Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
File: imauQAwtaBlg6FU_yzFXi42c37Y.mft (raw, json)
Hash identifier: 8wg/d4jq+a/20aS2rozk4luLfsTq3GZU4Cuh/GCq4RQ=
Subject key identifier: DD:B9:CB:04:7E:75:C8:7A:C8:B2:0F:A7:26:9F:07:DB:C4:73:84:80
Authority key identifier: 8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6
Certificate issuer: /CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6
Certificate serial: 01984399ECD3938D18FA7C77605DB40D93A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
Manifest number: 022D
Signing time: Fri 25 Jul 2025 22:00:17 +0000
Manifest this update: Fri 25 Jul 2025 22:00:17 +0000
Manifest next update: Sat 26 Jul 2025 22:00:17 +0000
Files and hashes: 1: PuzSFCpssVQvjZAtpt-uOtGr7hY.roa (hash: SPN1lNtFS0koIE09mFP53lEypWhv8lUH53A6TRYkysY=)
2: imauQAwtaBlg6FU_yzFXi42c37Y.crl (hash: llxRWi6eTGKvtdahEOIqoiwTmSj28ZW9m0UQ0qeWVGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:99:ec:d3:93:8d:18:fa:7c:77:60:5d:b4:0d:93:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6
Validity
Not Before: Jul 25 22:00:17 2025 GMT
Not After : Jul 26 22:00:17 2025 GMT
Subject: CN=ddb9cb047e75c87ac8b20fa7269f07dbc4738480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ed:7d:ac:d9:08:b4:f1:42:ee:6f:d8:8c:b3:
3f:48:1f:35:5a:be:7d:d5:0b:93:ea:d1:00:ad:5d:
9f:e2:e9:cd:19:b0:3e:5a:7c:48:45:27:37:ec:b5:
6a:96:9f:06:1c:00:e6:62:d4:c1:58:ba:ad:3c:2b:
84:21:46:a6:dd:f0:8f:8c:7b:f5:d5:bb:90:3d:55:
87:d0:27:4c:16:5b:9d:f0:ba:62:66:25:d7:03:d5:
b5:2f:d1:f2:c7:a5:af:72:d1:8c:4c:7f:76:8b:0d:
90:66:40:ad:cc:f8:4e:ed:05:74:63:d8:74:64:0c:
a4:15:96:d7:e7:06:a0:d3:90:5d:81:75:8f:4c:90:
6c:66:48:70:be:fa:e6:1e:a4:d8:86:b4:d3:9c:f4:
e8:d8:e7:c0:a2:94:0d:f3:ab:5b:09:34:03:4f:0f:
5a:d4:5e:74:1e:ba:cf:43:b6:bf:5b:23:7f:4b:89:
76:9b:61:d1:90:92:71:9f:0e:3e:61:ab:f2:d7:be:
00:c5:73:fd:c2:cb:7c:25:6f:22:13:c1:9a:a6:8d:
41:ee:c4:a5:72:54:0f:c9:98:92:4f:4e:4a:b7:5c:
39:d9:0e:26:94:b3:41:ae:12:a1:41:63:5e:ba:fc:
1b:65:30:17:90:c2:2a:19:41:2e:b5:b8:e2:12:8a:
0d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B9:CB:04:7E:75:C8:7A:C8:B2:0F:A7:26:9F:07:DB:C4:73:84:80
X509v3 Authority Key Identifier:
keyid:8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:4d:99:d5:b0:d1:5b:9b:1a:e8:99:06:f9:3f:93:04:9e:60:
33:37:69:04:e4:0d:b3:64:aa:5e:86:40:78:63:9e:8e:dc:f5:
6f:66:b5:4d:8c:50:61:e1:c9:31:f9:6b:bb:7b:85:c3:07:15:
70:25:ed:31:e6:e0:6c:37:11:c3:d3:38:be:14:23:4f:36:ec:
8d:d3:1f:56:1f:66:4d:bf:10:55:f9:80:cd:04:04:1c:70:b6:
16:0c:16:54:c7:55:7a:1e:5b:f4:dd:0e:ae:fe:c9:c8:55:b0:
90:fc:3b:00:fe:21:0c:75:9d:bd:64:68:8e:d1:c8:c5:07:44:
65:06:4d:1a:ee:33:9a:25:f1:07:5d:99:16:5c:1f:b5:cd:dc:
39:24:a9:88:1a:74:9f:0e:c6:77:18:d7:7d:2a:fa:8a:29:7b:
45:de:d2:a6:7b:cc:98:e6:3f:4f:57:ac:98:bd:78:4a:42:2f:
31:b8:a6:ca:4b:39:a5:43:1d:fa:03:d9:a4:f2:d7:b5:91:a5:
bd:de:61:91:01:fd:f9:02:f0:90:25:7e:22:97:67:c1:4c:3b:
36:cd:ec:97:60:64:9d:07:74:eb:b2:a7:9a:e5:10:50:90:a3:
04:ae:f0:a3:f2:1c:96:19:15:5b:1b:8d:98:6f:a9:1a:80:cb:
bb:29:31:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:07:48 2025 by rpki-client