Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
File: mJHESIaZ5tAk45zE1h7uq9OAEPo.mft (raw, json)
Hash identifier: bp3BBa01n4sVozb7Jkm2usL3Bqgi7spTTPvD+JsTiMg=
Subject key identifier: 00:B3:8A:A2:D4:54:79:E0:9D:E4:04:FF:AC:B2:9F:DB:E3:22:96:85
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Certificate issuer: /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial: 019760276EA3FAE7DE14C4090F010E05ABC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
Manifest number: 158C
Signing time: Wed 11 Jun 2025 18:01:26 +0000
Manifest this update: Wed 11 Jun 2025 18:01:26 +0000
Manifest next update: Thu 12 Jun 2025 18:01:26 +0000
Files and hashes: 1: 6QGkFK1SSLb8KrZSIt0KD4m_HTc.roa (hash: ICsAscU9gZxGHPDGe9P6Wa+cu9m9mX5jZ9qQYiJqk50=)
2: 9uUBmS-3S99xpluVPLmV1HsKam0.roa (hash: 8jxAhg8Odj2edlbiGdhpon+x7NalI3jCDbG8HGFfDDY=)
3: D4Or1IBlwc5hq86vIRWEwgXka1Y.roa (hash: r51O6/7Rhapt5pTnQgZxk/cJE7reXaPsMtgnkXNLEVc=)
4: PjDGJnV8bA-YxtE9UzyGXDTtzoM.roa (hash: 86bz/n2g96Qge58Du1MfgRD/8BFndLvyDPrpqOadpBA=)
5: QHrBIBuD-dIq2_2Kb_iV4X3Tvr8.roa (hash: BqAzrOrplAEdRsolpRbFSr5bt0QDC4A+AWz6QKat1JE=)
6: QV8F5f3ACVvEZ-E_uBXaPecA7WQ.roa (hash: GrjilDWZQ5tfLM5SfOrXr2GKb7a1lIF6Yw9vJO3l+Uw=)
7: bsQ79sopvmytFgIfVjKeVkU1gag.roa (hash: QxyAvAZB9QJoIOi8Wnqy68Z4vmJR/0QuMU+vWQKlGE4=)
8: mJHESIaZ5tAk45zE1h7uq9OAEPo.crl (hash: XDyMCbKionxDe7Hruga4ydjZXMGjlUSXhjDOCZvWDMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 18:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:27:6e:a3:fa:e7:de:14:c4:09:0f:01:0e:05:ab:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Validity
Not Before: Jun 11 18:01:26 2025 GMT
Not After : Jun 12 18:01:26 2025 GMT
Subject: CN=00b38aa2d45479e09de404ffacb29fdbe3229685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e8:f2:49:11:40:57:61:56:e2:fa:5e:25:99:
27:7d:39:3f:77:a4:3a:06:c5:3d:64:6b:17:35:4d:
a0:86:78:10:eb:03:96:87:53:b2:67:f1:f0:23:39:
91:96:66:2f:f9:79:19:88:0e:2f:91:6c:b3:ad:e6:
09:c7:18:63:61:73:a6:e7:e7:7a:2c:5c:ae:3b:ad:
31:af:6e:1c:45:a9:e9:e5:c8:81:03:a3:8c:a6:77:
6f:d6:30:66:f4:fd:6e:1e:c3:a1:44:aa:95:52:7a:
c3:cf:2b:60:f0:99:e3:c3:cb:4f:91:de:69:91:42:
e2:f4:99:fa:99:ae:31:3f:04:86:e5:84:4b:a2:a5:
0c:b1:06:4c:0c:5a:f1:77:fb:17:81:07:ce:f9:c5:
08:f0:d8:1a:a4:b2:41:e9:96:25:b7:98:fe:e4:76:
89:39:bf:b4:69:38:f9:1d:e8:9d:fb:43:fb:7f:f3:
2f:7d:e8:d0:11:5d:ef:ab:90:6c:25:49:c5:57:c8:
4a:c7:f0:3b:83:0d:70:00:85:6c:a5:d9:9a:f5:40:
1c:e4:38:87:39:3c:89:eb:53:32:27:97:26:ba:07:
ad:38:1a:f1:ce:cf:c0:5a:64:e8:d1:5c:5e:9e:62:
d7:dd:7a:d9:64:b3:c1:20:8a:2d:e4:e3:72:de:63:
