Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
File: IMz236cJVzqCG2PEy2lWBf0maAs.mft (raw, json)
Hash identifier: UC6frsHl4kf4MY8DETlPwmzwo3oFEBemm2HQCveTU34=
Subject key identifier: 8B:EC:E6:35:37:ED:90:AA:E3:BD:57:5E:0E:34:D4:C9:92:72:C3:33
Authority key identifier: 20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B
Certificate issuer: /CN=20ccf6dfa709573a821b63c4cb695605fd26680b
Certificate serial: 019774F728516983DD83635C5584E64DA3BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
Manifest number: 0299
Signing time: Sun 15 Jun 2025 19:00:44 +0000
Manifest this update: Sun 15 Jun 2025 19:00:44 +0000
Manifest next update: Mon 16 Jun 2025 19:00:44 +0000
Files and hashes: 1: HO9laPPsdq6sfNd_PR3udt1kywk.roa (hash: ySqE/9cHXiOyjfUHGzF3+AzH1p8/SUImSsDU40s2CbI=)
2: IMz236cJVzqCG2PEy2lWBf0maAs.crl (hash: 399Y72Y1vYQk83SbZ+Fs5aTQHgalOCvyLU7M9kDIZ3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f7:28:51:69:83:dd:83:63:5c:55:84:e6:4d:a3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ccf6dfa709573a821b63c4cb695605fd26680b
Validity
Not Before: Jun 15 19:00:44 2025 GMT
Not After : Jun 16 19:00:44 2025 GMT
Subject: CN=8bece63537ed90aae3bd575e0e34d4c99272c333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6c:73:e5:a5:cf:d6:72:6b:77:ff:68:b1:0d:
86:9d:68:9a:d3:d8:9b:30:94:ea:fb:d9:ca:81:c2:
29:b7:ba:22:33:98:7e:dc:af:8e:00:75:ad:f0:49:
be:22:58:3d:d8:90:57:b2:d9:f3:a3:97:87:99:b7:
68:2f:2d:c3:78:11:46:5d:45:d9:27:b0:a1:9d:c7:
8e:4c:c0:29:b8:aa:87:ee:59:5d:b7:88:b7:2a:3a:
03:a5:3d:27:04:6b:96:e2:70:62:d2:11:09:b9:a2:
4d:44:61:6e:f4:59:7a:e3:9e:5b:9d:ee:5e:2c:66:
19:f2:b8:18:ca:7c:d0:30:30:4d:2c:fd:ae:3c:af:
fa:54:3a:5b:1b:3e:c4:e2:e4:3c:78:6c:fe:01:93:
2b:da:33:8a:b6:8d:f5:a4:8c:3f:b6:e7:57:33:5f:
69:04:8e:6f:1f:50:61:f0:7e:4f:be:ba:af:26:3d:
34:29:24:cc:dc:4f:5a:f0:3c:cd:bc:c4:34:54:64:
cf:29:c6:c6:ad:e6:b4:74:79:89:e2:88:9c:0b:11:
9b:c5:5a:27:e6:22:0b:9f:75:3f:14:38:d0:89:76:
ca:70:8d:71:c9:5c:19:3d:41:5f:3b:44:6d:ec:16:
e1:b0:6d:02:b9:7c:96:eb:8e:93:3a:76:68:03:62:
08:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EC:E6:35:37:ED:90:AA:E3:BD:57:5E:0E:34:D4:C9:92:72:C3:33
X509v3 Authority Key Identifier:
keyid:20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:32:32:74:d7:97:04:6c:42:3c:7b:a6:94:87:f4:64:fb:76:
f5:72:1e:4e:c7:13:5c:19:c9:d3:29:d5:96:b3:d3:3f:00:a2:
9a:f9:26:30:9b:38:de:15:2e:84:cc:78:45:c6:8a:94:17:d6:
bd:28:b4:06:62:2e:89:97:c8:bd:3e:85:6f:98:25:d8:f8:0f:
e6:2d:01:61:e0:d7:42:9e:78:6f:be:93:98:86:ce:3b:d7:7e:
15:2d:bf:f5:69:77:db:37:5f:33:3d:d6:4b:2f:ba:72:54:20:
3d:ac:e1:78:0d:56:bb:11:e1:86:36:c1:3b:92:05:b4:e5:9b:
16:80:62:98:9a:9b:9d:53:d2:4b:0e:cb:d3:90:17:e1:88:09:
30:a7:3f:d8:9a:6d:c8:24:2c:e6:fd:98:ab:90:a6:f9:ea:52:
6c:b2:d7:cc:20:1f:47:4c:12:15:38:64:7d:8c:31:b9:2d:31:
de:a5:e6:d0:9d:f2:5c:63:4f:4c:30:e0:c1:a8:85:3f:f6:01:
46:6c:5a:93:42:3c:0e:2d:7a:19:ab:3a:8c:56:4a:44:f1:ad:
ba:4b:d9:6b:c3:7a:bd:42:02:f4:e5:04:cd:12:ca:1e:df:b9:
58:b6:48:2f:31:f3:ba:a3:c6:79:6a:ed:47:50:54:66:eb:bc:
03:c5:07:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:32:57 2025 by rpki-client