Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
File: imauQAwtaBlg6FU_yzFXi42c37Y.mft (raw, json)
Hash identifier: UBTj3fcFcipMdi1E3M7tpXd2eW0vuqXJ+1jPrDsybxQ=
Subject key identifier: 46:9C:DE:7D:91:2B:AC:1A:97:07:EB:1C:04:C8:C6:0E:D4:A3:92:F4
Authority key identifier: 8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6
Certificate issuer: /CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6
Certificate serial: 01992D46A6547FAB2C318CC5817508E5951B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
Manifest number: 02A6
Signing time: Tue 09 Sep 2025 07:00:28 +0000
Manifest this update: Tue 09 Sep 2025 07:00:28 +0000
Manifest next update: Wed 10 Sep 2025 07:00:28 +0000
Files and hashes: 1: PuzSFCpssVQvjZAtpt-uOtGr7hY.roa (hash: SPN1lNtFS0koIE09mFP53lEypWhv8lUH53A6TRYkysY=)
2: imauQAwtaBlg6FU_yzFXi42c37Y.crl (hash: cLISyLWmhQNXRW/7kxl4ROKe6j77lUyqdaH3f6dmP5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:46:a6:54:7f:ab:2c:31:8c:c5:81:75:08:e5:95:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6
Validity
Not Before: Sep 9 07:00:28 2025 GMT
Not After : Sep 10 07:00:28 2025 GMT
Subject: CN=469cde7d912bac1a9707eb1c04c8c60ed4a392f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:86:26:78:33:99:49:84:3a:fc:f1:61:3e:19:
61:20:fa:f2:95:00:01:9e:d8:0d:e3:87:26:6a:a8:
68:ca:1d:f8:f1:39:2c:51:37:f1:cf:36:fb:e2:40:
68:c3:4f:20:12:d5:77:b0:b9:40:9f:c1:2c:5a:35:
d1:6f:bd:62:a5:b5:b9:1e:71:d8:31:18:74:4a:5f:
34:4e:72:6d:f0:fa:8c:6c:3e:ac:02:11:d3:68:5d:
59:29:f7:69:19:6c:05:9b:db:a1:cf:2d:b0:d3:0b:
c5:fd:01:46:94:85:fb:3e:c2:52:c8:32:f6:da:59:
8f:ec:cc:f6:3b:87:ce:6e:08:3e:ad:21:1b:12:9e:
ab:f6:30:52:af:4b:59:45:90:56:dd:e0:bf:db:f0:
80:01:eb:fe:fc:ed:6b:15:48:e8:fb:49:27:b3:09:
9f:59:b3:98:48:29:03:26:0d:17:c8:5b:7f:53:95:
45:67:74:cf:72:f5:e0:f1:fe:50:7d:77:78:22:1a:
89:46:99:fd:6a:7d:db:c2:8c:f8:34:7c:bd:21:1d:
d1:51:f0:cc:48:91:96:ab:23:cd:f1:58:5d:e2:c6:
e1:8f:d0:bf:52:e7:24:2e:00:e0:86:66:45:5b:dc:
ee:91:5b:bf:df:8f:66:d8:8c:5c:e2:b7:58:3b:90:
a3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9C:DE:7D:91:2B:AC:1A:97:07:EB:1C:04:C8:C6:0E:D4:A3:92:F4
X509v3 Authority Key Identifier:
keyid:8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d7:aa:79:f8:0a:be:b3:aa:34:9c:bf:64:5c:a8:1a:0c:0f:
65:2c:8e:a0:0a:5a:21:a3:ef:6f:63:d0:94:3f:7c:a9:63:9c:
72:e8:12:47:4a:2b:70:29:e7:ee:97:36:f2:50:b0:11:91:5b:
db:25:22:87:a7:02:aa:25:27:10:dd:6b:25:23:d8:d4:53:b8:
da:a7:bd:6b:34:43:ab:e5:0f:a3:f2:fb:f9:50:8d:df:0f:03:
c3:6b:22:56:18:f6:35:1e:87:b8:24:77:8d:1a:c4:7f:55:14:
8b:b5:9c:76:29:d9:c8:7b:b9:b3:cd:0d:2d:98:b4:7f:b2:e6:
b3:66:46:6a:d0:48:c7:58:18:f7:c5:7a:81:59:54:87:94:88:
73:85:07:74:d8:94:87:e8:e6:91:af:f6:8d:fb:54:e4:66:17:
09:29:94:ce:d5:22:e9:1a:04:79:b6:68:cc:87:94:e5:12:4a:
b1:92:f6:dd:31:20:bb:30:6b:6e:d6:e4:7c:f2:da:3e:1d:a8:
52:2b:18:f4:6b:46:ed:f4:4d:40:60:f3:e9:ed:d1:86:33:cd:
57:2e:b7:d2:df:db:fe:fb:f8:bf:06:3b:18:93:e9:3c:76:b5:
52:cf:54:98:04:d4:15:a4:4e:63:0e:5f:1a:2b:fd:08:5b:34:
c6:ee:23:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZktRqZUf6ssMYzFgXUI5ZUbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNjZhZTQwMGMyZDY4MTk2MGU4NTUzZmNiMzE1NzhiOGQ5
Y2RmYjYwHhcNMjUwOTA5MDcwMDI4WhcNMjUwOTEwMDcwMDI4WjAzMTEwLwYDVQQD
Eyg0NjljZGU3ZDkxMmJhYzFhOTcwN2ViMWMwNGM4YzYwZWQ0YTM5MmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioYmeDOZSYQ6/PFhPhlhIPrylQAB
ntgN44cmaqhoyh348TksUTfxzzb74kBow08gEtV3sLlAn8EsWjXRb71ipbW5HnHY
MRh0Sl80TnJt8PqMbD6sAhHTaF1ZKfdpGWwFm9uhzy2w0wvF/QFGlIX7PsJSyDL2
2lmP7Mz2O4fObgg+rSEbEp6r9jBSr0tZRZBW3eC/2/CAAev+/O1rFUjo+0knswmf
WbOYSCkDJg0XyFt/U5VFZ3TPcvXg8f5QfXd4IhqJRpn9an3bwoz4NHy9IR3RUfDM
SJGWqyPN8Vhd4sbhj9C/UuckLgDghmZFW9zukVu/349m2Ixc4rdYO5CjzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEac3n2RK6walwfrHATIxg7Uo5L0MB8GA1UdIwQY
MBaAFIpmrkAMLWgZYOhVP8sxV4uNnN+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jMzNhZjYtMzZhOS00N2IwLTgzZTct
OGJiYzNhOWU0ZjQzLzEvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jMzNhZjYtMzZhOS00N2IwLTgzZTctOGJiYzNhOWU0ZjQz
LzEvaW1hdVFBd3RhQmxnNkZVX3l6RlhpNDJjMzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9eqefgK
vrOqNJy/ZFyoGgwPZSyOoApaIaPvb2PQlD98qWOccugSR0orcCnn7pc28lCwEZFb
2yUih6cCqiUnEN1rJSPY1FO42qe9azRDq+UPo/L7+VCN3w8Dw2siVhj2NR6HuCR3
jRrEf1UUi7WcdinZyHu5s80NLZi0f7Lms2ZGatBIx1gY98V6gVlUh5SIc4UHdNiU
h+jmka/2jftU5GYXCSmUztUi6RoEebZozIeU5RJKsZL23TEguzBrbtbkfPLaPh2o
UisY9GtG7fRNQGDz6e3RhjPNVy630t/b/vv4vwY7GJPpPHa1Us9UmATUFaROYw5f
Giv9CFs0xu4jjg==
-----END CERTIFICATE-----
Generated at Tue Sep 9 10:22:15 2025 by rpki-client