Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
File: IMz236cJVzqCG2PEy2lWBf0maAs.mft (raw, json)
Hash identifier: maXI7HtKljex8VDA5ARY9MwZzr8OA8qEfOxJklT7U+4=
Subject key identifier: 20:CC:9D:01:FA:02:C2:A9:D6:08:45:A6:6E:00:34:71:A5:D9:8C:F3
Authority key identifier: 20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B
Certificate issuer: /CN=20ccf6dfa709573a821b63c4cb695605fd26680b
Certificate serial: 01987B9B7A794DC3705B303929F664F6D859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
Manifest number: 0321
Signing time: Tue 05 Aug 2025 19:00:43 +0000
Manifest this update: Tue 05 Aug 2025 19:00:43 +0000
Manifest next update: Wed 06 Aug 2025 19:00:43 +0000
Files and hashes: 1: HO9laPPsdq6sfNd_PR3udt1kywk.roa (hash: ySqE/9cHXiOyjfUHGzF3+AzH1p8/SUImSsDU40s2CbI=)
2: IMz236cJVzqCG2PEy2lWBf0maAs.crl (hash: GZr7pJ6sUEs6n41nTmj13Nq/JlohSVAKr4MX6nJ53nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:7a:79:4d:c3:70:5b:30:39:29:f6:64:f6:d8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ccf6dfa709573a821b63c4cb695605fd26680b
Validity
Not Before: Aug 5 19:00:43 2025 GMT
Not After : Aug 6 19:00:43 2025 GMT
Subject: CN=20cc9d01fa02c2a9d60845a66e003471a5d98cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fd:da:cd:6b:d5:7d:2f:e8:f1:67:7f:3d:34:
e8:82:4e:5f:37:d9:7f:51:30:c4:2e:d2:f7:c2:3a:
71:53:7c:d3:60:51:1c:3d:d0:2f:09:ac:3e:c2:51:
ef:1f:0a:be:36:f3:21:e7:7f:bd:c1:2f:46:e4:a2:
92:5b:c8:da:8e:e6:a5:21:b5:19:e9:82:fe:6c:44:
3e:b7:2a:05:f3:0a:78:25:07:64:67:4c:37:fc:81:
3d:1f:f9:54:97:87:a5:7d:b7:33:db:37:51:d2:8e:
15:00:44:ec:67:46:e3:90:62:02:21:d7:6c:aa:ad:
53:5a:53:28:41:8f:ed:62:e5:56:77:98:99:9c:e4:
ea:16:77:7d:60:41:7a:f0:5a:0a:39:ca:c3:2a:7f:
9a:3b:62:25:69:43:25:30:48:e0:23:4f:c0:5c:85:
17:cd:d6:d7:b2:92:37:18:75:38:3d:99:99:25:a0:
8c:3e:87:ed:d4:ab:9e:34:cd:c5:de:ed:be:d5:94:
43:36:4b:b3:6a:63:2c:58:74:28:f2:02:d8:17:91:
4a:a7:19:08:6a:9f:aa:3b:6c:74:e4:cb:10:9b:ed:
4d:94:30:c1:6b:7a:5b:a6:1b:d9:37:e9:b6:da:8d:
56:1a:e7:72:d6:a2:b1:97:1b:23:4c:3c:84:dd:54:
db:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CC:9D:01:FA:02:C2:A9:D6:08:45:A6:6E:00:34:71:A5:D9:8C:F3
X509v3 Authority Key Identifier:
keyid:20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:73:b4:a0:26:06:18:1f:a7:04:d7:15:5e:2d:37:1b:de:04:
5b:e1:63:c9:a5:de:58:6a:79:4d:82:8a:ea:40:fc:91:10:2c:
33:bc:45:eb:19:0d:c8:26:1f:62:dd:35:39:9f:a6:46:5e:fd:
65:33:55:a2:33:a3:25:df:f4:59:85:77:67:a6:e6:a6:a9:3a:
25:e5:e9:c3:66:bc:e8:a9:bd:b6:c9:2b:fa:bb:42:8b:cb:88:
1c:da:94:56:25:c3:73:ce:86:bc:88:f4:9a:98:c3:c2:c8:7f:
45:0d:8a:e7:e3:a3:93:65:00:f2:01:fe:82:a5:87:d4:07:68:
44:79:9a:f0:ee:01:8a:61:e2:a8:8e:09:ea:75:b3:3c:71:c1:
3b:ca:6a:3e:81:d1:49:0b:a3:d3:22:65:af:7b:8e:fc:dd:4c:
9f:85:06:5b:a2:a1:a0:7c:63:87:30:2c:09:87:0d:94:e0:a5:
2e:dc:0d:57:8c:4e:c1:64:85:28:0f:91:d9:96:06:55:54:33:
0a:02:f0:fd:c5:5a:a2:28:d0:0e:03:4b:8a:0e:62:15:fe:69:
ec:65:db:48:45:7e:51:4c:b9:c1:33:16:23:4a:e7:34:6a:b6:
09:99:c2:b3:c6:31:77:f0:e1:02:89:e7:f2:88:bf:cd:c5:2f:
39:85:4d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:07:16 2025 by rpki-client