Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
File: mJHESIaZ5tAk45zE1h7uq9OAEPo.mft (raw, json)
Hash identifier: 6geLqGxLGH52IlIIn9A4zccjj3T4Zr5EyqmAOup4xa4=
Subject key identifier: 33:3B:63:78:36:93:AD:DE:CE:81:FB:9C:FE:36:F0:DF:33:88:80:98
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Certificate issuer: /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial: 01976BBD1A63AD6F7E9F27E8D271F3EA6430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 00:00:44 +0000
Manifest this update: Sat 14 Jun 2025 00:00:44 +0000
Manifest next update: Sun 15 Jun 2025 00:00:44 +0000
Files and hashes: 1: 6QGkFK1SSLb8KrZSIt0KD4m_HTc.roa (hash: ICsAscU9gZxGHPDGe9P6Wa+cu9m9mX5jZ9qQYiJqk50=)
2: 9uUBmS-3S99xpluVPLmV1HsKam0.roa (hash: 8jxAhg8Odj2edlbiGdhpon+x7NalI3jCDbG8HGFfDDY=)
3: D4Or1IBlwc5hq86vIRWEwgXka1Y.roa (hash: r51O6/7Rhapt5pTnQgZxk/cJE7reXaPsMtgnkXNLEVc=)
4: PjDGJnV8bA-YxtE9UzyGXDTtzoM.roa (hash: 86bz/n2g96Qge58Du1MfgRD/8BFndLvyDPrpqOadpBA=)
5: QHrBIBuD-dIq2_2Kb_iV4X3Tvr8.roa (hash: BqAzrOrplAEdRsolpRbFSr5bt0QDC4A+AWz6QKat1JE=)
6: QV8F5f3ACVvEZ-E_uBXaPecA7WQ.roa (hash: GrjilDWZQ5tfLM5SfOrXr2GKb7a1lIF6Yw9vJO3l+Uw=)
7: bsQ79sopvmytFgIfVjKeVkU1gag.roa (hash: QxyAvAZB9QJoIOi8Wnqy68Z4vmJR/0QuMU+vWQKlGE4=)
8: mJHESIaZ5tAk45zE1h7uq9OAEPo.crl (hash: t5NEtl3IcUA/Jiwn67I2331BtnN38Y9Bg8/oOojJuKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:1a:63:ad:6f:7e:9f:27:e8:d2:71:f3:ea:64:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Validity
Not Before: Jun 14 00:00:44 2025 GMT
Not After : Jun 15 00:00:44 2025 GMT
Subject: CN=333b63783693addece81fb9cfe36f0df33888098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4e:e2:53:94:ef:01:e8:2b:36:74:08:ce:3c:
38:cb:d9:b4:70:ed:56:b1:d2:a3:6e:51:22:58:fb:
9d:da:20:74:36:f0:54:3d:8f:82:bf:ed:ab:0c:c7:
26:b7:cf:8e:9b:cf:a5:79:9e:bd:f4:0a:dd:84:39:
1f:3b:52:69:7d:9c:98:8c:ac:09:5b:87:d9:f0:f8:
83:8d:9b:dc:ef:f4:43:c6:59:be:cb:ea:ff:d3:e0:
6d:c2:5a:5f:ae:31:a8:f4:0e:29:85:d6:19:57:e8:
46:4e:e4:93:c1:ba:d9:e0:b1:79:b8:7f:d6:7c:ea:
62:0e:f2:a2:50:45:a4:79:2d:ff:e7:ff:5b:17:0e:
40:d1:75:25:2e:5d:1d:80:f9:6e:ee:4f:61:43:0a:
33:20:10:43:54:54:47:44:76:82:2e:a8:c6:69:77:
42:2d:a3:2f:30:90:a1:66:1c:62:e7:9d:20:e6:5d:
be:8d:61:fc:7b:c4:20:83:09:84:ac:fb:95:9a:e3:
a1:c2:e9:f0:c6:45:ce:40:36:a9:72:fe:7a:9a:3c:
97:ca:fa:1d:8f:03:f2:e9:b9:3c:ed:57:d4:0c:25:
8e:c8:90:df:6d:7d:b1:f0:f6:dd:7e:84:d8:56:20:
24:a0:52:06:8f:7a:0a:25:0d:6f:6b:9b:55:56:27:
39:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3B:63:78:36:93:AD:DE:CE:81:FB:9C:FE:36:F0:DF:33:88:80:98
