Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
File: IMC5sz3OXroK6mSJFY0_snAirOc.mft (raw, json)
Hash identifier: pH3QS/3XdzOJ6EZ4+ChTlHO1c9Zy4DUBemBbRD4F3kk=
Subject key identifier: 8C:8F:FD:7C:07:FA:02:20:87:CE:D7:D1:7F:42:AF:E3:45:4D:DF:45
Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Certificate serial: 01977DC323DE3769F86D60543C46C9AE53FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
Manifest number: 0EBE
Signing time: Tue 17 Jun 2025 12:00:30 +0000
Manifest this update: Tue 17 Jun 2025 12:00:30 +0000
Manifest next update: Wed 18 Jun 2025 12:00:30 +0000
Files and hashes: 1: IMC5sz3OXroK6mSJFY0_snAirOc.crl (hash: C2MMEjnHbnSKPFlEVte0Vb/VJno/nL2/JclkCutLAJ4=)
2: _t0G-nTb4aukqy0OCUwpkcnZ1II.roa (hash: KNLLqIEJ5dlRl5uPgTAYCRT2GgZHFc+269aOuK3BWNQ=)
3: iIfA58agMV_RqJ74K2RRl6EqU28.roa (hash: lku32PUlX5LHQflLOMldhRZ2jvWTzkqH2DWG39ZWQfM=)
4: tPeq-jjd1LfJCGPS7kRFioCnf1s.roa (hash: IHjSVV+vrTNKBQIJ5PbeYeBS76QGn2Ghw7Cv5izSDhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:c3:23:de:37:69:f8:6d:60:54:3c:46:c9:ae:53:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Validity
Not Before: Jun 17 12:00:30 2025 GMT
Not After : Jun 18 12:00:30 2025 GMT
Subject: CN=8c8ffd7c07fa022087ced7d17f42afe3454ddf45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d1:de:95:11:fc:45:0e:08:6b:06:12:df:42:
c5:2f:b6:20:2c:38:53:e7:da:c5:f3:fc:93:25:84:
94:46:7f:2a:55:92:c7:51:9b:d7:94:45:5a:f1:00:
38:97:b2:39:df:4e:f3:7d:6e:85:2c:36:a1:d9:24:
5b:e6:5d:3d:f0:6d:f5:e0:f1:df:70:86:4e:9c:27:
16:9e:2a:fa:21:85:00:f0:9e:94:0c:24:15:d5:b4:
c2:fb:ba:1e:32:bd:0e:d1:3c:ae:2b:1c:01:09:46:
67:1a:40:37:4b:22:42:d6:d3:b7:8e:6f:2a:62:ff:
be:9c:e3:30:a3:85:6c:42:9b:85:62:e8:e1:92:60:
dd:23:5f:06:02:41:c8:5d:c9:93:aa:c8:50:04:92:
d4:42:c0:f1:a6:eb:ab:e6:0f:3f:15:69:fa:c3:07:
c9:66:04:5b:db:41:0f:89:d2:d5:52:96:0e:52:3e:
3c:96:8d:0d:78:23:53:80:eb:73:b5:b7:71:58:85:
1c:40:d5:e3:58:54:bf:b0:03:28:ed:ca:a1:de:65:
4b:c5:7e:a0:0c:7e:0d:b4:d8:2f:aa:fa:26:24:c7:
66:47:31:5e:a7:14:8f:0e:9e:75:f5:94:63:03:d7:
54:07:a1:32:51:80:4a:13:8c:7f:94:ea:bb:8a:ef:
90:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8F:FD:7C:07:FA:02:20:87:CE:D7:D1:7F:42:AF:E3:45:4D:DF:45
X509v3 Authority Key Identifier:
keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:22:27:4b:2a:69:65:73:7e:ba:6a:27:bd:50:c5:51:c4:ff:
