Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
File: mJAcfP_Rmk_qePebEASZkmbcwiQ.mft (raw, json)
Hash identifier: Q8/SPaJ/UxgBi4WZz7Ko+kV7Fr5RvR508JpCiEgiQeY=
Subject key identifier: 49:50:1F:10:C2:A6:DB:5E:47:93:FA:82:E3:C0:27:B9:69:D5:31:ED
Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Certificate issuer: /CN=98901c7cffd19a4fea78f79b1004999266dcc224
Certificate serial: 019844ACB6642C6127F6C5B7134DCE529ACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 03:00:26 +0000
Manifest this update: Sat 26 Jul 2025 03:00:26 +0000
Manifest next update: Sun 27 Jul 2025 03:00:26 +0000
Files and hashes: 1: HGWBnpYX08vMWUwwLOMJq_k78S0.roa (hash: yttjunWIbX6dwAiOo7g6fUQGb+c1a+Xf5qmbeU/dnp4=)
2: XmFs6QZFMPRdJzopVIFXmV--Vrs.roa (hash: btfm0oGigPJzbc1bJybbkI9gWRtDv9TpTBsAYkeB30s=)
3: mJAcfP_Rmk_qePebEASZkmbcwiQ.crl (hash: gXX627isSG1/tJdqoBiL7vYJAA8TlC22ayy4UA7CWDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:ac:b6:64:2c:61:27:f6:c5:b7:13:4d:ce:52:9a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224
Validity
Not Before: Jul 26 03:00:26 2025 GMT
Not After : Jul 27 03:00:26 2025 GMT
Subject: CN=49501f10c2a6db5e4793fa82e3c027b969d531ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ea:1f:a1:69:90:55:cf:3a:a5:f3:0f:e0:bc:
2d:c7:b7:29:4a:cd:41:b4:13:8c:e6:61:76:cd:bd:
60:4c:71:75:58:e4:21:e0:98:49:75:1f:a4:71:80:
a7:b0:b0:36:1d:f4:80:52:0a:d7:01:88:b0:84:59:
63:fe:42:fe:06:ee:58:e0:d7:3d:c1:52:12:05:0d:
df:fa:71:90:2c:d2:f7:c3:68:bd:a5:07:96:c5:09:
5d:d3:c7:0c:7c:a6:31:7a:8e:75:4c:b2:75:29:02:
cc:3e:a8:1d:f8:f0:52:20:7d:52:ea:06:93:e8:d4:
29:1a:bd:d7:ee:67:b6:82:ab:d4:0a:27:ac:fc:f8:
d0:41:a7:c1:ea:90:6b:51:bb:a3:a5:aa:b6:3d:69:
a7:16:c6:55:b1:02:12:a2:76:ae:f7:04:db:65:ab:
40:6d:46:bc:dc:fc:b5:dd:ba:0a:28:a7:06:36:1a:
e2:a2:a2:fa:2a:2d:66:e1:d0:27:08:28:5f:d2:5f:
27:28:f9:44:45:56:34:02:29:81:ee:3d:a0:09:1c:
f9:d1:41:0f:d2:05:0e:d8:25:e6:b8:92:08:05:4a:
d2:9e:22:97:61:d9:db:59:d9:4c:20:e0:1d:58:18:
15:6d:66:c1:88:ad:78:23:c6:47:4a:f9:fd:9f:3f:
c8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:50:1F:10:C2:A6:DB:5E:47:93:FA:82:E3:C0:27:B9:69:D5:31:ED
X509v3 Authority Key Identifier:
keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b5:fa:ce:a0:d3:b9:75:5b:95:ae:a4:a1:27:00:10:f3:99:
