Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
File: imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft (raw, json)
Hash identifier: o6UbCYcN/1gWC2lDQzyKxiKTKcVIAl8FOufS9RgOOtI=
Subject key identifier: 3D:37:4D:EE:0C:BB:7B:20:BB:06:C5:47:81:0E:E2:D2:D2:72:8F:4C
Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
Certificate issuer: /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Certificate serial: 019A7301ABAFE17FEA889781A4A8A91EA15E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
Manifest number: 1740
Signing time: Tue 11 Nov 2025 13:01:20 +0000
Manifest this update: Tue 11 Nov 2025 13:01:20 +0000
Manifest next update: Wed 12 Nov 2025 13:01:20 +0000
Files and hashes: 1: AmbhHmgyu8yrBMkbzGnkI8tsxAo.roa (hash: uwxXW79FBxLkGN+Si8BRtGUDQUqQKGnxx/ByuHQICRk=)
2: NSBMSdSMSkDZPZPATZRaYBRZGko.roa (hash: VafNKr4t7DSBVL6FM/c3Z2g09Dsix32ClTmM9E5fADQ=)
3: XfGWZo7cWfWs0AeA21V-Q-Ft8as.roa (hash: wdeLE3gHNM1FBTeMpoIo0xzT6JjYdbIh/aFzX+q2qOI=)
4: djclzzPckUbxpiPz0aT2KIeq3vg.roa (hash: qMAON/McMcYGiRAj8ZSkjcUFapaBDpY0uWQQ678R//0=)
5: imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl (hash: 6UPYc25L6pCIdEsax2T/Ll5BB3XEiQ5mfOaDK5Wr2sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:ab:af:e1:7f:ea:88:97:81:a4:a8:a9:1e:a1:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Validity
Not Before: Nov 11 13:01:20 2025 GMT
Not After : Nov 12 13:01:20 2025 GMT
Subject: CN=3d374dee0cbb7b20bb06c547810ee2d2d2728f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fd:2d:7f:35:10:f8:29:9b:71:09:be:54:3c:
5a:65:b4:f4:67:df:11:e9:d4:cd:fc:ed:bb:ca:0c:
23:04:52:19:16:d4:e7:ed:e5:3c:ed:bd:9a:7e:fa:
84:19:f7:d0:3d:9e:71:05:bc:d2:f8:46:12:77:ba:
b4:57:d0:e4:f9:f6:f0:85:1d:38:4b:e6:c9:32:fb:
64:7f:c3:d6:ef:14:67:ef:90:52:d9:5a:d4:e3:0d:
f6:c0:19:3d:29:a9:b1:cc:5a:88:7e:47:bf:d1:9b:
fa:9d:54:e4:4b:1b:63:ca:bb:d4:20:4f:6a:c7:ab:
2b:60:b9:43:c4:b8:06:63:26:3b:2e:39:e1:82:41:
50:4d:b0:b9:2c:27:eb:b2:14:8d:c2:93:e9:db:71:
45:bc:a0:e9:c7:59:fa:0b:a5:fa:b3:b9:57:a6:9b:
c8:03:a1:25:fe:9c:32:cd:9e:71:17:e4:de:8b:5b:
85:ff:cc:a5:01:fa:25:e1:5a:53:69:6a:70:e4:cb:
a3:38:21:d7:bd:a2:b6:ce:9f:f6:31:da:52:26:93:
3f:0c:be:a4:e0:92:19:c1:1b:01:e2:b0:01:1d:df:
6f:f7:13:79:97:0a:6c:86:48:66:70:6f:2d:ab:bc:
51:77:94:fc:2b:8e:9f:d4:0e:93:da:5d:fc:60:64:
af:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:37:4D:EE:0C:BB:7B:20:BB:06:C5:47:81:0E:E2:D2:D2:72:8F:4C
X509v3 Authority Key Identifier:
keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:20:64:f5:fd:2e:88:45:f8:ff:89:83:fd:64:dc:3a:b1:48:
ae:72:71:b3:f5:2a:2f:ae:45:59:46:6a:47:44:18:b9:3b:eb:
bb:9d:c3:38:45:06:f6:ad:97:d1:a2:c9:46:f4:07:d2:1c:e0:
63:3a:6d:3a:f3:6a:ee:84:a2:c4:2b:5c:9a:b1:cd:0b:b2:92:
b5:dd:64:73:6b:97:0c:25:2d:73:57:70:aa:d0:5e:ec:d9:91:
58:bf:db:a3:f0:1b:36:f6:16:90:4f:7c:96:5d:77:d5:e8:8e:
e5:61:f3:1c:1a:8b:cd:1d:87:c6:30:c6:d3:cf:6b:1d:b2:6d:
90:10:2a:f0:04:66:63:9b:62:a1:0a:72:64:23:1c:8b:d2:58:
9a:20:05:14:3e:b0:80:5c:aa:5d:25:23:d7:6a:49:30:09:3c:
2c:80:c1:e5:e2:a4:59:e0:0b:ad:a5:cb:28:80:ec:a1:a7:c1:
cb:45:2e:13:3f:40:49:68:bb:7f:05:11:3e:d8:68:b6:4a:b6:
2f:e3:db:77:fd:d0:70:43:aa:8a:b5:61:d1:19:0c:5b:ec:4c:
ed:fd:07:f7:18:08:10:15:c9:e6:51:c4:c3:06:da:93:b3:14:
04:ad:d0:5f:b3:14:d2:cc:ee:c0:0f:d1:92:f2:6b:c9:a5:26:
82:49:6b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:48 2025 by rpki-client