Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
File: rMGajH8XQRRJx9SP-TCNJIMulSs.mft (raw, json)
Hash identifier: pe7vd4TWV9YVxa3Vuar0hd6GK2rI6BK2ZqZL44HOLUY=
Subject key identifier: 4C:43:D5:66:09:8C:64:57:BC:E0:5F:9F:40:33:53:32:71:D5:E7:D7
Authority key identifier: AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
Certificate issuer: /CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Certificate serial: 01984588641C7C8E625B6DBAC127F7D22632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 07:00:23 +0000
Manifest this update: Sat 26 Jul 2025 07:00:23 +0000
Manifest next update: Sun 27 Jul 2025 07:00:23 +0000
Files and hashes: 1: Qwfm7iyTFcUFA4cP-BGJUr6nVGo.roa (hash: cGT3x4JJQpP+f+7JmlJEaoJ5r1uUvYJMBAOOSckaWRE=)
2: rMGajH8XQRRJx9SP-TCNJIMulSs.crl (hash: EfWrCm7FGeeP3mKxJT7KUQDqc72SrANGYOOmEuciOEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:64:1c:7c:8e:62:5b:6d:ba:c1:27:f7:d2:26:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Validity
Not Before: Jul 26 07:00:23 2025 GMT
Not After : Jul 27 07:00:23 2025 GMT
Subject: CN=4c43d566098c6457bce05f9f4033533271d5e7d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e3:ab:fa:5b:ba:04:51:68:41:e3:82:53:ca:
2e:f4:a4:ba:6e:c2:3a:1e:f1:00:3f:91:d1:ae:e3:
2c:0f:36:76:f6:f0:e0:76:ac:b2:25:9b:e9:eb:19:
b6:63:12:b9:e4:ae:d3:7e:42:80:3e:c7:a8:0f:16:
cb:c6:55:1f:5d:8d:7f:2f:55:dc:52:3b:ba:0d:19:
a4:62:1a:10:2a:e5:ad:00:0c:14:1a:34:2c:a0:f2:
e0:33:bb:1f:8c:db:7f:27:2b:c6:fa:cc:20:6c:03:
cd:57:96:c0:26:93:35:25:96:19:d1:68:d3:c0:4c:
52:41:b4:0f:ca:aa:41:5e:62:09:16:cd:44:a0:2b:
3d:fd:a7:ba:dd:50:29:a5:7f:a1:9d:29:e1:09:76:
b5:00:c1:90:f3:22:84:c4:af:31:10:0b:3f:7e:eb:
72:8c:1b:5a:7a:21:ce:ab:ab:ac:de:c3:ab:9e:33:
f7:de:8a:06:ed:90:15:fc:1c:9d:15:d7:03:4d:ce:
27:54:0d:69:65:78:e9:0e:40:a1:8c:90:c2:95:03:
7b:d1:6b:b7:b4:03:ad:ce:69:d1:b6:f7:69:cb:0c:
03:78:b5:cf:22:bc:a0:e1:f1:1c:05:54:09:34:9b:
70:0c:43:54:1a:cf:c3:96:25:fb:63:7f:82:86:62:
0d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:43:D5:66:09:8C:64:57:BC:E0:5F:9F:40:33:53:32:71:D5:E7:D7
X509v3 Authority Key Identifier:
keyid:AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c4:9d:c4:98:9f:fd:88:ed:fc:3a:76:dc:04:5d:05:11:0b:
55:98:0b:89:33:e4:85:b3:86:f1:36:15:8e:16:ff:71:ad:d2:
c7:72:79:a6:d8:c4:63:4f:42:62:a2:25:30:cb:c7:d6:ba:bd:
1f:7b:df:56:5f:9c:e0:ee:19:1a:b6:06:a1:0e:11:5c:64:90:
35:16:21:6a:bf:da:8e:53:c6:57:25:42:b1:c9:bb:3f:9d:c2:
66:32:79:60:21:05:03:30:3f:9c:a2:e0:ab:5b:b2:35:d6:7c:
7c:14:0c:41:a9:cf:29:30:f3:b4:6d:29:ce:c0:b7:0b:97:9d:
ef:16:51:d8:b9:4b:fd:3f:53:f1:eb:42:9a:be:21:38:5c:6e:
43:0f:a0:83:73:17:42:ce:8e:11:c7:3a:a1:23:15:6a:5f:6c:
2b:9b:ce:c3:02:a0:e0:31:ac:51:4b:f2:74:f5:b1:21:c1:b5:
42:b8:6b:08:27:fc:e6:b8:2b:fc:89:f5:be:0a:6c:a1:10:f2:
88:2a:76:ba:b5:19:21:a9:65:c0:9a:37:60:f4:b8:61:65:54:
c2:2f:72:3e:73:fd:6a:8a:bd:83:4e:ee:88:96:84:e6:a5:70:
5d:d7:9b:a8:e6:68:95:e5:9e:a9:bd:7b:7c:83:6e:02:a3:0d:
e7:57:a8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 09:11:09 2025 by rpki-client