d8:6f:de:e5:f8:a5:83:9e:af:51:f3:e6:3f:02:b9:3e:b1:ce:
dd:8a:7d:71:38:e9:ae:bd:5d:a9:e1:c7:00:04:e2:98:26:4e:
9d:ab:59:8a:22:0b:6d:57:12:11:a9:92:a4:ce:24:22:b2:f6:
29:11:8b:aa:88:e5:72:41:e5:14:c4:dc:19:33:6d:7e:9f:1f:
b5:0c:07:4c:a5:5e:5d:11:6a:f0:7c:fd:7d:79:85:80:31:7e:
29:35:f2:59:a2:8d:cb:3a:a3:1a:24:b2:2b:5b:4d:38:35:ce:
a6:c8:74:64:92:76:9f:a9:aa:98:a1:8a:be:ea:70:e0:17:48:
1c:e3:55:b1:fa:b6:bb:c7:9f:85:e3:e2:5b:82:b6:94:5d:7b:
8b:28:7a:db:32:75:a0:2a:da:9d:60:b4:c8:3a:ca:a5:41:f8:
a8:3b:ea:17:48:80:4f:2e:fc:32:61:dc:8c:9a:1a:55:64:6e:
00:44:f4:73:9a:eb:80:f5:9c:20:f7:a4:1c:83:90:ee:59:42:
12:01:68:57:6d:02:52:31:db:f2:6c:76:4b:b0:a7:d9:06:eb:
32:9a:3d:d9:64:b9:ba:d0:a0:58:2e:7c:39:90:47:b0:96:d3:
fb:48:3a:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhErLZkLGEn9sW3E03OUprLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4OTAxYzdjZmZkMTlhNGZlYTc4Zjc5YjEwMDQ5OTkyNjZk
Y2MyMjQwHhcNMjUwNzI2MDMwMDI2WhcNMjUwNzI3MDMwMDI2WjAzMTEwLwYDVQQD
Eyg0OTUwMWYxMGMyYTZkYjVlNDc5M2ZhODJlM2MwMjdiOTY5ZDUzMWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuofoWmQVc86pfMP4Lwtx7cpSs1B
tBOM5mF2zb1gTHF1WOQh4JhJdR+kcYCnsLA2HfSAUgrXAYiwhFlj/kL+Bu5Y4Nc9
wVISBQ3f+nGQLNL3w2i9pQeWxQld08cMfKYxeo51TLJ1KQLMPqgd+PBSIH1S6gaT
6NQpGr3X7me2gqvUCies/PjQQafB6pBrUbujpaq2PWmnFsZVsQISonau9wTbZatA
bUa83Py13boKKKcGNhrioqL6Ki1m4dAnCChf0l8nKPlERVY0AimB7j2gCRz50UEP
0gUO2CXmuJIIBUrSniKXYdnbWdlMIOAdWBgVbWbBiK14I8ZHSvn9nz/I1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFElQHxDCptteR5P6guPAJ7lp1THtMB8GA1UdIwQY
MBaAFJiQHHz/0ZpP6nj3mxAEmZJm3MIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9lMjBjOTUtMGY5Mi00NTk4LTk2ZGYt
Y2JjMjc5N2MxZDBhLzEvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9lMjBjOTUtMGY5Mi00NTk4LTk2ZGYtY2JjMjc5N2MxZDBh
LzEvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZLX6zqDT
uXVbla6koScAEPOZ2G/e5filg56vUfPmPwK5PrHO3Yp9cTjprr1dqeHHAATimCZO
natZiiILbVcSEamSpM4kIrL2KRGLqojlckHlFMTcGTNtfp8ftQwHTKVeXRFq8Hz9
fXmFgDF+KTXyWaKNyzqjGiSyK1tNODXOpsh0ZJJ2n6mqmKGKvupw4BdIHONVsfq2
u8efhePiW4K2lF17iyh62zJ1oCranWC0yDrKpUH4qDvqF0iATy78MmHcjJoaVWRu
AET0c5rrgPWcIPekHIOQ7llCEgFoV20CUjHb8mx2S7Cn2QbrMpo92WS5utCgWC58
OZBHsJbT+0g6yA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:58:52 2025 by rpki-client