Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
File: imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft (raw, json)
Hash identifier: 3FjdI+cUeHReGcd6oDS1YT8jMr6LeECcuEaqpeCp36E=
Subject key identifier: 8A:B3:04:28:C4:91:08:A3:A6:2B:52:D1:74:FF:EF:67:34:E8:2E:35
Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
Certificate issuer: /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Certificate serial: 01976F62C1F69A4B37A7C2949603CE458BFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
Manifest number: 15AF
Signing time: Sat 14 Jun 2025 17:00:32 +0000
Manifest this update: Sat 14 Jun 2025 17:00:32 +0000
Manifest next update: Sun 15 Jun 2025 17:00:32 +0000
Files and hashes: 1: AmbhHmgyu8yrBMkbzGnkI8tsxAo.roa (hash: uwxXW79FBxLkGN+Si8BRtGUDQUqQKGnxx/ByuHQICRk=)
2: L7o25i0_zd5XbD6twWAjOTkNfJQ.roa (hash: OWaSwhTa58J7U8msuLQTRf8W3It8BfHs+JPwCOU3dCk=)
3: ODrsbMjG9qdaweSVu2hQiAWib_4.roa (hash: dfEGlvo51D/Az6e2gNlFUybGMrG7MrWpkapNXLlycXI=)
4: XfGWZo7cWfWs0AeA21V-Q-Ft8as.roa (hash: wdeLE3gHNM1FBTeMpoIo0xzT6JjYdbIh/aFzX+q2qOI=)
5: djclzzPckUbxpiPz0aT2KIeq3vg.roa (hash: qMAON/McMcYGiRAj8ZSkjcUFapaBDpY0uWQQ678R//0=)
6: f3t_UNJWKVLbbqTSRagtMmmMKZw.roa (hash: ovleolAf657e+Xkh7kQLw0Pswx9FL3alnCQ2UDw7zkQ=)
7: imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl (hash: KREZ9F5lSepmSbegTRgSs3GQ54JPnJSw3BPiQgl9uYc=)
8: r4rXXxIgSH7c9iVAaISk1mXOtHM.roa (hash: 9aYpm/du2K8gdxDZs5dvyMGCHZxZm2TnZjsij83mYnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:c1:f6:9a:4b:37:a7:c2:94:96:03:ce:45:8b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Validity
Not Before: Jun 14 17:00:32 2025 GMT
Not After : Jun 15 17:00:32 2025 GMT
Subject: CN=8ab30428c49108a3a62b52d174ffef6734e82e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8c:ab:c9:2c:8f:0a:d1:f4:9e:87:11:54:d9:
78:d1:92:a1:83:a9:96:3e:7b:13:01:ef:94:3b:e2:
e6:f4:0f:16:00:ed:c6:2c:de:2d:43:8b:e2:e3:36:
e6:10:4a:30:e6:14:97:99:72:8e:21:b6:2f:cf:fa:
51:ed:43:50:ed:63:3a:f9:c8:43:c1:64:69:62:7f:
c1:5c:e9:f7:2b:e1:df:39:f2:89:f5:18:82:b8:71:
e9:dc:b8:ba:8b:e7:e2:70:aa:5e:7b:55:86:a5:8e:
f1:25:50:e7:17:6f:af:de:da:df:9b:3c:56:dc:24:
c1:b8:f3:0d:b7:5a:25:55:0b:f9:e0:a0:93:4f:3b:
57:95:c1:a8:63:d1:a2:14:cf:2a:4a:32:4d:aa:66:
f1:da:4e:8f:03:3b:15:19:84:21:81:90:7e:78:04:
7e:23:9b:45:3a:c2:e2:0a:91:d6:ba:13:14:13:c3:
89:7e:31:9c:0b:58:5b:bc:f6:23:4b:a0:f1:6c:fa:
6c:b6:45:0d:73:17:4d:09:b4:6e:64:c4:58:2b:6d:
fe:44:4a:8c:da:81:d6:9d:e2:49:9b:4e:8f:67:59:
34:63:c8:af:24:d8:68:2f:b8:b0:06:ee:00:61:50:
12:34:34:d0:8a:77:66:8e:22:79:55:2e:d1:56:60:
64:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B3:04:28:C4:91:08:A3:A6:2B:52:D1:74:FF:EF:67:34:E8:2E:35
X509v3 Authority Key Identifier:
keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:53:55:b5:82:ba:f8:05:a3:ef:2a:47:b7:16:28:32:ce:98:
a9:60:7f:b0:a0:d6:36:09:10:69:d7:b2:ca:76:d8:14:01:e5:
0c:14:e4:24:8e:12:b9:94:68:9f:3f:1d:a4:f6:04:4c:49:8e:
8d:d9:ca:84:1b:31:04:fc:c6:3c:02:01:b2:98:0e:99:11:a2:
dd:80:e5:81:34:76:e9:23:15:c9:e5:3a:6b:66:e8:ba:6d:90:
b0:8c:76:33:cb:d1:33:b2:6c:b3:4c:ac:5e:7b:86:84:d4:02:
2d:f0:8f:0c:32:5c:73:96:3e:d2:65:58:c4:c4:9c:4c:30:c0:
a2:11:26:d3:6d:00:00:e8:72:c7:26:a2:dd:08:56:1b:be:d3:
1a:d5:c9:97:2a:86:1b:b1:cd:db:44:0b:68:39:55:38:0b:a5:
94:ed:29:f1:74:c0:64:45:ab:e0:e7:10:f0:94:27:2a:bd:c0:
eb:0f:8f:e6:54:0a:8d:4e:a8:79:1b:89:1a:e1:d6:a0:74:2c:
9d:f1:61:1f:8b:f7:b0:89:37:58:50:ca:ec:b1:4c:d2:a6:0b:
ce:da:37:0b:77:c2:f9:43:e9:b6:51:77:87:05:cf:71:58:94:
0a:59:da:5b:1d:26:5f:c1:e4:9a:9c:2c:01:b6:c7:a0:d6:26:
26:b5:d4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:18:32 2025 by rpki-client