X509v3 Authority Key Identifier:
keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e9:b3:13:b5:4a:17:98:b3:c1:1b:5a:74:58:0d:95:01:8b:
2a:5c:13:c6:ec:a7:c7:83:c9:a8:1f:27:99:f5:48:8c:3c:cf:
22:1f:97:e6:b5:b6:31:e3:d0:8c:04:04:73:2b:d0:0b:a3:ec:
b1:80:d4:8d:4d:1a:ef:73:14:89:c3:bf:a5:be:8a:be:2a:69:
cf:0e:a3:d3:4b:66:33:0a:48:95:7b:3a:27:d8:d4:27:10:cb:
c4:34:23:a5:9d:ed:3d:b2:38:7d:14:5f:ae:0c:81:ec:f6:d4:
f3:d2:c6:dc:21:7c:15:4d:70:e8:97:7d:24:1f:8f:0c:58:cf:
be:d4:c4:b7:db:ed:fa:ee:19:d7:b8:a0:0c:28:d7:cd:ea:d6:
c1:89:cf:11:b4:57:24:75:75:85:92:bd:59:d9:ee:69:1e:4d:
37:3e:dc:bb:d0:23:2c:74:d6:58:f1:da:cb:3d:2b:a7:a2:fb:
e0:34:3f:f9:b4:a9:76:48:31:82:a7:9a:21:e2:7d:ee:b5:c7:
23:2f:24:0d:8a:d6:5c:33:3d:fe:5c:3b:78:6c:6e:c8:bc:80:
32:e2:e6:07:38:92:80:a4:18:c6:01:01:e4:b3:45:95:d3:c5:
2f:07:fa:85:b0:33:c1:df:f4:bd:85:f6:cb:c4:77:dd:7e:9d:
94:5c:c2:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrvRpjrW9+nyfo0nHz6mQwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4OTFjNDQ4ODY5OWU2ZDAyNGUzOWNjNGQ2MWVlZWFiZDM4
MDEwZmEwHhcNMjUwNjE0MDAwMDQ0WhcNMjUwNjE1MDAwMDQ0WjAzMTEwLwYDVQQD
EygzMzNiNjM3ODM2OTNhZGRlY2U4MWZiOWNmZTM2ZjBkZjMzODg4MDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu07iU5TvAegrNnQIzjw4y9m0cO1W
sdKjblEiWPud2iB0NvBUPY+Cv+2rDMcmt8+Om8+leZ699ArdhDkfO1JpfZyYjKwJ
W4fZ8PiDjZvc7/RDxlm+y+r/0+BtwlpfrjGo9A4phdYZV+hGTuSTwbrZ4LF5uH/W
fOpiDvKiUEWkeS3/5/9bFw5A0XUlLl0dgPlu7k9hQwozIBBDVFRHRHaCLqjGaXdC
LaMvMJChZhxi550g5l2+jWH8e8QggwmErPuVmuOhwunwxkXOQDapcv56mjyXyvod
jwPy6bk87VfUDCWOyJDfbX2x8PbdfoTYViAkoFIGj3oKJQ1va5tVVic5kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDM7Y3g2k63ezoH7nP428N8ziICYMB8GA1UdIwQY
MBaAFJiRxEiGmebQJOOcxNYe7qvTgBD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUpIRVNJYVo1dEFrNDV6RTFoN3VxOU9BRVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80N2RmMDAtODQ2OC00YzM5LWJlOTUt
ZTEwYTYwNTk2YzI2LzEvbUpIRVNJYVo1dEFrNDV6RTFoN3VxOU9BRVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80N2RmMDAtODQ2OC00YzM5LWJlOTUtZTEwYTYwNTk2YzI2
LzEvbUpIRVNJYVo1dEFrNDV6RTFoN3VxOU9BRVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWumzE7VK
F5izwRtadFgNlQGLKlwTxuynx4PJqB8nmfVIjDzPIh+X5rW2MePQjAQEcyvQC6Ps
sYDUjU0a73MUicO/pb6Kvippzw6j00tmMwpIlXs6J9jUJxDLxDQjpZ3tPbI4fRRf
rgyB7PbU89LG3CF8FU1w6Jd9JB+PDFjPvtTEt9vt+u4Z17igDCjXzerWwYnPEbRX
JHV1hZK9WdnuaR5NNz7cu9AjLHTWWPHayz0rp6L74DQ/+bSpdkgxgqeaIeJ97rXH
Iy8kDYrWXDM9/lw7eGxuyLyAMuLmBziSgKQYxgEB5LNFldPFLwf6hbAzwd/0vYX2
y8R33X6dlFzCBg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:39:30 2025 by rpki-client