Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
File: imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft (raw, json)
Hash identifier: Tkctpk7+YVEO9oFB8wissPLuPFGnb9J0JanXBfy8GjE=
Subject key identifier: AE:D0:58:19:C3:8D:5F:46:D2:DA:5F:BF:FB:0A:8C:C4:8C:15:38:3F
Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
Certificate issuer: /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Certificate serial: 01976D745D4A45D152C372FD50C13AA72CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
Manifest number: 15AE
Signing time: Sat 14 Jun 2025 08:00:31 +0000
Manifest this update: Sat 14 Jun 2025 08:00:31 +0000
Manifest next update: Sun 15 Jun 2025 08:00:31 +0000
Files and hashes: 1: AmbhHmgyu8yrBMkbzGnkI8tsxAo.roa (hash: uwxXW79FBxLkGN+Si8BRtGUDQUqQKGnxx/ByuHQICRk=)
2: L7o25i0_zd5XbD6twWAjOTkNfJQ.roa (hash: OWaSwhTa58J7U8msuLQTRf8W3It8BfHs+JPwCOU3dCk=)
3: ODrsbMjG9qdaweSVu2hQiAWib_4.roa (hash: dfEGlvo51D/Az6e2gNlFUybGMrG7MrWpkapNXLlycXI=)
4: XfGWZo7cWfWs0AeA21V-Q-Ft8as.roa (hash: wdeLE3gHNM1FBTeMpoIo0xzT6JjYdbIh/aFzX+q2qOI=)
5: djclzzPckUbxpiPz0aT2KIeq3vg.roa (hash: qMAON/McMcYGiRAj8ZSkjcUFapaBDpY0uWQQ678R//0=)
6: f3t_UNJWKVLbbqTSRagtMmmMKZw.roa (hash: ovleolAf657e+Xkh7kQLw0Pswx9FL3alnCQ2UDw7zkQ=)
7: imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl (hash: 6Yqj8JPLvFhPvB02zmhjA/9/eNGNurjSb4hUviPNi4o=)
8: r4rXXxIgSH7c9iVAaISk1mXOtHM.roa (hash: 9aYpm/du2K8gdxDZs5dvyMGCHZxZm2TnZjsij83mYnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:5d:4a:45:d1:52:c3:72:fd:50:c1:3a:a7:2c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Validity
Not Before: Jun 14 08:00:31 2025 GMT
Not After : Jun 15 08:00:31 2025 GMT
Subject: CN=aed05819c38d5f46d2da5fbffb0a8cc48c15383f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:e3:85:87:04:80:b4:41:5c:51:b6:4c:84:
e9:f9:76:61:a4:b1:10:9f:68:f6:d4:89:4e:7e:ae:
71:2a:dd:cc:2d:ca:50:db:cf:fb:74:a9:fc:ab:64:
c0:40:a9:96:06:cc:2c:dc:02:cb:4c:0d:32:e2:c6:
85:1c:2c:4e:60:95:4d:92:a6:89:dc:59:08:c4:f1:
6a:b9:c5:b4:bc:18:29:44:05:4c:25:f7:96:c7:ad:
aa:14:7d:ae:72:15:1f:44:38:d5:1f:d9:fa:14:38:
d5:85:b5:b9:a7:04:7e:a5:15:a1:eb:f8:b5:b0:83:
e2:4d:a2:07:9a:32:d4:c2:9f:8b:06:36:da:4b:fb:
cf:47:d1:42:63:4c:33:d2:7a:67:09:eb:05:7e:91:
45:6c:34:77:d2:d5:28:a6:ad:3b:6f:2b:0c:c2:07:
54:7b:58:46:6b:20:f6:28:d2:89:1b:f7:87:65:3a:
e1:e2:cc:da:2d:fe:1a:de:59:ec:0c:6f:4d:87:8d:
8a:ac:45:87:de:d6:3a:9b:0a:e4:39:88:22:09:85:
f2:63:05:f4:5f:69:a7:ab:1e:6f:aa:f8:52:02:f8:
26:cb:c3:f4:69:c5:92:9b:c1:4f:8b:7b:a9:80:36:
ed:c7:13:6b:c5:b8:5a:3d:d4:ae:e2:95:67:13:5b:
11:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D0:58:19:C3:8D:5F:46:D2:DA:5F:BF:FB:0A:8C:C4:8C:15:38:3F
X509v3 Authority Key Identifier:
keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:47:e0:94:f2:e0:3b:14:0e:17:54:5b:3c:0f:6c:69:6d:1b:
5a:02:8b:d2:5b:9e:d8:e9:92:3d:05:53:8b:7c:10:4b:a0:03:
61:1a:b8:91:b9:dc:c6:14:b0:61:2e:2c:69:dd:26:cd:2d:08:
a4:a8:34:6a:4f:ab:4b:de:f9:5e:ee:64:69:63:9e:f4:9c:5a:
42:77:a7:fb:8e:f5:f5:12:0c:7a:8e:0d:3b:81:e7:52:64:22:
4f:25:b1:83:64:5b:08:ae:a4:5d:2e:3f:d0:b1:63:39:a4:78:
19:d6:b5:eb:5c:82:d9:78:9c:cd:56:cd:f1:a5:05:50:2d:e5:
27:4c:b4:a3:30:53:a9:99:c9:c1:15:d2:88:1a:03:5e:0e:31:
37:83:f6:f3:8b:4d:67:c4:ce:38:39:ca:46:07:de:ac:1f:7a:
e6:2a:63:b7:2f:8b:f7:a7:e3:49:e1:dd:06:2f:88:61:b4:23:
d1:27:c6:96:2c:24:2d:61:0a:48:b8:11:8c:ad:4d:ce:51:a0:
77:5a:a1:55:e3:96:a9:7b:db:67:f2:bf:6c:5c:e3:a5:6c:7b:
55:d0:32:36:f7:1b:7e:1d:d6:2e:9a:af:ba:2c:37:39:9a:f8:
64:33:ce:03:ad:b4:57:b7:a5:22:c5:29:62:24:45:14:4a:c4:
0e:00:94:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:21:37 2025 by rpki-client