Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
File: imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft (raw, json)
Hash identifier: WyQh9VOhuyh9gvSZBdvRwdb9Uv4BhEKLice/ocL74i0=
Subject key identifier: CC:71:22:54:E1:B8:81:B1:A1:06:7F:D5:24:68:69:C6:0D:AA:9C:26
Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
Certificate issuer: /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Certificate serial: 01974C9FD4DF22643C6C29C1B6E63FB42FA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
Manifest number: 159D
Signing time: Sat 07 Jun 2025 23:00:32 +0000
Manifest this update: Sat 07 Jun 2025 23:00:32 +0000
Manifest next update: Sun 08 Jun 2025 23:00:32 +0000
Files and hashes: 1: AmbhHmgyu8yrBMkbzGnkI8tsxAo.roa (hash: uwxXW79FBxLkGN+Si8BRtGUDQUqQKGnxx/ByuHQICRk=)
2: L7o25i0_zd5XbD6twWAjOTkNfJQ.roa (hash: OWaSwhTa58J7U8msuLQTRf8W3It8BfHs+JPwCOU3dCk=)
3: ODrsbMjG9qdaweSVu2hQiAWib_4.roa (hash: dfEGlvo51D/Az6e2gNlFUybGMrG7MrWpkapNXLlycXI=)
4: XfGWZo7cWfWs0AeA21V-Q-Ft8as.roa (hash: wdeLE3gHNM1FBTeMpoIo0xzT6JjYdbIh/aFzX+q2qOI=)
5: djclzzPckUbxpiPz0aT2KIeq3vg.roa (hash: qMAON/McMcYGiRAj8ZSkjcUFapaBDpY0uWQQ678R//0=)
6: f3t_UNJWKVLbbqTSRagtMmmMKZw.roa (hash: ovleolAf657e+Xkh7kQLw0Pswx9FL3alnCQ2UDw7zkQ=)
7: imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl (hash: ts1ISI2yLOJvQ3geNRVaTphcNoQsWFYphIMsyf9AqlM=)
8: r4rXXxIgSH7c9iVAaISk1mXOtHM.roa (hash: 9aYpm/du2K8gdxDZs5dvyMGCHZxZm2TnZjsij83mYnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:d4:df:22:64:3c:6c:29:c1:b6:e6:3f:b4:2f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Validity
Not Before: Jun 7 23:00:32 2025 GMT
Not After : Jun 8 23:00:32 2025 GMT
Subject: CN=cc712254e1b881b1a1067fd5246869c60daa9c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6c:88:35:3f:02:2b:41:95:cb:c5:10:5c:60:
6d:eb:40:5a:2e:a3:27:51:60:65:14:70:f6:d3:b2:
e5:5b:22:9a:de:45:b0:a8:14:df:c6:86:58:5e:b0:
34:18:cd:f5:e8:ec:91:d5:30:c0:db:e2:7f:24:69:
38:b8:52:5c:7c:6f:0b:97:97:75:98:67:06:2e:87:
65:af:e8:76:f6:b8:48:4c:47:43:a8:de:2b:9b:40:
fc:2c:4e:83:e0:73:0e:42:26:b6:31:00:1b:33:d1:
e0:15:67:60:1e:48:dd:91:c1:b9:89:99:e4:f4:7a:
41:d1:c7:f4:f8:4d:a4:59:8b:ee:c8:8c:f4:2f:b9:
48:44:4a:0b:61:96:c0:86:33:d6:4a:c9:c6:08:e3:
ef:78:f3:f5:38:30:b2:46:53:dd:40:db:4a:ce:29:
9f:0b:70:9c:cc:d0:40:a1:20:c0:c2:57:21:0c:e8:
28:3e:7e:b8:b2:34:e1:60:3c:62:9e:3e:cd:42:05:
87:58:08:cd:e4:27:9f:51:ee:81:bd:ad:85:02:ba:
84:58:d5:b9:2d:24:f9:ce:8e:00:17:9c:be:0b:38:
01:9a:77:c9:b0:2e:78:a9:cf:02:28:02:43:67:4d:
c2:74:f2:d9:5c:66:56:4e:39:d1:ac:88:ec:f6:12:
b6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:71:22:54:E1:B8:81:B1:A1:06:7F:D5:24:68:69:C6:0D:AA:9C:26
X509v3 Authority Key Identifier:
keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:5e:65:72:ee:95:1c:a2:cd:16:6e:0d:12:9c:08:c8:b2:24:
c8:1a:55:7e:61:96:44:ba:f5:3d:7a:b9:a6:c5:1b:5b:69:3b:
54:db:55:31:23:4d:93:19:b7:2c:d6:ab:e1:9d:42:ec:92:cd:
91:af:20:ab:a9:50:96:0f:41:d7:07:5a:4e:14:5e:32:89:d8:
e9:78:29:47:f6:fa:06:a7:65:14:37:6a:bc:8a:0e:89:a2:8e:
69:44:13:f7:05:13:06:eb:72:fc:63:61:db:06:35:35:de:db:
ff:46:91:8e:92:65:9d:9f:84:cd:1c:82:8a:a6:8a:46:ec:e6:
8d:18:0a:94:cf:a6:f5:2c:30:b6:75:72:15:e8:21:04:ec:83:
5d:e0:a1:42:02:08:62:dc:aa:1b:b8:e4:f1:ae:8e:1c:3d:b0:
0a:ac:65:62:27:db:ed:18:89:d4:fd:f5:e4:74:70:63:10:89:
73:73:d8:1a:09:e1:fd:3f:fa:6c:5d:b1:ba:a9:b5:1b:f0:06:
b5:0a:be:7f:e7:85:f7:c6:96:86:ff:f2:72:82:87:a1:d4:66:
1f:0f:0c:f6:97:e9:e6:ee:90:3f:d1:3a:03:6a:10:ce:bd:ad:
a8:0d:f9:27:fb:ec:cb:cd:82:1e:e9:a8:86:70:8f:7a:08:67:
b4:41:03:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:06:42 2025 by rpki-client