Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
File: imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft (raw, json)
Hash identifier: dtQP7hFO+1eICHb3wQ60M4qKVfJggYiB8GQRfxYKjUY=
Subject key identifier: F2:95:22:10:CF:18:83:7A:CD:31:CE:06:36:3D:AE:F8:B4:61:EB:F1
Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
Certificate issuer: /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Certificate serial: 019A4E4F2ECC29386F11F0D2140D6948FA88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
Manifest number: 172D
Signing time: Tue 04 Nov 2025 10:00:03 +0000
Manifest this update: Tue 04 Nov 2025 10:00:03 +0000
Manifest next update: Wed 05 Nov 2025 10:00:03 +0000
Files and hashes: 1: AmbhHmgyu8yrBMkbzGnkI8tsxAo.roa (hash: uwxXW79FBxLkGN+Si8BRtGUDQUqQKGnxx/ByuHQICRk=)
2: NSBMSdSMSkDZPZPATZRaYBRZGko.roa (hash: VafNKr4t7DSBVL6FM/c3Z2g09Dsix32ClTmM9E5fADQ=)
3: XfGWZo7cWfWs0AeA21V-Q-Ft8as.roa (hash: wdeLE3gHNM1FBTeMpoIo0xzT6JjYdbIh/aFzX+q2qOI=)
4: djclzzPckUbxpiPz0aT2KIeq3vg.roa (hash: qMAON/McMcYGiRAj8ZSkjcUFapaBDpY0uWQQ678R//0=)
5: imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl (hash: 9NWb0i/+b7my7Xy2W9oB78K9AhyRl165M0ecHpSIxSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:2e:cc:29:38:6f:11:f0:d2:14:0d:69:48:fa:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Validity
Not Before: Nov 4 10:00:03 2025 GMT
Not After : Nov 5 10:00:03 2025 GMT
Subject: CN=f2952210cf18837acd31ce06363daef8b461ebf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:32:c2:71:d2:a2:00:a8:3b:c4:c3:69:f4:ee:
15:42:94:96:52:dc:39:04:36:b1:b4:f9:29:67:05:
9c:46:c4:14:6b:44:de:1f:2c:db:3e:2e:9f:a7:ea:
01:c3:e1:fd:d4:c2:d4:8a:09:31:cb:57:46:57:38:
af:45:c9:42:c9:6f:ac:02:55:b4:80:9f:1c:02:bf:
61:29:06:f2:2a:46:b4:9d:a8:ed:17:87:7f:d2:12:
17:95:81:6f:ff:77:f9:2a:13:b1:70:5f:21:81:4b:
cc:e8:7d:43:08:f5:d4:b5:28:a8:e3:3f:f8:03:2c:
55:08:55:ee:4a:f6:5a:7d:ac:b6:9e:e7:0f:aa:16:
51:f8:0c:9c:cb:0c:aa:43:95:58:ca:20:ce:96:b4:
b3:0c:6a:77:ad:b4:59:13:80:7b:92:02:a3:da:a8:
83:54:11:91:db:d4:29:3d:34:c3:fb:ee:ce:d6:cd:
15:0d:3f:1a:01:89:86:c3:70:ee:b7:24:7f:40:8c:
69:67:42:5c:a5:30:3c:fe:7b:14:bd:5b:3c:7f:30:
91:9c:db:06:3f:35:c7:30:3d:a4:ff:66:bf:d2:41:
53:65:1c:bd:f2:ce:54:f0:92:a6:aa:56:08:7f:de:
f0:4c:3b:52:f7:fd:bd:d8:0e:20:65:95:65:03:82:
14:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:95:22:10:CF:18:83:7A:CD:31:CE:06:36:3D:AE:F8:B4:61:EB:F1
X509v3 Authority Key Identifier:
keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:9d:c2:d2:61:9d:7d:a2:5e:11:f4:36:e9:b9:2e:d8:c0:2f:
f3:cf:e0:16:c1:80:6f:55:53:98:0b:77:1c:e2:d0:6b:1f:a6:
71:0a:55:f0:45:23:e0:43:db:a3:48:75:94:cb:ac:b3:53:e3:
3b:9a:f8:d8:8c:94:bb:a3:9d:dc:f1:ea:a8:68:e9:de:92:79:
29:aa:d5:d1:e5:39:32:2f:f5:e0:28:0b:58:a6:7d:20:81:33:
8e:ef:cd:30:40:b9:64:c4:e9:bc:5b:0f:ae:c2:b5:74:32:47:
09:8f:35:25:f7:b6:97:ff:fc:b5:97:b7:64:a6:14:17:cf:9f:
99:8b:86:2a:51:71:3c:1d:00:be:bf:29:c6:03:26:bd:46:4d:
9a:0f:86:79:3a:5c:a7:97:66:20:32:fb:a6:05:42:a5:63:8f:
66:2d:5f:68:29:2b:ac:c6:fd:be:36:d6:5d:1a:83:65:fa:ef:
46:fd:cd:68:1d:42:b9:22:42:63:12:9f:a2:e6:e1:ff:b1:47:
93:15:56:38:86:a8:92:6f:fb:d6:75:2c:3b:eb:c6:15:5a:e1:
dd:e6:a5:99:37:f4:c2:50:7c:a2:ce:c3:8c:fa:a5:d7:6e:1e:
e7:e2:23:d4:43:45:70:4c:9c:8b:e0:81:e8:17:63:bd:ca:c3:
ff:1f:61:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:36 2025 by rpki-client