Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
File: imauQAwtaBlg6FU_yzFXi42c37Y.mft (raw, json)
Hash identifier: CC5PaR0GiZU/TuQT/BmByroRkbYlg39Z0Ern7F5gUOM=
Subject key identifier: A3:F7:ED:FC:E4:00:6B:38:DE:ED:7E:83:9C:E2:A9:B3:A7:FF:29:CC
Authority key identifier: 8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6
Certificate issuer: /CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6
Certificate serial: 01976D06D7B2723AA5DDC48700C428E8D192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
Manifest number: 01BE
Signing time: Sat 14 Jun 2025 06:00:54 +0000
Manifest this update: Sat 14 Jun 2025 06:00:54 +0000
Manifest next update: Sun 15 Jun 2025 06:00:54 +0000
Files and hashes: 1: PuzSFCpssVQvjZAtpt-uOtGr7hY.roa (hash: SPN1lNtFS0koIE09mFP53lEypWhv8lUH53A6TRYkysY=)
2: imauQAwtaBlg6FU_yzFXi42c37Y.crl (hash: 3yqrCRPLecWzqzZFiU42tRzsmkxTMvIoLD6LUhZku/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:d7:b2:72:3a:a5:dd:c4:87:00:c4:28:e8:d1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6
Validity
Not Before: Jun 14 06:00:54 2025 GMT
Not After : Jun 15 06:00:54 2025 GMT
Subject: CN=a3f7edfce4006b38deed7e839ce2a9b3a7ff29cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:47:da:34:67:31:de:38:62:ca:47:3c:92:f9:
89:d0:4a:7a:08:e1:f5:07:d0:fa:23:89:56:e1:e1:
ac:45:1e:01:e3:e9:1d:67:1f:cd:7e:80:39:a8:5f:
6c:69:bf:9d:b6:67:e6:6d:d6:94:94:91:16:ba:63:
99:0f:8d:20:b9:e8:c7:40:ce:33:8b:eb:69:2d:cf:
0f:20:57:eb:27:95:d5:d0:ec:55:89:53:ed:b5:59:
20:70:fc:6b:c2:cc:7c:e7:f7:24:d0:ae:e7:47:da:
9f:c0:ac:2f:ab:3f:04:5f:da:b6:fd:89:a9:46:bc:
f4:74:08:11:0f:95:8a:73:25:3a:31:b6:df:9a:3d:
f4:01:14:e9:63:5b:e1:3d:ea:a9:d7:e2:cc:9b:42:
2c:c1:e5:84:46:b6:fd:09:ff:bf:5c:3f:69:fb:78:
5c:17:e1:1d:1d:87:12:61:88:2d:2d:b2:da:54:15:
12:07:57:2b:50:aa:50:7b:13:a1:2a:5f:c2:03:8a:
46:41:49:00:0d:32:d8:45:55:e5:4e:82:09:69:80:
f0:bd:f8:33:fa:14:e2:a2:1b:31:a3:10:17:b1:05:
44:0f:55:62:24:08:ee:6d:76:e1:cf:fb:fd:8b:79:
bf:8a:f0:28:b4:6f:32:aa:95:90:28:de:3a:4d:d2:
72:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F7:ED:FC:E4:00:6B:38:DE:ED:7E:83:9C:E2:A9:B3:A7:FF:29:CC
X509v3 Authority Key Identifier:
keyid:8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:06:e7:57:c4:a3:9f:cc:a6:d4:34:b3:d2:08:2a:7c:61:82:
96:51:64:51:58:23:8f:1f:56:ab:f7:a1:a4:c3:2c:c5:11:da:
cb:0d:f6:c0:ee:bf:f2:de:c5:dc:00:d5:73:be:be:e7:56:68:
1b:90:8f:b1:9e:ae:8b:c7:b8:b9:b7:84:71:75:c4:7a:c3:a8:
4e:69:74:02:cc:41:ce:74:33:b3:5b:61:76:b6:27:d8:1d:fc:
0a:cb:ea:38:17:4f:03:b1:86:9f:a8:bc:dc:5a:ab:fe:11:c2:
5c:cc:3f:86:ba:f0:2e:aa:f9:29:c2:be:e4:f5:ee:2f:a2:05:
58:2b:86:ac:ab:b7:cc:86:eb:2f:46:31:fb:f5:a5:1a:53:2a:
34:f7:3a:36:c1:71:cc:dd:c5:23:ce:c5:18:73:ef:3e:cd:66:
61:f7:95:b6:ca:40:d0:36:20:4d:1e:62:73:dc:45:0c:42:56:
4b:4d:85:dd:d1:82:fa:a4:71:4d:34:0f:d7:4d:d2:e3:0a:65:
72:53:20:c0:92:fa:d5:25:37:e9:66:16:d4:77:31:be:d4:a2:
03:c7:a6:4a:1b:bc:38:9f:4c:a1:a0:64:5b:2d:af:f5:61:9d:
4e:00:db:37:a3:24:db:58:5c:50:6b:5c:28:03:97:36:79:33:
f0:27:17:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtBteycjql3cSHAMQo6NGSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNjZhZTQwMGMyZDY4MTk2MGU4NTUzZmNiMzE1NzhiOGQ5
Y2RmYjYwHhcNMjUwNjE0MDYwMDU0WhcNMjUwNjE1MDYwMDU0WjAzMTEwLwYDVQQD
EyhhM2Y3ZWRmY2U0MDA2YjM4ZGVlZDdlODM5Y2UyYTliM2E3ZmYyOWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0faNGcx3jhiykc8kvmJ0Ep6COH1
B9D6I4lW4eGsRR4B4+kdZx/NfoA5qF9sab+dtmfmbdaUlJEWumOZD40guejHQM4z
i+tpLc8PIFfrJ5XV0OxViVPttVkgcPxrwsx85/ck0K7nR9qfwKwvqz8EX9q2/Ymp
Rrz0dAgRD5WKcyU6Mbbfmj30ARTpY1vhPeqp1+LMm0IsweWERrb9Cf+/XD9p+3hc
F+EdHYcSYYgtLbLaVBUSB1crUKpQexOhKl/CA4pGQUkADTLYRVXlToIJaYDwvfgz
+hTiohsxoxAXsQVED1ViJAjubXbhz/v9i3m/ivAotG8yqpWQKN46TdJyZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKP37fzkAGs43u1+g5ziqbOn/ynMMB8GA1UdIwQY
MBaAFIpmrkAMLWgZYOhVP8sxV4uNnN+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jMzNhZjYtMzZhOS00N2IwLTgzZTct
OGJiYzNhOWU0ZjQzLzEvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jMzNhZjYtMzZhOS00N2IwLTgzZTctOGJiYzNhOWU0ZjQz
LzEvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMAbnV8Sj
n8ym1DSz0ggqfGGCllFkUVgjjx9Wq/ehpMMsxRHayw32wO6/8t7F3ADVc76+51Zo
G5CPsZ6ui8e4ubeEcXXEesOoTml0AsxBznQzs1thdrYn2B38CsvqOBdPA7GGn6i8
3Fqr/hHCXMw/hrrwLqr5KcK+5PXuL6IFWCuGrKu3zIbrL0Yx+/WlGlMqNPc6NsFx
zN3FI87FGHPvPs1mYfeVtspA0DYgTR5ic9xFDEJWS02F3dGC+qRxTTQP103S4wpl
clMgwJL61SU36WYW1HcxvtSiA8emShu8OJ9MoaBkWy2v9WGdTgDbN6Mk21hcUGtc
KAOXNnkz8CcXxw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:31:19 2025 by rpki-client