Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
File: IMC5sz3OXroK6mSJFY0_snAirOc.mft (raw, json)
Hash identifier: NmZkW2/ZqfUtdq9eeZXcA+QAfCao7iiK8vtMzYwSJZ8=
Subject key identifier: F9:B7:14:55:27:59:85:A4:2A:7D:5C:AB:0F:72:BD:A6:3D:B5:F2:A5
Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Certificate serial: 019A51F591D9E4FE1C5E03D38B33EF8AF3CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
Manifest number: 1035
Signing time: Wed 05 Nov 2025 03:00:39 +0000
Manifest this update: Wed 05 Nov 2025 03:00:39 +0000
Manifest next update: Thu 06 Nov 2025 03:00:39 +0000
Files and hashes: 1: IMC5sz3OXroK6mSJFY0_snAirOc.crl (hash: 82DUa+AxaGV/nLRe+c7dK7dunqwyo5yNkzZqn2te/8Y=)
2: _t0G-nTb4aukqy0OCUwpkcnZ1II.roa (hash: KNLLqIEJ5dlRl5uPgTAYCRT2GgZHFc+269aOuK3BWNQ=)
3: iIfA58agMV_RqJ74K2RRl6EqU28.roa (hash: lku32PUlX5LHQflLOMldhRZ2jvWTzkqH2DWG39ZWQfM=)
4: tPeq-jjd1LfJCGPS7kRFioCnf1s.roa (hash: IHjSVV+vrTNKBQIJ5PbeYeBS76QGn2Ghw7Cv5izSDhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:91:d9:e4:fe:1c:5e:03:d3:8b:33:ef:8a:f3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Validity
Not Before: Nov 5 03:00:39 2025 GMT
Not After : Nov 6 03:00:39 2025 GMT
Subject: CN=f9b71455275985a42a7d5cab0f72bda63db5f2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fd:fb:62:77:41:ff:43:3e:00:a9:0a:9e:21:
ef:30:f5:e8:4d:df:08:1b:83:82:96:c4:e7:71:00:
e2:1b:63:d9:da:9b:d9:eb:dc:1a:88:83:d4:0b:f5:
ad:28:a6:e7:c8:91:0b:06:ca:54:e0:7f:4f:a9:d1:
4b:a4:65:22:ba:9c:4c:be:7c:20:74:f8:08:ab:54:
11:c9:ce:0f:a4:37:6a:da:d8:5e:a4:80:d7:2c:b1:
16:3d:c2:57:e2:34:a2:8c:7b:76:37:fd:85:23:0c:
27:69:7a:90:26:9c:65:c6:d3:03:cc:97:b7:4c:52:
51:0e:59:57:f5:6c:98:6b:97:79:55:45:ba:f3:a9:
fe:a0:6e:2d:79:23:d7:de:57:10:29:c5:a1:9a:e0:
76:b5:7c:2a:e0:eb:3c:01:f3:e5:85:8e:2b:a6:47:
06:c8:f0:ea:b1:92:a1:16:96:8c:52:96:46:9d:9f:
22:07:e6:b1:57:dd:ad:bf:67:d8:41:36:d8:c2:c0:
3e:02:e5:b1:c9:80:6a:a3:bc:64:92:42:f4:48:e8:
59:8d:be:d4:81:80:c3:30:9a:1a:65:6e:f0:37:81:
81:62:0f:4b:62:ce:47:b8:63:b9:ce:f3:c4:10:e4:
27:6d:1b:ca:87:91:55:9b:33:8d:f3:9f:c8:54:c7:
da:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B7:14:55:27:59:85:A4:2A:7D:5C:AB:0F:72:BD:A6:3D:B5:F2:A5
X509v3 Authority Key Identifier:
keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d0:30:21:f2:79:d6:9e:e2:cc:4c:cf:e8:8e:ca:76:7a:0e:
1d:b8:cc:28:5f:cd:3e:70:5b:d8:b2:a5:ae:f0:fa:31:27:2b:
5e:f2:c4:cc:86:e0:cf:8c:a3:a0:98:74:16:55:bf:53:3b:da:
31:8f:e7:85:5d:d9:b3:39:e7:f9:3a:4c:a6:bc:77:95:45:be:
08:c4:a2:d1:f5:0e:2a:0d:83:07:0b:b8:a3:1f:8f:53:4c:30:
3c:cb:9c:44:67:63:88:79:c9:ed:3e:37:04:55:f8:9a:48:7d:
42:2a:b1:60:7e:f2:e0:6c:7a:aa:6a:dd:0f:f2:c0:34:36:00:
ad:78:61:85:31:53:b1:74:ec:01:e8:5a:a6:b1:3f:37:30:98:
0b:8b:84:53:ab:aa:d4:12:ce:57:09:c5:63:bd:0f:36:f2:eb:
c9:bf:14:74:2e:65:a7:1f:58:3d:83:1d:6b:f5:3f:2d:47:72:
c6:38:c4:1a:1b:50:d0:5f:a5:d2:b5:5b:dc:0e:94:cd:8b:a4:
bf:ed:76:53:1b:17:84:d3:8a:c1:48:f6:0e:98:d7:5b:af:90:
4f:a6:8d:6a:8e:73:1d:a4:39:8f:be:de:4c:62:a1:d1:75:ff:
ff:41:2f:4d:3e:c5:e6:a4:18:38:3d:e8:55:08:35:7b:6e:ba:
5e:48:21:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:20:20 2025 by rpki-client