Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.mft
File: immKFPthpoevCmP3xlXAAfZwEoI.mft (raw, json)
Hash identifier: +sr09t9GJspnHrVgXMjLLPRU1J9QsMT8jS0MIa17hnI=
Subject key identifier: 7D:76:D8:45:FA:CD:90:F9:70:CA:E8:90:2F:61:55:09:B9:84:3C:89
Authority key identifier: 8A:69:8A:14:FB:61:A6:87:AF:0A:63:F7:C6:55:C0:01:F6:70:12:82
Certificate issuer: /CN=8a698a14fb61a687af0a63f7c655c001f6701282
Certificate serial: 01989F713C2BC8D072E4C871991C3C03B6D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/immKFPthpoevCmP3xlXAAfZwEoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.mft
Manifest number: 03C7
Signing time: Tue 12 Aug 2025 18:00:54 +0000
Manifest this update: Tue 12 Aug 2025 18:00:54 +0000
Manifest next update: Wed 13 Aug 2025 18:00:54 +0000
Files and hashes: 1: P1m93kQnbl9hCPZ7gjvBSz2QduY.roa (hash: Vw3jwkUFPb+4FTO/pTKFTwQSjK1reP+BMicWKiuZXfs=)
2: immKFPthpoevCmP3xlXAAfZwEoI.crl (hash: BtwmovDDmym843xL843q72WL/6jWmuS6rQ3Ucz+Cskk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/immKFPthpoevCmP3xlXAAfZwEoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:71:3c:2b:c8:d0:72:e4:c8:71:99:1c:3c:03:b6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a698a14fb61a687af0a63f7c655c001f6701282
Validity
Not Before: Aug 12 18:00:54 2025 GMT
Not After : Aug 13 18:00:54 2025 GMT
Subject: CN=7d76d845facd90f970cae8902f615509b9843c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:23:c9:0d:aa:95:9e:cb:50:c1:36:1c:01:5a:
4a:a5:37:9e:97:a3:b6:32:a0:a9:68:c9:48:1d:df:
50:5d:41:70:57:94:10:68:00:f7:4c:69:11:5b:cf:
d3:1b:1a:df:ad:38:f4:47:fb:fb:41:e7:63:75:6d:
05:55:9b:cc:49:c1:20:8d:4d:62:0f:cf:01:42:df:
2a:c9:00:d6:6e:83:9e:a6:2b:29:8f:4d:a4:98:e9:
a6:1e:a2:97:23:0f:ea:b7:b8:a4:b0:bd:89:d3:10:
a4:83:52:1e:66:d2:81:e3:08:22:b0:a8:2c:83:3f:
58:e5:66:1c:cf:fa:2a:c8:a2:97:4e:35:e1:6e:84:
2c:98:5e:0e:59:d7:52:78:f5:62:75:0a:75:83:0a:
41:2b:e3:15:4a:96:d1:28:e0:95:67:4e:5d:9a:6a:
52:a4:36:bb:4b:ce:87:ff:3a:18:4f:cd:e3:76:6c:
6f:24:2a:e9:74:77:5e:5e:88:7a:c9:ac:bb:49:f7:
f5:54:d5:49:60:e4:b5:13:87:90:91:cc:96:b9:00:
13:b7:e5:94:d8:b9:cc:54:92:08:69:33:88:e0:d6:
8f:c9:ab:29:80:ff:1c:2a:31:b3:cd:cf:0e:e9:f0:
71:91:0f:18:fb:30:11:f7:f4:2d:51:7f:33:ee:e5:
e1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:76:D8:45:FA:CD:90:F9:70:CA:E8:90:2F:61:55:09:B9:84:3C:89
X509v3 Authority Key Identifier:
keyid:8A:69:8A:14:FB:61:A6:87:AF:0A:63:F7:C6:55:C0:01:F6:70:12:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/immKFPthpoevCmP3xlXAAfZwEoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/33d226-7c43-4c83-94ad-218289d81c53/1/immKFPthpoevCmP3xlXAAfZwEoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2c:84:4b:1d:50:45:b9:79:9a:7f:8d:2e:c5:f6:2f:f8:73:
bd:0d:12:9e:53:c8:b3:46:e0:45:c2:2c:2a:41:b6:98:8e:2a:
65:1d:99:58:b2:d7:65:3f:04:ce:73:bd:dd:26:49:87:5e:70:
33:7f:93:de:79:43:e1:0d:7c:c0:c4:0b:b3:07:c2:e7:fc:1a:
6d:f1:62:92:bd:4a:17:58:6f:b5:e4:65:cc:23:9e:ad:94:9a:
c4:34:78:c3:7a:b8:76:50:1a:a4:95:c5:6c:5d:6e:cd:d6:9c:
fc:df:b6:1e:ad:6c:45:e3:57:b0:8a:bb:47:75:7e:08:99:3c:
62:b8:18:59:49:52:c4:d5:1d:30:85:f8:e3:35:62:f8:01:ad:
50:d1:33:21:bb:bd:61:8d:72:d4:7a:aa:95:64:f9:09:e0:74:
86:f0:c4:d1:e6:1c:bd:c7:78:bd:89:f3:02:67:e1:5b:36:85:
dc:34:6c:5e:22:2a:31:5a:fc:0d:1f:68:32:10:bd:ae:75:3e:
d7:73:3a:4c:ec:17:d1:1f:9d:ac:ed:33:1b:60:d4:1e:69:70:
00:a6:db:f7:74:b6:96:cd:ed:f9:40:04:f9:0e:be:16:c3:be:
7c:c9:8b:08:93:23:5f:31:52:a1:de:40:c5:6f:cb:d0:6e:55:
fa:90:b2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:48:17 2025 by rpki-client