47:61:
4f:53:f2:76:eb:6f:db:8c:47:81:a2:86:6c:1a:89:
f7:41:22:c5:33:ea:87:54:22:72:28:80:60:47:5f:
05:e5:7f:cb:01:8d:2f:22:f7:c9:e2:e5:8c:ad:ac:
b9:c2:1e:32:d5:64:19:41:e6:6d:a8:c7:5d:b2:d4:
78:ce:f6:56:a2:69:33:9c:fc:d8:9f:52:cc:ff:bd:
23:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:56:07:3D:BE:C8:7A:B8:ED:E8:CE:C9:D0:3A:3A:34:B5:E5:A0:7D
X509v3 Authority Key Identifier:
keyid:8A:69:5B:3A:BA:1E:A4:E6:54:78:8C:51:64:14:58:CC:99:57:80:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imlbOroepOZUeIxRZBRYzJlXgEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/538194-7560-4456-b45c-ca26c22cfafd/1/imlbOroepOZUeIxRZBRYzJlXgEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c7:52:21:15:a5:ab:b4:28:5e:a8:2e:3b:af:5a:61:34:e9:
77:74:cf:03:27:44:ff:88:85:42:7e:78:d1:7d:f1:10:72:6e:
cd:10:f6:37:66:23:09:17:bc:b8:d0:36:15:93:f2:6c:de:22:
15:3e:2f:a9:5b:9a:45:07:95:80:8e:1f:56:2a:83:a5:5b:6e:
69:e7:be:dd:d2:99:c2:df:55:ce:77:74:91:ce:d0:eb:c5:0a:
5e:94:78:85:3e:dc:cb:01:5b:e5:82:ed:63:7e:31:c8:22:c8:
79:4a:d7:97:6a:07:72:42:ca:d6:95:d8:d1:18:17:fb:00:2a:
4f:a2:a5:bb:7b:52:ed:63:47:e7:9d:f0:17:61:26:61:00:76:
cf:48:7b:e8:3c:0b:8a:09:4f:0b:5e:30:49:0a:f8:d3:bb:6e:
22:ca:da:9f:81:cd:bc:44:39:5f:35:c7:a8:fe:55:79:9f:02:
8d:85:74:f2:28:e5:3c:4a:b3:89:ce:d2:23:64:08:9c:e8:e3:
5b:53:ad:c1:2b:cb:d0:75:fc:37:61:c7:25:c0:26:0f:72:ce:
12:c0:e1:59:92:0d:b2:6a:8b:5c:11:21:31:2e:66:bf:f8:08:
b8:5b:b8:5c:20:d7:cb:f0:2a:db:7d:be:6a:30:ce:41:1c:87:
c5:1b:75:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:35:49 2025 by rpki-client