Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
File: imBgNTuY9TMW0CL6AdKZ11__ItY.mft (raw, json)
Hash identifier: cYWjnDHSLOWkgObCIsfLISA+KTNQjDF7ztWPk48WA6Q=
Subject key identifier: CC:37:4F:9E:9C:6A:FB:C0:DF:6D:87:B6:4B:C3:14:00:A4:6E:3D:80
Authority key identifier: 8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
Certificate issuer: /CN=8a6060353b98f53316d022fa01d299d75fff22d6
Certificate serial: 01987298833EF7C8BFD6E20735271C6F2EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
Manifest number: 0346
Signing time: Mon 04 Aug 2025 01:00:54 +0000
Manifest this update: Mon 04 Aug 2025 01:00:54 +0000
Manifest next update: Tue 05 Aug 2025 01:00:54 +0000
Files and hashes: 1: 053VQxunxAeUFWyp53gx-beqwOw.roa (hash: 7JicntomGJy1FdKv/+65cawmZt1C37Ox3QqgLF1dC6U=)
2: imBgNTuY9TMW0CL6AdKZ11__ItY.crl (hash: ZGRbcLdkQ0FO3RZxC02Sqa67zHFr7sm7S977YrZcKPQ=)
3: sY_8uI_Vy_Kyk6ImGlPdHmVKVYk.roa (hash: NexMNxJOVKLfI4XsOD08LdcHHjE/wZ9FYtwH9p7yFUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:83:3e:f7:c8:bf:d6:e2:07:35:27:1c:6f:2e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6060353b98f53316d022fa01d299d75fff22d6
Validity
Not Before: Aug 4 01:00:54 2025 GMT
Not After : Aug 5 01:00:54 2025 GMT
Subject: CN=cc374f9e9c6afbc0df6d87b64bc31400a46e3d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e4:65:e8:33:7e:36:85:da:9e:7f:71:6e:74:
19:5f:75:19:ba:0f:27:54:df:ed:63:08:2c:98:db:
ad:4a:94:fd:5d:ce:84:b5:b4:8a:4d:14:3f:bd:91:
de:af:f2:e4:f6:6f:ec:8b:5f:c0:99:b0:18:74:6b:
7f:f6:e1:87:09:03:a9:b9:c8:6c:c3:f1:c2:07:32:
db:0b:0e:ab:11:a8:5f:02:2a:b9:eb:e3:ce:92:bc:
91:f3:83:92:83:0f:c3:e5:b8:0b:53:06:37:bb:58:
84:b3:3d:c5:f7:7a:2c:1c:46:46:fc:d4:a4:23:8e:
9d:7a:74:b6:7c:b0:fd:4b:5b:3d:fe:c6:67:62:4a:
87:01:47:e9:29:b9:fa:46:2c:d5:af:ea:a4:07:43:
c6:91:f9:ae:6d:ab:3d:49:50:3c:3a:96:9e:73:53:
74:4c:56:6e:ea:b5:5b:b1:a5:8a:d4:18:49:04:96:
6a:da:c1:9d:9c:19:b2:0d:4b:1e:32:17:a7:cf:db:
fb:a5:5c:b5:f2:20:a5:7c:1f:1b:1a:40:23:de:17:
b3:e8:f5:f1:0f:8f:12:90:95:f4:7c:d6:3b:63:6a:
03:e2:8c:a6:c1:4f:c6:e7:59:26:d5:1d:2d:6c:93:
32:2f:62:31:ec:b7:1b:19:89:23:56:77:ef:77:2e:
ef:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:37:4F:9E:9C:6A:FB:C0:DF:6D:87:B6:4B:C3:14:00:A4:6E:3D:80
X509v3 Authority Key Identifier:
keyid:8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ba:e5:b6:f1:a6:c0:45:0d:12:fc:b5:7a:20:b2:d3:cf:7a:
2b:d2:1b:ed:f1:f0:c0:f5:89:f6:3f:17:54:88:03:91:1d:88:
c0:1a:7c:c5:60:20:19:a8:1e:7b:f1:06:de:70:21:89:5c:21:
87:9c:94:fe:61:10:0c:21:cd:d1:76:0b:84:cf:d6:80:77:8f:
a2:5b:08:7d:06:11:18:21:3a:20:a1:b7:25:6b:6a:78:2a:32:
18:2d:af:b5:25:ee:0f:6a:5f:f6:fc:ed:f0:ca:9a:70:82:5f:
ca:cf:cd:a9:b8:af:69:70:28:3c:09:28:95:12:07:35:fb:2f:
c0:d2:a3:80:68:a6:d0:31:3e:e1:0a:14:a1:b6:ad:68:52:1b:
2c:e5:11:9e:53:e8:07:2d:bc:ef:77:25:06:37:20:f6:c7:8c:
38:51:ee:2f:82:39:30:98:6a:18:d7:cc:c7:5f:c3:9e:78:cc:
71:99:4c:63:cd:fd:85:8d:1a:60:a4:ae:04:cd:50:4f:bb:30:
fe:d6:df:c7:27:36:0c:19:0f:ec:81:f1:a6:39:69:a9:ef:b7:
db:07:54:dc:d7:d7:64:b9:12:52:0b:f7:a0:dd:87:c5:e4:58:
c3:99:f2:af:13:b1:14:a0:48:ec:0a:d7:6a:fc:eb:e6:1e:d6:
8c:bd:be:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:48 2025 by rpki-client