Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
File: imAdLqH5SMoBjDNb7actvsB51uY.mft (raw, json)
Hash identifier: QUbftfnPkWPV3OJusYxTXFaa0sp3nxncQ+9yhktu7Jw=
Subject key identifier: 48:54:CC:1A:54:FA:D3:D3:92:C6:D2:9D:7E:FF:07:B4:F3:DB:4F:64
Authority key identifier: 8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
Certificate issuer: /CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
Certificate serial: 019873069C0C20EE693117C64F54A565CB6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
Manifest number: 0502
Signing time: Mon 04 Aug 2025 03:01:09 +0000
Manifest this update: Mon 04 Aug 2025 03:01:09 +0000
Manifest next update: Tue 05 Aug 2025 03:01:09 +0000
Files and hashes: 1: gBpXU6HMs3EdVnZKM3W9dtj0eWk.roa (hash: /5HDlgNXt08tmw8LTatvLunizw0Atkb/+jC9ix7IJ4k=)
2: imAdLqH5SMoBjDNb7actvsB51uY.crl (hash: QnPcH3UAck/MdATWHR6IrlEOl8oVqRvuNjvkx+955Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:9c:0c:20:ee:69:31:17:c6:4f:54:a5:65:cb:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a601d2ea1f948ca018c335beda72dbec079d6e6
Validity
Not Before: Aug 4 03:01:09 2025 GMT
Not After : Aug 5 03:01:09 2025 GMT
Subject: CN=4854cc1a54fad3d392c6d29d7eff07b4f3db4f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:28:79:28:7b:06:da:fd:d7:4d:5b:20:91:50:
65:85:3b:9c:34:d0:d7:38:29:38:3a:0d:39:a9:a1:
26:0b:7b:0a:e4:2f:44:b6:bd:60:06:f1:5c:ca:43:
f4:71:e5:64:a0:b6:7b:7c:a1:fb:08:ac:ba:6f:22:
9d:4f:4f:7f:02:d1:de:93:cb:7b:85:2c:82:12:e5:
ce:30:fe:8f:b3:c4:74:75:1b:9a:c5:ec:6f:93:d5:
0c:e9:b3:f9:27:b8:ad:2a:37:82:b7:44:0a:94:75:
f4:bb:ab:ea:1c:ac:3f:43:c4:89:e1:ef:9e:d6:cf:
fb:e6:2f:ae:59:72:95:1e:bb:b1:ca:9d:51:e5:b4:
de:0a:f0:f8:01:83:14:db:ed:09:52:20:36:2f:c7:
0e:10:ae:6b:b6:8d:e9:3a:b8:ed:9b:6e:4d:ae:e7:
4a:16:a4:ec:05:3e:24:e6:aa:43:43:7e:08:fb:dd:
41:02:6e:c2:56:44:e3:40:1d:93:db:96:bb:a3:6d:
cf:08:c4:09:04:ac:82:07:87:35:6d:0e:4b:c4:c8:
78:7e:4b:da:0f:a2:69:48:fa:dc:18:b3:3c:2d:be:
07:1e:b0:cb:9e:84:e5:d7:36:60:9c:38:a0:57:af:
59:73:9a:f4:80:c8:7e:9f:e4:9a:b0:09:bd:f6:13:
90:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:54:CC:1A:54:FA:D3:D3:92:C6:D2:9D:7E:FF:07:B4:F3:DB:4F:64
X509v3 Authority Key Identifier:
keyid:8A:60:1D:2E:A1:F9:48:CA:01:8C:33:5B:ED:A7:2D:BE:C0:79:D6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAdLqH5SMoBjDNb7actvsB51uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e7989a-0b5e-4a91-9dba-a42582070949/1/imAdLqH5SMoBjDNb7actvsB51uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c0:e2:8c:8f:66:b1:6f:f7:c3:4f:a6:ed:b5:11:6e:69:10:
1c:a5:fe:60:6d:40:d8:81:73:24:56:87:cb:cf:b4:d5:a3:9e:
b2:b7:fe:68:12:de:60:54:29:43:a2:f2:69:ce:fc:20:43:ef:
4b:0f:98:3d:d9:4c:a9:4a:93:bf:b7:42:f6:af:1b:47:b8:77:
19:c8:e7:63:90:f0:48:ff:12:fb:c2:40:3c:87:0c:d5:2a:81:
ca:67:f1:19:ba:cb:7e:3d:46:f4:e7:10:74:d6:02:62:2f:3c:
77:1c:e6:1b:75:e5:8f:11:b5:8c:d1:a7:41:67:81:27:32:96:
76:84:df:d6:04:c8:23:30:32:7b:ce:30:25:1b:6a:15:10:60:
0b:0d:72:e8:ef:81:f9:0e:ef:a3:6b:a6:23:97:43:09:86:0e:
54:b0:04:e1:6b:4e:b1:58:53:40:99:6a:72:29:3d:1f:2d:4a:
4c:e7:d1:a4:0d:dc:b6:7d:5c:6e:0a:e4:86:bd:ee:21:63:41:
e4:68:c3:90:fc:7d:ad:9f:cb:27:22:da:e2:6c:25:f2:4c:77:
13:3e:be:d8:aa:c2:d5:b7:d3:cd:dc:63:c4:96:83:70:30:ae:
c8:4d:63:d7:98:13:d5:7c:c5:e9:13:28:20:15:25:06:90:6d:
33:2c:03:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:32 2025 by rpki-client