44:6c:e2:a4:ae:ca:a7:15:94:f6:71:fe:b7:ce:8a:95:ff:d9:
22:f8:91:34:c6:56:52:b5:0d:8a:28:48:00:a5:fd:32:52:6c:
3c:2c:69:a4:6f:48:93:6f:6b:da:db:78:67:71:ee:b9:7a:a2:
72:73:9d:e9:cd:07:55:b7:ba:e5:88:c2:a9:50:b1:d0:8a:3a:
39:11:d0:71:5f:bb:a3:37:03:49:ae:99:12:3f:21:3c:18:99:
81:98:5b:06:b1:f0:76:f6:07:05:53:43:88:c9:26:a8:29:9d:
a3:26:1c:87:09:60:ee:2b:e1:3d:a4:df:de:a9:ce:e0:39:98:
2e:da:31:bf:3c:01:8f:99:61:b4:c8:23:dd:b1:0c:9e:04:91:
38:7d:88:e0:9f:db:fd:fb:18:72:63:78:7a:d9:47:81:da:69:
8b:70:76:3f:af:b0:9b:aa:70:e8:7c:11:25:c7:07:0c:df:a6:
f4:26:03:3c:76:28:e9:a2:89:ce:c9:9b:c9:a5:91:fd:4d:c8:
26:04:b9:fb:da:73:9c:66:8f:49:d0:6b:21:59:aa:90:ae:f3:
30:98:f6:74:3f:60:4a:69:dc:ce:5c:6a:68:53:d4:6a:49:f1:
d7:eb:75:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd9wyPeN2n4bWBUPEbJrlP7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYzBiOWIzM2RjZTVlYmEwYWVhNjQ4OTE1OGQzZmIyNzAy
MmFjZTcwHhcNMjUwNjE3MTIwMDMwWhcNMjUwNjE4MTIwMDMwWjAzMTEwLwYDVQQD
Eyg4YzhmZmQ3YzA3ZmEwMjIwODdjZWQ3ZDE3ZjQyYWZlMzQ1NGRkZjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodHelRH8RQ4IawYS30LFL7YgLDhT
59rF8/yTJYSURn8qVZLHUZvXlEVa8QA4l7I5307zfW6FLDah2SRb5l098G314PHf
cIZOnCcWnir6IYUA8J6UDCQV1bTC+7oeMr0O0TyuKxwBCUZnGkA3SyJC1tO3jm8q
Yv++nOMwo4VsQpuFYujhkmDdI18GAkHIXcmTqshQBJLUQsDxpuur5g8/FWn6wwfJ
ZgRb20EPidLVUpYOUj48lo0NeCNTgOtztbdxWIUcQNXjWFS/sAMo7cqh3mVLxX6g
DH4NtNgvqvomJMdmRzFepxSPDp519ZRjA9dUB6EyUYBKE4x/lOq7iu+QUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyP/XwH+gIgh87X0X9Cr+NFTd9FMB8GA1UdIwQY
MBaAFCDAubM9zl66CupkiRWNP7JwIqznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yMGJiNDktZTUwOS00YzdiLThlNWEt
OGQzZGNjMzNhZDBhLzEvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yMGJiNDktZTUwOS00YzdiLThlNWEtOGQzZGNjMzNhZDBh
LzEvSU1DNXN6M09Ycm9LNm1TSkZZMF9zbkFpck9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqyInSypp
ZXN+umonvVDFUcT/RGzipK7KpxWU9nH+t86Klf/ZIviRNMZWUrUNiihIAKX9MlJs
PCxppG9Ik29r2tt4Z3HuuXqicnOd6c0HVbe65YjCqVCx0Io6ORHQcV+7ozcDSa6Z
Ej8hPBiZgZhbBrHwdvYHBVNDiMkmqCmdoyYchwlg7ivhPaTf3qnO4DmYLtoxvzwB
j5lhtMgj3bEMngSROH2I4J/b/fsYcmN4etlHgdppi3B2P6+wm6pw6HwRJccHDN+m
9CYDPHYo6aKJzsmbyaWR/U3IJgS5+9pznGaPSdBrIVmqkK7zMJj2dD9gSmnczlxq
aFPUaknx1+t1bg==
-----END CERTIFICATE-----
Generated at Tue Jun 17 18:06:39 2025 by rpki-client