Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
File: mJHESIaZ5tAk45zE1h7uq9OAEPo.mft (raw, json)
Hash identifier: LJH7sMubcUpzIKCWcW/6aqdnIMPEn+8wLY5nt2812KE=
Subject key identifier: C6:58:D5:3D:B1:55:E2:18:4F:69:3C:DF:C1:AB:F3:0F:1C:C3:B8:EF
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Certificate issuer: /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial: 01975A5C0D1806FE5D1F6E1D485093005F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
Manifest number: 1589
Signing time: Tue 10 Jun 2025 15:01:11 +0000
Manifest this update: Tue 10 Jun 2025 15:01:11 +0000
Manifest next update: Wed 11 Jun 2025 15:01:11 +0000
Files and hashes: 1: 6QGkFK1SSLb8KrZSIt0KD4m_HTc.roa (hash: ICsAscU9gZxGHPDGe9P6Wa+cu9m9mX5jZ9qQYiJqk50=)
2: 9uUBmS-3S99xpluVPLmV1HsKam0.roa (hash: 8jxAhg8Odj2edlbiGdhpon+x7NalI3jCDbG8HGFfDDY=)
3: D4Or1IBlwc5hq86vIRWEwgXka1Y.roa (hash: r51O6/7Rhapt5pTnQgZxk/cJE7reXaPsMtgnkXNLEVc=)
4: PjDGJnV8bA-YxtE9UzyGXDTtzoM.roa (hash: 86bz/n2g96Qge58Du1MfgRD/8BFndLvyDPrpqOadpBA=)
5: QHrBIBuD-dIq2_2Kb_iV4X3Tvr8.roa (hash: BqAzrOrplAEdRsolpRbFSr5bt0QDC4A+AWz6QKat1JE=)
6: QV8F5f3ACVvEZ-E_uBXaPecA7WQ.roa (hash: GrjilDWZQ5tfLM5SfOrXr2GKb7a1lIF6Yw9vJO3l+Uw=)
7: bsQ79sopvmytFgIfVjKeVkU1gag.roa (hash: QxyAvAZB9QJoIOi8Wnqy68Z4vmJR/0QuMU+vWQKlGE4=)
8: mJHESIaZ5tAk45zE1h7uq9OAEPo.crl (hash: dPNBaGxW2pfrQ3LFfcOW+JgizKxh/SY2l8nTYved4MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:5c:0d:18:06:fe:5d:1f:6e:1d:48:50:93:00:5f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Validity
Not Before: Jun 10 15:01:11 2025 GMT
Not After : Jun 11 15:01:11 2025 GMT
Subject: CN=c658d53db155e2184f693cdfc1abf30f1cc3b8ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:74:2e:3b:2b:5b:d3:c0:ef:76:7d:cc:4f:e8:
3d:0d:ca:8d:e5:57:58:b5:ad:b2:07:2c:cf:cb:ae:
69:27:c4:02:87:05:99:a9:5f:60:1d:02:ce:6d:48:
a1:61:99:53:5d:ed:ef:3f:a0:74:dd:08:05:6a:d1:
90:08:6f:6c:d2:c0:44:d8:49:b3:ea:46:48:0e:c0:
4a:49:5a:46:e2:ad:45:14:b2:9c:65:b5:75:06:9e:
33:ac:3e:6e:5c:a2:5c:8b:7b:d6:b4:41:4f:23:25:
d3:b9:b8:40:52:8d:f3:f8:06:64:56:fe:96:c6:7b:
63:27:14:f5:a7:b1:df:2e:a9:10:3b:0e:51:a8:64:
bb:8e:4d:ca:fc:75:9a:38:42:61:27:c4:09:18:70:
96:ba:ba:71:b1:1b:be:b1:79:2a:88:74:d6:ce:c0:
da:cb:56:46:80:21:9c:74:25:87:be:e1:56:06:14:
58:79:42:90:32:a1:9f:45:0a:e1:b9:ea:67:e9:64:
a7:67:af:56:f3:b3:29:63:30:9e:d2:74:ac:9f:97:
76:b2:0b:36:57:96:bf:0b:ec:16:16:76:09:5a:b8:
36:97:04:3e:2d:f3:f7:ec:89:51:ae:b3:27:af:75:
88:1d:3b:77:34:5e:74:ca:bc:6c:be:e4:aa:fc:0d:
68:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:58:D5:3D:B1:55:E2:18:4F:69:3C:DF:C1:AB:F3:0F:1C:C3:B8:EF
X509v3 Authority Key Identifier:
keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:88:e5:57:a0:ae:68:0c:fa:e9:88:2a:00:60:83:cb:65:cb:
5e:45:9c:e6:9f:8a:9c:de:b0:b0:94:df:e8:9b:03:cd:0d:f5:
b3:42:f1:8f:f0:16:45:0a:91:e6:35:59:ca:e2:cf:b3:eb:ab:
ec:41:7f:de:31:08:04:b1:8f:1d:56:5b:17:26:e5:bd:9e:3f:
c3:a3:ae:e6:1a:9d:d5:ee:5e:70:a1:87:0e:30:5b:79:3a:4b:
7f:6b:f1:fd:92:b9:a1:ac:14:ce:67:04:cf:89:2e:6e:12:b6:
fa:d7:92:8a:be:d2:a2:8e:21:b8:f8:13:83:85:d0:30:08:ae:
4a:ac:97:cd:49:bf:8d:3e:27:ab:7d:0a:92:d4:83:0f:7b:6a:
4c:3f:9f:4a:e2:00:64:ab:c4:5f:ab:3e:27:80:f3:37:e6:f8:
10:f5:ed:be:be:65:dd:4b:92:b3:13:2a:e3:ab:93:f5:c8:df:
e8:d6:48:14:75:b2:08:98:0d:63:9c:79:45:03:64:4b:b8:7d:
df:2e:a2:55:38:eb:f2:e1:0a:7e:bd:27:fb:ae:3e:5b:96:b2:
94:cd:77:03:33:fd:9b:ec:37:a7:b8:b8:37:f9:e5:54:a2:0f:
5f:5e:6f:69:2c:73:5b:d1:04:02:28:b7:74:6d:31:2a:16:da:
7b:2c:13:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 18:44:47 2025 by rpki-client