Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
File: imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft (raw, json)
Hash identifier: rO7HmoU1LoUbdCHYHUei5YENxrgI4GHUnL4vRffCy5s=
Subject key identifier: 9D:56:B8:C7:4D:A9:AF:72:0F:CD:95:1F:3E:65:15:A4:54:D3:AE:E8
Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
Certificate issuer: /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Certificate serial: 0199560BF14BBA2C6757D89367D11BD903A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
Manifest number: 16AC
Signing time: Wed 17 Sep 2025 05:00:47 +0000
Manifest this update: Wed 17 Sep 2025 05:00:47 +0000
Manifest next update: Thu 18 Sep 2025 05:00:47 +0000
Files and hashes: 1: AmbhHmgyu8yrBMkbzGnkI8tsxAo.roa (hash: uwxXW79FBxLkGN+Si8BRtGUDQUqQKGnxx/ByuHQICRk=)
2: L7o25i0_zd5XbD6twWAjOTkNfJQ.roa (hash: OWaSwhTa58J7U8msuLQTRf8W3It8BfHs+JPwCOU3dCk=)
3: XfGWZo7cWfWs0AeA21V-Q-Ft8as.roa (hash: wdeLE3gHNM1FBTeMpoIo0xzT6JjYdbIh/aFzX+q2qOI=)
4: aFK2_PVsBjasgrZjR7O6nnMiZLQ.roa (hash: 7C2rn/1bchZfIHI8JBSfQp1OCCG7fXsvQwqma4WoHcE=)
5: djclzzPckUbxpiPz0aT2KIeq3vg.roa (hash: qMAON/McMcYGiRAj8ZSkjcUFapaBDpY0uWQQ678R//0=)
6: f3t_UNJWKVLbbqTSRagtMmmMKZw.roa (hash: ovleolAf657e+Xkh7kQLw0Pswx9FL3alnCQ2UDw7zkQ=)
7: imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl (hash: XhwRdmhjn/iOsNf0nJnRqdOq5ZxDWoyZL4ER8TW2rEw=)
8: r4rXXxIgSH7c9iVAaISk1mXOtHM.roa (hash: 9aYpm/du2K8gdxDZs5dvyMGCHZxZm2TnZjsij83mYnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:56:0b:f1:4b:ba:2c:67:57:d8:93:67:d1:1b:d9:03:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Validity
Not Before: Sep 17 05:00:47 2025 GMT
Not After : Sep 18 05:00:47 2025 GMT
Subject: CN=9d56b8c74da9af720fcd951f3e6515a454d3aee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5a:2d:d0:0d:4e:57:96:1a:4a:97:47:de:32:
71:43:80:b1:3b:89:ac:b1:f7:dc:ec:0b:69:b8:47:
69:db:96:92:89:89:91:f3:77:6f:f5:49:cb:39:1a:
02:a0:2c:58:1b:23:9c:6a:ba:c3:0f:bc:9d:2c:26:
b1:0c:f0:f1:e7:71:39:fc:c4:4c:77:c9:12:6e:37:
75:b0:5c:2e:bb:c9:f8:f5:46:c1:d3:ed:45:1c:5b:
e8:44:72:95:af:ad:4d:60:f1:e9:35:a8:41:d3:68:
a4:f1:7d:8d:db:53:55:54:58:ef:7a:d3:27:56:c3:
af:f0:ae:e8:f4:4a:ce:e3:4f:5f:8b:3c:cb:05:16:
41:9e:d8:d2:81:db:8e:b7:00:17:91:d9:cc:b7:6e:
eb:93:90:4f:00:88:a8:a3:c1:8c:6b:1a:26:62:72:
0b:12:75:a0:6c:93:aa:98:0e:de:51:40:5d:33:7c:
65:98:da:a0:6a:05:d9:b2:4d:55:f4:ce:45:d7:e1:
9d:47:6f:d6:6a:b6:91:3d:e2:b8:2e:37:08:54:c1:
d7:e2:16:bc:f9:0e:25:46:e2:e9:83:8a:eb:87:37:
81:ac:47:f6:22:34:64:c3:65:65:74:ea:fc:0c:ae:
93:90:0c:12:71:3e:e6:a4:f7:0f:30:e6:d9:8e:5a:
99:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:56:B8:C7:4D:A9:AF:72:0F:CD:95:1F:3E:65:15:A4:54:D3:AE:E8
X509v3 Authority Key Identifier:
keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d8:2a:b4:53:1c:0f:ea:ab:6c:f6:18:bb:6b:a6:d9:fc:19:
29:ff:0e:53:33:2c:a4:2d:53:c0:87:b3:39:f7:ee:f9:f8:fd:
09:52:9c:e5:9b:ad:88:fb:54:a6:b8:e4:16:0c:b7:bd:bd:c9:
89:be:6b:fc:9d:e3:ee:36:45:47:c0:83:21:31:21:92:8d:0e:
23:5f:09:aa:a7:b5:5f:d8:2a:cc:d0:10:7d:99:27:82:7f:27:
0f:a4:a3:73:8d:fc:2c:26:4e:21:c1:0a:ee:15:41:ba:51:86:
ba:c3:14:b7:7e:c2:63:30:57:02:95:fd:e8:2d:d7:8a:c5:3b:
42:c9:f7:41:ee:b8:b3:79:a3:1c:ae:34:a3:91:76:06:bc:7c:
6a:5e:4e:d0:48:52:e4:5c:83:6b:e0:be:67:ea:5c:6a:fd:e9:
e7:76:09:fd:f7:c4:03:8e:e6:8c:df:e0:d4:a9:28:f3:81:46:
53:c1:fb:e5:f0:02:9b:9c:74:60:9d:1a:f0:e1:99:b5:50:aa:
84:c3:be:36:0b:24:a3:cd:27:1a:69:0f:73:8e:da:3d:ce:1b:
6d:d7:d5:b5:3c:4d:bb:0b:59:73:ea:94:77:2a:5b:03:74:60:
7f:86:2d:04:93:70:ec:62:03:16:b9:8e:1b:64:04:fb:3b:65:
e3:aa:5e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 06:48:28 2025 by rpki-client