Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
File: imAdLqH5SMoBjDNb7actvsB51uY.mft (raw, json)
Hash identifier: kgNCLA7g3x/JqBTksVIo2+bs/PMoFnC5mJ7XczIvaYI=
Subject key identifier: 00:19:92:76:5F:4A:4E:16:F3:18:7F:D7:D4:08:1C:41:E1:09:73:57
Authority key identifier: 8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
Certificate issuer: /CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
Certificate serial: 01976C62101B4305E03FA5AB48833005DC87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
Manifest number: 047A
Signing time: Sat 14 Jun 2025 03:00:55 +0000
Manifest this update: Sat 14 Jun 2025 03:00:55 +0000
Manifest next update: Sun 15 Jun 2025 03:00:55 +0000
Files and hashes: 1: gBpXU6HMs3EdVnZKM3W9dtj0eWk.roa (hash: /5HDlgNXt08tmw8LTatvLunizw0Atkb/+jC9ix7IJ4k=)
2: imAdLqH5SMoBjDNb7actvsB51uY.crl (hash: sGc5SZ05WSrn33VbWyNeCCZIKqgO2L8C43eVu1npuLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:10:1b:43:05:e0:3f:a5:ab:48:83:30:05:dc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
Validity
Not Before: Jun 14 03:00:55 2025 GMT
Not After : Jun 15 03:00:55 2025 GMT
Subject: CN=001992765f4a4e16f3187fd7d4081c41e1097357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0f:25:89:1f:f2:ba:27:d0:e9:46:0a:88:d1:
25:84:21:14:ce:36:b3:a7:20:66:f1:7d:25:3f:8b:
89:b0:63:a2:fc:20:d7:ab:3a:d7:08:a2:e3:ac:0d:
99:20:3b:21:44:b5:06:53:6b:96:15:9d:27:32:f7:
ca:ce:fd:2e:35:bf:89:f3:95:74:0b:b9:4b:b9:9d:
40:7f:59:14:a8:90:e0:64:32:83:25:23:25:d0:98:
75:63:64:bb:20:f9:2d:72:db:28:ab:d1:ff:e8:69:
1d:b0:8b:34:0d:af:63:8d:87:66:7f:90:c7:11:0f:
41:59:8b:00:12:cc:5d:4a:7a:74:3a:30:4c:6e:1d:
f2:ff:ce:33:1f:21:30:d6:3b:c0:87:2f:86:b9:d1:
ce:83:f7:92:73:e2:31:6c:1f:f7:6a:15:c5:51:32:
85:1d:fb:c3:f9:ec:7b:d5:e2:0a:ec:85:df:f6:89:
29:1b:1b:e4:f5:d8:6f:09:00:b9:7a:e9:c9:92:55:
84:f0:00:30:b6:72:f6:56:01:48:f2:ac:36:8e:2b:
6e:15:62:c2:e2:62:f1:c1:36:47:06:4a:d3:c8:f4:
53:7b:16:02:32:96:8f:8c:39:7d:42:77:d6:99:38:
86:f6:e4:89:74:d2:9c:27:99:b0:3c:06:e1:c3:c7:
95:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:19:92:76:5F:4A:4E:16:F3:18:7F:D7:D4:08:1C:41:E1:09:73:57
X509v3 Authority Key Identifier:
keyid:8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:5c:b2:1b:6b:30:83:76:b0:68:c5:1d:17:00:49:16:ba:72:
68:27:a2:c7:ef:a5:a9:55:98:88:ea:c5:47:84:27:79:81:91:
