
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
File: imBgNTuY9TMW0CL6AdKZ11__ItY.mft (raw, json)
Hash identifier: tt61gYpqMi6UH/PHkORmVmReroEbguqXLhasV38BfF8=
Subject key identifier: F7:26:FD:D7:D1:07:45:81:8D:2B:B6:5D:39:A5:C9:13:CE:4E:11:8C
Authority key identifier: 8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
Certificate issuer: /CN=8a6060353b98f53316d022fa01d299d75fff22d6
Certificate serial: 0197759C24EE2711E420725FCF5F459C59D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
Manifest number: 02C3
Signing time: Sun 15 Jun 2025 22:00:56 +0000
Manifest this update: Sun 15 Jun 2025 22:00:56 +0000
Manifest next update: Mon 16 Jun 2025 22:00:56 +0000
Files and hashes: 1: 053VQxunxAeUFWyp53gx-beqwOw.roa (hash: 7JicntomGJy1FdKv/+65cawmZt1C37Ox3QqgLF1dC6U=)
2: imBgNTuY9TMW0CL6AdKZ11__ItY.crl (hash: OxBO7420/vbMqJHPnHflSl0h3KV8tjpR69ssOkmo0u8=)
3: sY_8uI_Vy_Kyk6ImGlPdHmVKVYk.roa (hash: NexMNxJOVKLfI4XsOD08LdcHHjE/wZ9FYtwH9p7yFUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:9c:24:ee:27:11:e4:20:72:5f:cf:5f:45:9c:59:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6060353b98f53316d022fa01d299d75fff22d6
Validity
Not Before: Jun 15 22:00:56 2025 GMT
Not After : Jun 16 22:00:56 2025 GMT
Subject: CN=f726fdd7d10745818d2bb65d39a5c913ce4e118c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:48:7f:3e:58:f2:a8:7b:69:b6:6f:80:d1:be:
63:37:ab:3f:86:f9:6c:d1:e8:e0:8d:1d:c5:b8:c0:
9e:48:bc:b4:77:a1:f5:d6:a7:a0:73:2f:20:79:14:
b5:f6:d1:e5:eb:0c:fa:c9:42:3e:ce:3e:d4:e8:00:
50:a6:e5:fd:a2:f7:6f:83:de:82:f2:37:ca:be:4f:
0c:ac:bd:f6:0a:af:89:95:d2:d0:6a:58:83:85:7f:
ba:15:e8:0d:47:c7:2d:5f:54:81:fc:96:3d:b7:13:
2f:9f:cc:09:c1:77:4b:eb:47:48:d9:9c:34:7e:84:
bf:a0:48:b4:19:73:b1:95:42:7e:03:df:67:38:4b:
ff:52:65:8d:71:48:5e:b3:f4:7e:89:0e:db:ad:0d:
7a:e4:b0:15:97:cf:51:30:50:94:a7:64:e6:d0:5d:
27:4a:3b:5b:85:8e:4a:1d:42:9a:f0:4f:2b:5a:0f:
ff:50:7d:85:46:56:1a:3f:cd:f6:1d:3c:2f:29:59:
49:c4:6e:0a:e7:d4:bd:3e:89:6c:28:b1:10:8d:00:
54:5a:f7:2e:53:17:ea:3a:5a:2c:04:97:e3:48:1e:
0e:93:6b:72:eb:15:0b:18:8e:52:9f:72:b6:cd:d6:
17:ef:0f:5f:6f:0e:a6:a3:4a:20:83:0d:8d:c9:1c:
a2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:26:FD:D7:D1:07:45:81:8D:2B:B6:5D:39:A5:C9:13:CE:4E:11:8C
X509v3 Authority Key Identifier:
keyid:8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ed:52:02:ed:a4:e3:af:7b:48:e6:df:96:8d:a3:67:c0:ff:
9f:1d:44:da:a2:de:29:fe:0a:b8:bb:ce:cb:ff:30:a9:41:a8:
ea:52:16:ca:55:66:6e:cd:cc:8b:29:39:c5:0f:a6:f9:93:27:
66:7d:c4:74:f2:16:f2:38:dd:96:d1:73:4b:67:fc:bc:df:38:
57:80:72:48:aa:67:89:55:57:a8:56:1a:1f:a8:b3:a1:04:15:
67:0c:8c:29:ab:09:24:21:b0:77:e8:65:46:ee:e9:b4:d9:da:
2d:b6:31:02:8c:44:f9:16:41:0e:a9:af:c8:52:e8:51:d8:b3:
13:fd:b8:cb:36:40:18:22:ee:7d:6c:9d:ec:a7:a0:dc:63:ac:
23:b0:ab:ab:99:85:85:c3:3c:ad:ba:b4:e2:5b:da:9c:c7:31:
80:af:61:23:36:4c:8a:82:58:33:88:40:bc:de:c9:ad:03:d4:
d5:d7:58:53:91:52:fe:db:2d:46:f7:47:1f:8a:ac:26:54:ac:
51:62:1a:ef:2f:e3:78:30:e7:8f:17:b3:43:70:fc:c0:24:23:
ec:65:14:41:2d:8d:1a:ed:da:e3:99:0e:e7:5a:7c:1c:5d:86:
de:6a:24:11:92:9d:62:09:05:14:b2:d5:21:f3:f9:ff:9c:58:
cf:5c:0a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:18:29 2025 by rpki-client