2d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B3:8A:A2:D4:54:79:E0:9D:E4:04:FF:AC:B2:9F:DB:E3:22:96:85
X509v3 Authority Key Identifier:
keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f9:a1:06:2f:3b:90:34:c1:73:de:d7:0c:20:6e:9c:cd:71:
7b:75:3f:99:e6:08:02:03:3e:1a:07:dd:66:77:60:b0:af:66:
b1:e5:b2:2d:3f:70:db:a0:f7:b1:a9:d3:c0:47:66:f3:7b:e4:
59:14:33:1b:e6:49:ff:49:98:54:dc:e3:dc:89:00:54:b9:22:
5a:c7:be:f8:1d:77:9a:85:a7:b9:ad:56:b3:0d:43:cf:46:fc:
e8:22:2d:4c:f5:86:69:85:7c:86:8b:d0:61:e3:04:9c:5d:2b:
f4:9e:d3:eb:98:ad:b8:b7:52:9b:d1:40:b5:d3:42:a5:14:dd:
81:d2:02:48:57:71:07:bc:a1:e7:ea:3b:4f:29:2f:31:7a:0f:
b0:c2:fe:d1:26:e5:71:87:11:6a:ed:ef:48:3c:0a:ac:31:9b:
e7:6f:65:21:4d:17:9f:e3:fb:1c:67:3f:e8:af:fb:5b:8b:9b:
45:7f:a0:67:ec:91:8f:29:1d:b8:7d:cd:69:9c:9e:8d:65:ec:
13:93:ce:57:a1:ae:6a:16:65:3f:1b:dc:eb:17:17:1d:98:dc:
9b:8a:89:ab:4e:0d:27:9d:46:9b:7b:bf:6e:9d:e5:ba:1f:da:
31:68:93:30:91:1b:36:d0:39:02:19:30:da:60:50:73:7b:c4:
f0:9b:27:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdgJ26j+ufeFMQJDwEOBavCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4OTFjNDQ4ODY5OWU2ZDAyNGUzOWNjNGQ2MWVlZWFiZDM4
MDEwZmEwHhcNMjUwNjExMTgwMTI2WhcNMjUwNjEyMTgwMTI2WjAzMTEwLwYDVQQD
EygwMGIzOGFhMmQ0NTQ3OWUwOWRlNDA0ZmZhY2IyOWZkYmUzMjI5Njg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiujySRFAV2FW4vpeJZknfTk/d6Q6
BsU9ZGsXNU2ghngQ6wOWh1OyZ/HwIzmRlmYv+XkZiA4vkWyzreYJxxhjYXOm5+d6
LFyuO60xr24cRanp5ciBA6OMpndv1jBm9P1uHsOhRKqVUnrDzytg8Jnjw8tPkd5p
kULi9Jn6ma4xPwSG5YRLoqUMsQZMDFrxd/sXgQfO+cUI8NgapLJB6ZYlt5j+5HaJ
Ob+0aTj5Heid+0P7f/MvfejQEV3vq5BsJUnFV8hKx/A7gw1wAIVspdma9UAc5DiH
OTyJ61MyJ5cmugetOBrxzs/AWmTo0VxenmLX3XrZZLPBIIot5ONy3mMt3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACziqLUVHngneQE/6yyn9vjIpaFMB8GA1UdIwQY
MBaAFJiRxEiGmebQJOOcxNYe7qvTgBD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUpIRVNJYVo1dEFrNDV6RTFoN3VxOU9BRVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80N2RmMDAtODQ2OC00YzM5LWJlOTUt
ZTEwYTYwNTk2YzI2LzEvbUpIRVNJYVo1dEFrNDV6RTFoN3VxOU9BRVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80N2RmMDAtODQ2OC00YzM5LWJlOTUtZTEwYTYwNTk2YzI2
LzEvbUpIRVNJYVo1dEFrNDV6RTFoN3VxOU9BRVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfmhBi87
kDTBc97XDCBunM1xe3U/meYIAgM+GgfdZndgsK9mseWyLT9w26D3sanTwEdm83vk
WRQzG+ZJ/0mYVNzj3IkAVLkiWse++B13moWnua1Wsw1Dz0b86CItTPWGaYV8hovQ
YeMEnF0r9J7T65ituLdSm9FAtdNCpRTdgdICSFdxB7yh5+o7TykvMXoPsML+0Sbl
cYcRau3vSDwKrDGb529lIU0Xn+P7HGc/6K/7W4ubRX+gZ+yRjykduH3NaZyejWXs
E5POV6GuahZlPxvc6xcXHZjcm4qJq04NJ51Gm3u/bp3luh/aMWiTMJEbNtA5Ahkw
2mBQc3vE8JsnPQ==
-----END CERTIFICATE-----
Generated at Thu Jun 12 02:01:31 2025 by rpki-client