Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
File: imauQAwtaBlg6FU_yzFXi42c37Y.mft (raw, json)
Hash identifier: rBhDrDWb+wPX+qBcnMwph7Ic9ptih81z6Cuvjmu3ukg=
Subject key identifier: CF:0B:AA:5E:ED:77:03:C2:6C:2D:C5:82:A9:2A:B2:6B:94:22:FC:BC
Authority key identifier: 8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6
Certificate issuer: /CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6
Certificate serial: 01974A43DF117802C3BB6450F158CEB0B38F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
Manifest number: 01AC
Signing time: Sat 07 Jun 2025 12:00:51 +0000
Manifest this update: Sat 07 Jun 2025 12:00:51 +0000
Manifest next update: Sun 08 Jun 2025 12:00:51 +0000
Files and hashes: 1: PuzSFCpssVQvjZAtpt-uOtGr7hY.roa (hash: SPN1lNtFS0koIE09mFP53lEypWhv8lUH53A6TRYkysY=)
2: imauQAwtaBlg6FU_yzFXi42c37Y.crl (hash: SIiedv6PBqs/SP2+IwrpnjeNoJeuQfa6Ziflyaaodew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:df:11:78:02:c3:bb:64:50:f1:58:ce:b0:b3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a66ae400c2d681960e8553fcb31578b8d9cdfb6
Validity
Not Before: Jun 7 12:00:51 2025 GMT
Not After : Jun 8 12:00:51 2025 GMT
Subject: CN=cf0baa5eed7703c26c2dc582a92ab26b9422fcbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9e:25:b4:f8:f3:c1:f2:e1:4d:8d:74:72:4e:
e2:43:9d:ec:e9:a0:14:72:45:7d:4b:62:96:d7:b7:
99:4a:63:c1:b7:5b:ca:5a:30:39:53:9a:f8:25:a3:
11:dc:66:ec:b6:10:10:57:07:5a:e4:8c:c1:96:96:
d8:5c:7b:9d:df:88:7b:ce:e0:16:1e:74:30:84:1a:
34:de:75:00:60:cc:6e:16:32:71:82:fd:a7:66:15:
0b:3e:1d:47:bf:09:cb:ae:3f:98:48:69:e5:34:d9:
1d:62:43:36:85:6d:55:3f:92:f4:9b:8f:f4:c4:5f:
4e:9a:5c:7c:15:e5:e2:de:16:f6:df:41:50:75:b7:
60:28:6a:95:ca:87:08:58:ab:2b:05:65:a6:97:98:
1e:9e:6c:85:c8:b2:1b:77:5f:fe:37:25:42:c9:bb:
12:fc:e6:a9:cd:28:6a:1a:73:64:01:d6:48:5a:e0:
d7:78:d0:a4:63:71:b9:43:1b:f6:3c:4d:c2:ba:79:
2f:a0:25:a0:50:68:c7:4e:7b:4b:f2:b6:24:8d:2e:
a2:a7:e3:1d:51:88:97:13:b0:e3:f8:04:18:2c:8f:
5c:8c:c7:8a:85:f6:aa:18:92:c4:1e:e9:47:9c:eb:
47:7c:ea:ca:f5:c1:22:26:31:bf:4e:f0:7a:3f:35:
59:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0B:AA:5E:ED:77:03:C2:6C:2D:C5:82:A9:2A:B2:6B:94:22:FC:BC
X509v3 Authority Key Identifier:
keyid:8A:66:AE:40:0C:2D:68:19:60:E8:55:3F:CB:31:57:8B:8D:9C:DF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imauQAwtaBlg6FU_yzFXi42c37Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c33af6-36a9-47b0-83e7-8bbc3a9e4f43/1/imauQAwtaBlg6FU_yzFXi42c37Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:cd:ea:fa:68:f9:e2:93:db:4d:cb:08:f4:ff:1b:99:09:2a:
0e:48:99:c8:ec:83:5b:48:69:21:ad:63:f2:4f:3c:6d:83:de:
59:67:ca:f5:f6:a5:ad:6d:9f:4b:ba:1e:63:21:f1:e7:90:6e:
91:55:e0:5b:f8:45:f6:d6:49:45:54:6e:98:ed:82:7e:87:5d:
9d:bf:14:43:31:2e:45:43:aa:61:20:31:5f:cb:7a:15:f2:f5:
27:ad:92:c2:3d:77:e1:14:d7:b6:2a:df:33:5d:7c:bb:37:5b:
3d:ce:12:94:b0:3f:18:05:13:2e:02:b3:ef:a7:c6:28:61:58:
0e:03:66:7b:91:78:3e:cf:ae:6e:f6:26:79:d4:aa:2c:b4:d0:
ef:a5:4a:13:37:0e:1c:12:89:e0:2b:dd:78:1a:a4:b0:b1:cb:
01:9b:a4:f6:c1:ac:28:b2:10:07:0b:76:3e:59:00:1d:35:d4:
a5:f6:eb:69:cd:3e:1f:de:04:7a:03:2a:0f:c5:7e:1b:85:98:
a3:80:4a:e2:ba:2f:5f:f3:b6:98:09:d5:eb:18:fd:c0:25:f5:
73:86:7f:54:40:f6:0a:03:86:2c:11:2c:9f:fa:ad:91:a9:5b:
d0:72:d8:0a:c0:0b:54:df:cd:73:a8:c3:00:35:a7:46:7f:6c:
1e:95:a4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:00:20 2025 by rpki-client