Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
File: mJHESIaZ5tAk45zE1h7uq9OAEPo.mft (raw, json)
Hash identifier: fjL+MwWxZvAH8DUovUuPV2qJfjGdlnZ6Lpq9luc5WGA=
Subject key identifier: D2:EB:FD:C1:CC:46:33:66:64:B9:60:72:3A:E4:A0:DD:54:C5:12:70
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Certificate issuer: /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial: 019769CF1F78660A234AF126F5B1676E2570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
Manifest number: 1591
Signing time: Fri 13 Jun 2025 15:01:11 +0000
Manifest this update: Fri 13 Jun 2025 15:01:11 +0000
Manifest next update: Sat 14 Jun 2025 15:01:11 +0000
Files and hashes: 1: 6QGkFK1SSLb8KrZSIt0KD4m_HTc.roa (hash: ICsAscU9gZxGHPDGe9P6Wa+cu9m9mX5jZ9qQYiJqk50=)
2: 9uUBmS-3S99xpluVPLmV1HsKam0.roa (hash: 8jxAhg8Odj2edlbiGdhpon+x7NalI3jCDbG8HGFfDDY=)
3: D4Or1IBlwc5hq86vIRWEwgXka1Y.roa (hash: r51O6/7Rhapt5pTnQgZxk/cJE7reXaPsMtgnkXNLEVc=)
4: PjDGJnV8bA-YxtE9UzyGXDTtzoM.roa (hash: 86bz/n2g96Qge58Du1MfgRD/8BFndLvyDPrpqOadpBA=)
5: QHrBIBuD-dIq2_2Kb_iV4X3Tvr8.roa (hash: BqAzrOrplAEdRsolpRbFSr5bt0QDC4A+AWz6QKat1JE=)
6: QV8F5f3ACVvEZ-E_uBXaPecA7WQ.roa (hash: GrjilDWZQ5tfLM5SfOrXr2GKb7a1lIF6Yw9vJO3l+Uw=)
7: bsQ79sopvmytFgIfVjKeVkU1gag.roa (hash: QxyAvAZB9QJoIOi8Wnqy68Z4vmJR/0QuMU+vWQKlGE4=)
8: mJHESIaZ5tAk45zE1h7uq9OAEPo.crl (hash: 6nBYJxVy4yquWMl672xxxVvFV8qmTtEURWtBPzOlF+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:1f:78:66:0a:23:4a:f1:26:f5:b1:67:6e:25:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Validity
Not Before: Jun 13 15:01:11 2025 GMT
Not After : Jun 14 15:01:11 2025 GMT
Subject: CN=d2ebfdc1cc46336664b960723ae4a0dd54c51270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:cd:4c:9b:6e:46:50:68:f7:e7:de:0e:66:
98:7b:0a:73:6f:c7:4d:f2:53:a0:93:55:53:f5:2c:
3d:31:17:9e:cd:f9:97:e0:92:23:2c:5c:10:e4:32:
ec:61:55:ab:77:af:cd:8c:a0:ec:ce:bc:53:61:63:
98:72:94:e1:db:2a:bb:31:4a:75:f8:94:b3:fd:54:
79:20:b0:6b:18:95:55:f9:d1:41:8d:7f:ba:81:8b:
e8:6a:83:14:70:f8:db:6d:04:a7:25:9c:73:2a:05:
d7:8e:85:e6:d2:4e:ef:79:9b:68:c8:0b:a8:7a:2d:
5a:36:ef:7b:17:ca:4f:d4:7c:b7:6d:37:85:72:b4:
80:25:53:77:06:9a:02:2a:7b:f9:8e:0c:22:0c:bd:
c9:da:1a:aa:bf:b7:d3:0b:c7:1c:ed:fe:5a:28:9d:
b2:b4:31:e7:c2:93:35:54:d0:f7:cf:48:90:81:4e:
ce:9f:9c:43:20:74:96:58:c9:85:99:7c:3f:60:a4:
5f:78:8a:7a:63:a7:b4:cf:31:68:53:8c:f3:46:22:
b9:21:a4:1d:0b:c6:04:43:31:bc:4f:ef:e7:9b:fb:
86:ab:8f:b8:c3:92:da:a6:11:da:ed:33:3a:4d:c1:
6b:09:5d:61:37:65:3c:23:87:0b:76:d9:fd:bc:68:
bf:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EB:FD:C1:CC:46:33:66:64:B9:60:72:3A:E4:A0:DD:54:C5:12:70
X509v3 Authority Key Identifier:
keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c7:f3:10:ef:9d:30:35:10:49:a6:b9:c8:17:ff:2b:cb:32:
55:f2:f1:02:e9:bb:c7:a5:f6:45:1c:58:aa:87:b9:6e:d1:fc:
a9:0f:c0:9c:4d:f4:eb:d0:4f:c5:13:c7:2c:2a:4d:f2:77:63:
78:ce:c4:af:55:66:d7:ed:81:8b:57:fc:17:3b:df:bc:61:64:
ee:71:7e:21:dd:97:c2:f9:04:35:cb:b5:50:14:49:8a:50:38:
3d:a7:25:ed:e1:4e:f1:68:2b:1c:37:b3:00:68:4c:39:52:9d:
02:40:ee:5a:82:7b:e2:bb:77:3e:8f:b6:52:0a:1d:82:72:ea:
73:bd:e6:1e:18:a5:80:9b:9c:cd:5e:df:eb:f8:8b:7f:c6:bb:
cf:67:13:c5:a1:59:22:f9:41:9a:35:8e:53:86:5d:ee:2d:15:
aa:87:e8:2c:b4:00:0e:f1:64:5d:f4:35:4e:5e:8f:98:1d:48:
7c:48:56:99:48:21:1f:d5:06:25:5e:1a:1f:ea:56:11:ba:21:
8f:2d:64:0b:36:1d:67:cd:ef:8c:2c:56:42:6e:23:ae:7b:c8:
e1:1d:77:b1:19:85:9e:f9:a0:93:df:8c:31:80:b4:98:87:a8:
db:1b:cc:5c:cf:f4:fc:ed:2a:63:da:d6:b2:e6:7b:7b:20:d3:
51:19:cb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 22:56:23 2025 by rpki-client