Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
File: imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft (raw, json)
Hash identifier: QX4Ry6X/LIof2CjXw7/2GY1ZRvDn0NSTyzXZ6bVRrYE=
Subject key identifier: 27:A8:66:FC:7A:9B:37:D1:EC:3C:45:4A:2A:7F:22:46:6C:2D:5B:CE
Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
Certificate issuer: /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Certificate serial: 01984F674EC5F8316EB27DB7D5E6DB1D6967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
Manifest number: 1624
Signing time: Mon 28 Jul 2025 05:00:27 +0000
Manifest this update: Mon 28 Jul 2025 05:00:27 +0000
Manifest next update: Tue 29 Jul 2025 05:00:27 +0000
Files and hashes: 1: AmbhHmgyu8yrBMkbzGnkI8tsxAo.roa (hash: uwxXW79FBxLkGN+Si8BRtGUDQUqQKGnxx/ByuHQICRk=)
2: L7o25i0_zd5XbD6twWAjOTkNfJQ.roa (hash: OWaSwhTa58J7U8msuLQTRf8W3It8BfHs+JPwCOU3dCk=)
3: XfGWZo7cWfWs0AeA21V-Q-Ft8as.roa (hash: wdeLE3gHNM1FBTeMpoIo0xzT6JjYdbIh/aFzX+q2qOI=)
4: aFK2_PVsBjasgrZjR7O6nnMiZLQ.roa (hash: 7C2rn/1bchZfIHI8JBSfQp1OCCG7fXsvQwqma4WoHcE=)
5: djclzzPckUbxpiPz0aT2KIeq3vg.roa (hash: qMAON/McMcYGiRAj8ZSkjcUFapaBDpY0uWQQ678R//0=)
6: f3t_UNJWKVLbbqTSRagtMmmMKZw.roa (hash: ovleolAf657e+Xkh7kQLw0Pswx9FL3alnCQ2UDw7zkQ=)
7: imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl (hash: u9D+ctZq4X1xe1MWZLuCKaFwPsRIXqeu8lNfo7LWkys=)
8: r4rXXxIgSH7c9iVAaISk1mXOtHM.roa (hash: 9aYpm/du2K8gdxDZs5dvyMGCHZxZm2TnZjsij83mYnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4f:67:4e:c5:f8:31:6e:b2:7d:b7:d5:e6:db:1d:69:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Validity
Not Before: Jul 28 05:00:27 2025 GMT
Not After : Jul 29 05:00:27 2025 GMT
Subject: CN=27a866fc7a9b37d1ec3c454a2a7f22466c2d5bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d1:70:8d:07:c9:53:80:65:f3:f2:28:15:3e:
d3:5b:8e:d1:90:0c:bb:7d:b7:a8:e0:80:00:d7:49:
a3:ab:a3:b4:44:0e:87:04:5c:0b:9f:2c:6d:b3:97:
0e:1f:e6:39:81:cd:89:b9:bb:1e:ba:f7:6e:38:27:
47:15:a7:24:71:71:d8:f7:6c:7f:5d:c3:47:14:85:
42:1f:fd:80:42:0d:8b:20:07:d1:ef:63:86:b6:15:
81:da:8a:8e:fb:36:93:92:5a:08:99:ce:d9:9c:38:
92:84:b5:26:76:30:7a:4a:a4:38:5f:20:a4:6c:0a:
1f:78:9b:c8:7d:b0:3a:2b:12:8b:9b:37:f8:dc:ef:
38:a1:d3:95:86:b7:e5:6e:3f:1e:58:35:18:50:d2:
4d:66:c4:99:75:c2:f9:12:48:6d:92:eb:a6:4b:27:
da:12:60:1f:ef:63:14:9c:c3:3d:ee:bb:f2:5a:1d:
c7:32:96:e3:a2:01:fc:ff:88:0e:1a:53:55:fc:db:
33:e4:d4:15:d9:58:f1:b0:19:25:05:8e:2c:33:17:
35:b4:16:27:14:5e:03:25:9e:fa:49:84:47:e3:63:
88:f3:97:51:e6:bc:4c:24:aa:69:8a:e7:a1:65:80:
c8:a7:6f:d2:e1:87:ba:ca:bb:4b:70:38:c9:f8:18:
6c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A8:66:FC:7A:9B:37:D1:EC:3C:45:4A:2A:7F:22:46:6C:2D:5B:CE
X509v3 Authority Key Identifier:
keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:2e:6c:b5:b6:34:a8:34:87:13:4d:c1:e4:57:02:de:8c:66:
61:46:03:73:47:01:60:60:0a:ef:1b:60:a6:ab:f4:d6:10:3b:
87:bb:9c:ea:96:eb:61:1c:ed:7e:9f:9a:b3:f2:44:fc:ee:7b:
28:57:2b:61:e7:c8:20:79:c5:3d:59:12:bc:6c:67:cf:65:e0:
7d:d2:7d:27:e5:2b:7f:08:20:2f:75:c7:21:f1:ef:fd:5f:6b:
3e:ac:24:c0:c0:7c:87:bb:15:09:b1:a7:41:54:47:61:42:6a:
e0:99:45:fd:42:be:e8:e7:26:6b:b7:fb:5a:d4:32:1b:f2:6d:
6b:f7:56:34:7d:f3:5b:0e:3f:ec:e5:cb:9e:03:ce:ae:81:56:
59:fd:11:c5:35:74:7b:5c:61:60:ed:cd:6d:96:65:5d:03:1f:
18:61:af:7d:24:5b:ec:f5:61:76:39:6d:6e:fa:12:86:4c:b2:
c9:d3:28:4a:3d:f4:46:58:a6:cc:d1:28:32:67:1e:d0:7f:b4:
43:87:a6:7b:e2:c1:13:cc:2e:9e:12:77:bb:58:1b:4c:cb:df:
35:e5:e5:52:61:bb:dc:ff:1c:78:75:1f:a2:81:12:6a:fe:91:
e5:f7:96:74:c5:e1:81:ff:82:06:cb:50:f7:1e:cd:93:29:b9:
78:fb:32:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 07:07:36 2025 by rpki-client