f9:56:94:67:cd:60:aa:6e:72:58:35:67:e7:4d:d0:2d:1f:9e:
53:27:d6:de:cc:dc:35:65:a4:44:04:c7:e1:af:b8:1d:b4:ee:
6e:82:21:1d:90:66:96:58:a3:8a:16:b4:5a:f8:c9:e1:7f:45:
89:38:8b:30:4a:89:00:57:24:a7:b1:1d:6b:77:a5:46:61:b1:
c1:25:9c:e9:6e:aa:95:29:79:28:ca:c5:c0:91:ad:0b:bc:b3:
3e:6b:c0:66:ad:11:62:29:7b:cf:f9:89:e2:b8:df:4d:81:68:
6f:6a:e0:06:08:b5:39:b5:c0:42:96:e3:f2:bd:b7:78:a6:0f:
95:db:e3:c8:fc:b8:a8:87:0d:2e:87:35:87:1d:d8:07:fa:e1:
10:7a:5a:eb:e0:7f:0c:11:9b:a2:63:75:bf:fe:92:08:88:6c:
c8:7f:b6:cc:8a:23:34:ce:05:ff:c7:53:1a:b1:29:23:9a:9b:
4e:e9:89:b5:b4:c8:a6:ed:e0:29:34:c7:0e:70:97:f0:d6:66:
8b:e9:15:24:4e:9a:23:17:94:c9:3c:ef:3c:19:ae:e1:73:5f:
61:0c:1a:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsYhAbQwXgP6WrSIMwBdyHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNjAxZDJlYTFmOTQ4Y2EwMThjMzM1YmVkYTcyZGJlYzA3
OWQ2ZTYwHhcNMjUwNjE0MDMwMDU1WhcNMjUwNjE1MDMwMDU1WjAzMTEwLwYDVQQD
EygwMDE5OTI3NjVmNGE0ZTE2ZjMxODdmZDdkNDA4MWM0MWUxMDk3MzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA8liR/yuifQ6UYKiNElhCEUzjaz
pyBm8X0lP4uJsGOi/CDXqzrXCKLjrA2ZIDshRLUGU2uWFZ0nMvfKzv0uNb+J85V0
C7lLuZ1Af1kUqJDgZDKDJSMl0Jh1Y2S7IPktctsoq9H/6GkdsIs0Da9jjYdmf5DH
EQ9BWYsAEsxdSnp0OjBMbh3y/84zHyEw1jvAhy+GudHOg/eSc+IxbB/3ahXFUTKF
HfvD+ex71eIK7IXf9okpGxvk9dhvCQC5eunJklWE8AAwtnL2VgFI8qw2jituFWLC
4mLxwTZHBkrTyPRTexYCMpaPjDl9QnfWmTiG9uSJdNKcJ5mwPAbhw8eVewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAZknZfSk4W8xh/19QIHEHhCXNXMB8GA1UdIwQY
MBaAFIpgHS6h+UjKAYwzW+2nLb7AedbmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW1BZExxSDVTTW9CakROYjdhY3R2c0I1MXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lNzk4OWEtMGI1ZS00YTkxLTlkYmEt
YTQyNTgyMDcwOTQ5LzEvaW1BZExxSDVTTW9CakROYjdhY3R2c0I1MXVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lNzk4OWEtMGI1ZS00YTkxLTlkYmEtYTQyNTgyMDcwOTQ5
LzEvaW1BZExxSDVTTW9CakROYjdhY3R2c0I1MXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1yyG2sw
g3awaMUdFwBJFrpyaCeix++lqVWYiOrFR4QneYGR+VaUZ81gqm5yWDVn503QLR+e
UyfW3szcNWWkRATH4a+4HbTuboIhHZBmllijiha0WvjJ4X9FiTiLMEqJAFckp7Ed
a3elRmGxwSWc6W6qlSl5KMrFwJGtC7yzPmvAZq0RYil7z/mJ4rjfTYFob2rgBgi1
ObXAQpbj8r23eKYPldvjyPy4qIcNLoc1hx3YB/rhEHpa6+B/DBGbomN1v/6SCIhs
yH+2zIojNM4F/8dTGrEpI5qbTumJtbTIpu3gKTTHDnCX8NZmi+kVJE6aIxeUyTzv
PBmu4XNfYQwaaQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:11:39 2025 by rpki-client