Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
File: imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft (raw, json)
Hash identifier: Ex+2B1MBHSrjl1Qk/WLxUCz06EAaOjJd+URWA0mchys=
Subject key identifier: 32:81:0D:2B:3D:C0:A8:10:5A:4A:69:55:AF:D1:FE:94:08:EE:F1:F0
Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
Certificate issuer: /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Certificate serial: 0198D4A7CD37331B75D3E18E8D7A885D0586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
Manifest number: 1669
Signing time: Sat 23 Aug 2025 02:00:23 +0000
Manifest this update: Sat 23 Aug 2025 02:00:23 +0000
Manifest next update: Sun 24 Aug 2025 02:00:23 +0000
Files and hashes: 1: AmbhHmgyu8yrBMkbzGnkI8tsxAo.roa (hash: uwxXW79FBxLkGN+Si8BRtGUDQUqQKGnxx/ByuHQICRk=)
2: L7o25i0_zd5XbD6twWAjOTkNfJQ.roa (hash: OWaSwhTa58J7U8msuLQTRf8W3It8BfHs+JPwCOU3dCk=)
3: XfGWZo7cWfWs0AeA21V-Q-Ft8as.roa (hash: wdeLE3gHNM1FBTeMpoIo0xzT6JjYdbIh/aFzX+q2qOI=)
4: aFK2_PVsBjasgrZjR7O6nnMiZLQ.roa (hash: 7C2rn/1bchZfIHI8JBSfQp1OCCG7fXsvQwqma4WoHcE=)
5: djclzzPckUbxpiPz0aT2KIeq3vg.roa (hash: qMAON/McMcYGiRAj8ZSkjcUFapaBDpY0uWQQ678R//0=)
6: f3t_UNJWKVLbbqTSRagtMmmMKZw.roa (hash: ovleolAf657e+Xkh7kQLw0Pswx9FL3alnCQ2UDw7zkQ=)
7: imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl (hash: Wqd/rMWqXYQnLOCYnVzDtcV2aWKWmDE4quC9zJDb8Bw=)
8: r4rXXxIgSH7c9iVAaISk1mXOtHM.roa (hash: 9aYpm/du2K8gdxDZs5dvyMGCHZxZm2TnZjsij83mYnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:cd:37:33:1b:75:d3:e1:8e:8d:7a:88:5d:05:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Validity
Not Before: Aug 23 02:00:23 2025 GMT
Not After : Aug 24 02:00:23 2025 GMT
Subject: CN=32810d2b3dc0a8105a4a6955afd1fe9408eef1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6f:a9:56:71:be:5a:ae:bb:b1:8d:a8:d2:bd:
b2:91:8c:08:62:cd:90:33:e8:4d:32:08:cd:fa:09:
88:f3:9e:8d:d5:06:ea:e8:e0:5b:85:d4:b4:cf:ed:
fe:a1:61:14:07:e2:4d:a9:70:f4:33:f1:32:d7:cd:
f8:c5:15:16:86:e7:17:dd:b0:54:ef:2d:51:f9:8a:
9a:8e:0e:38:9f:22:8f:44:57:57:a6:ee:3a:e3:a7:
0a:c3:44:f7:f1:11:f6:75:42:e1:e6:92:20:90:51:
ae:71:f7:df:5a:45:9d:b9:13:e6:01:08:72:a1:a2:
4b:2a:88:03:48:43:5c:38:71:a5:d8:e2:17:c7:25:
59:b8:80:3b:99:20:04:16:c4:12:e8:95:40:63:56:
34:00:5d:ba:69:f4:3d:dc:48:90:24:47:55:ce:dd:
32:c3:33:04:b4:ec:d2:96:fd:53:12:68:c3:23:a2:
53:94:95:19:d3:77:d0:4f:95:c9:20:22:91:9b:7f:
0d:af:23:0c:cf:4e:9a:d7:8a:4f:ab:55:8e:15:5f:
05:48:79:56:1c:c2:57:fc:87:a7:6e:e1:4a:c7:6a:
0a:0b:63:27:b9:82:8d:b5:42:28:90:4c:23:fd:f8:
ed:76:6c:d7:02:d0:ad:bd:42:2f:7d:25:56:f2:85:
d8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:81:0D:2B:3D:C0:A8:10:5A:4A:69:55:AF:D1:FE:94:08:EE:F1:F0
X509v3 Authority Key Identifier:
keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d6:9b:8e:36:22:71:44:4e:17:1a:01:1b:5e:f7:e7:5b:e8:
7a:52:20:02:a3:49:f3:63:8a:a5:b2:89:10:92:28:4c:c3:3c:
5c:b7:ab:f5:ef:8a:3d:98:b7:73:ad:10:28:01:5a:52:be:12:
cc:54:bd:c2:cf:c0:eb:4a:7e:9a:a2:b5:7f:81:25:32:85:da:
14:36:b0:a3:5c:30:e9:c8:e9:c9:07:d5:aa:19:33:b2:4f:39:
6d:06:78:d9:98:ed:b3:22:bf:a9:fb:19:1c:20:cd:5a:d0:10:
c6:c9:01:da:72:1b:e0:97:41:da:bd:a8:33:d5:a4:20:2f:88:
2f:20:74:9b:63:83:84:b5:01:a6:37:7e:96:bf:c4:d3:3f:7c:
d5:a0:c2:57:77:f6:a0:e1:44:a9:ff:c7:22:26:e5:e2:d4:7f:
50:1a:c1:d2:e5:a4:85:eb:eb:d1:f0:80:07:bf:8b:6c:51:5a:
10:bd:31:87:ef:3a:3a:95:07:8f:81:f9:27:af:3d:99:f2:3e:
58:84:13:a8:24:74:36:8f:70:69:87:e6:b6:58:48:a1:d1:bb:
f6:c2:77:71:f3:16:09:cb:16:49:e9:80:44:e0:01:09:99:84:
2a:b0:b5:6c:f6:a9:6e:89:37:3d:b9:e8:a1:12:d5:f7:5f:47:
74:14:1d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:41 2025 by rpki-client