Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
File: mJHESIaZ5tAk45zE1h7uq9OAEPo.mft (raw, json)
Hash identifier: KreGNleAH7clrzm9wH4XMloK625MYdDSfQ4ukQIzOe8=
Subject key identifier: 5A:49:32:44:73:2F:AC:18:C8:EC:41:79:EB:F8:58:4F:BD:9E:63:3E
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Certificate issuer: /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial: 0199319170274BAE8707C5D84B2B9CEFD8C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
Manifest number: 167D
Signing time: Wed 10 Sep 2025 03:00:38 +0000
Manifest this update: Wed 10 Sep 2025 03:00:38 +0000
Manifest next update: Thu 11 Sep 2025 03:00:38 +0000
Files and hashes: 1: 6QGkFK1SSLb8KrZSIt0KD4m_HTc.roa (hash: ICsAscU9gZxGHPDGe9P6Wa+cu9m9mX5jZ9qQYiJqk50=)
2: 9uUBmS-3S99xpluVPLmV1HsKam0.roa (hash: 8jxAhg8Odj2edlbiGdhpon+x7NalI3jCDbG8HGFfDDY=)
3: D4Or1IBlwc5hq86vIRWEwgXka1Y.roa (hash: r51O6/7Rhapt5pTnQgZxk/cJE7reXaPsMtgnkXNLEVc=)
4: PjDGJnV8bA-YxtE9UzyGXDTtzoM.roa (hash: 86bz/n2g96Qge58Du1MfgRD/8BFndLvyDPrpqOadpBA=)
5: QHrBIBuD-dIq2_2Kb_iV4X3Tvr8.roa (hash: BqAzrOrplAEdRsolpRbFSr5bt0QDC4A+AWz6QKat1JE=)
6: QV8F5f3ACVvEZ-E_uBXaPecA7WQ.roa (hash: GrjilDWZQ5tfLM5SfOrXr2GKb7a1lIF6Yw9vJO3l+Uw=)
7: bsQ79sopvmytFgIfVjKeVkU1gag.roa (hash: QxyAvAZB9QJoIOi8Wnqy68Z4vmJR/0QuMU+vWQKlGE4=)
8: mJHESIaZ5tAk45zE1h7uq9OAEPo.crl (hash: xOyr1Y5s6pYoodWDagY8vnnc/h3YmstwnBv/RgkgJPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:91:70:27:4b:ae:87:07:c5:d8:4b:2b:9c:ef:d8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Validity
Not Before: Sep 10 03:00:38 2025 GMT
Not After : Sep 11 03:00:38 2025 GMT
Subject: CN=5a493244732fac18c8ec4179ebf8584fbd9e633e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e7:f1:ea:8c:29:2d:0d:f7:6b:48:8a:f4:cf:
e1:23:ac:ae:0c:e1:55:56:f1:98:1f:74:50:af:0c:
41:2f:74:ac:3b:64:4f:f0:04:1e:df:1e:ef:f5:b0:
58:42:ca:0a:11:a4:91:b5:db:b9:0c:0a:9d:b3:04:
37:df:9b:52:ed:b8:cc:cd:c2:56:76:11:72:fc:d0:
62:49:ab:e7:61:70:15:46:7d:fa:0f:55:5b:3b:f4:
ef:35:7b:f2:0b:07:b3:a5:23:24:82:a0:36:b1:35:
3d:56:02:f5:8c:1c:9d:b5:93:b5:7c:45:5d:2a:08:
87:d9:75:ed:3d:aa:b2:8d:26:c2:8a:2d:cc:24:3d:
0e:e9:f1:96:c5:f8:77:11:3e:55:52:00:e7:6d:15:
f6:b7:59:82:eb:02:66:42:6d:01:80:f3:2c:b3:f0:
8d:dd:7b:e0:8f:84:b5:03:08:5c:71:79:e9:6b:e4:
d7:3e:8a:62:2a:e6:fb:bd:29:86:25:22:8d:74:5d:
bd:47:a5:a6:d2:d1:d6:d1:40:41:2e:7d:19:fe:a0:
d1:ba:62:78:d2:e4:d1:24:3c:2e:84:56:56:d3:79:
4c:43:ab:1b:14:24:9e:48:90:81:92:de:77:c0:47:
0c:6e:ea:72:ff:b0:c2:c6:5d:27:ec:1c:bf:4c:5b:
c2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:49:32:44:73:2F:AC:18:C8:EC:41:79:EB:F8:58:4F:BD:9E:63:3E
X509v3 Authority Key Identifier:
keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e5:c3:d7:07:2c:6f:c7:f4:41:ff:99:81:ae:06:7a:a2:e2:
a0:4a:8d:2e:97:58:2f:c4:ec:da:90:81:04:2e:d4:1d:d7:dd:
a8:06:ca:86:77:df:3e:ab:01:25:37:9e:5a:51:c6:ad:55:3f:
ad:7b:91:3f:33:64:91:a0:09:a6:b8:1f:14:0f:f3:3b:c2:09:
96:94:c4:09:cf:18:ec:ed:39:c3:c6:5c:72:7f:1b:2d:95:dd:
6e:32:88:d3:f4:69:fa:02:d4:c1:cf:3d:d0:54:23:45:98:1d:
78:0f:1f:d6:f1:b1:4a:f1:94:fc:a6:6f:7d:fb:ee:dd:b4:8e:
de:97:86:61:5f:74:75:26:12:63:39:4e:d6:89:c4:5f:fc:2e:
72:82:0e:b9:60:a4:0b:0d:fd:a2:44:8e:e2:e0:a4:90:83:25:
7c:b0:d0:76:14:0a:51:e0:f3:4a:f5:80:8a:21:4c:fc:9c:cf:
b4:52:f5:30:11:86:c4:c9:77:78:85:15:92:ed:2f:00:4d:cb:
6c:73:03:45:ef:93:cf:2e:8a:0d:62:dc:4c:8b:d4:8c:a9:b5:
20:3d:7c:3d:af:57:68:3a:1d:78:a2:09:2e:a9:9b:2f:29:12:
d0:c9:15:82:06:c5:65:47:fe:78:a8:61:11:71:46:55:82:28:
79:19:b2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:33:59 2025 by rpki-client