Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
File: mJHESIaZ5tAk45zE1h7uq9OAEPo.mft (raw, json)
Hash identifier: OK/Oq2Zx9ON9GqoSX+L7jJpyku8fVuy56gdXw6kzXJI=
Subject key identifier: B8:3A:64:D8:6E:CC:76:1B:FA:6C:54:8F:E2:F7:56:69:7D:06:BA:B4
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Certificate issuer: /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial: 019767E0B45DEB7D6B6C9F9013D1C484F824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
Manifest number: 1590
Signing time: Fri 13 Jun 2025 06:01:08 +0000
Manifest this update: Fri 13 Jun 2025 06:01:08 +0000
Manifest next update: Sat 14 Jun 2025 06:01:08 +0000
Files and hashes: 1: 6QGkFK1SSLb8KrZSIt0KD4m_HTc.roa (hash: ICsAscU9gZxGHPDGe9P6Wa+cu9m9mX5jZ9qQYiJqk50=)
2: 9uUBmS-3S99xpluVPLmV1HsKam0.roa (hash: 8jxAhg8Odj2edlbiGdhpon+x7NalI3jCDbG8HGFfDDY=)
3: D4Or1IBlwc5hq86vIRWEwgXka1Y.roa (hash: r51O6/7Rhapt5pTnQgZxk/cJE7reXaPsMtgnkXNLEVc=)
4: PjDGJnV8bA-YxtE9UzyGXDTtzoM.roa (hash: 86bz/n2g96Qge58Du1MfgRD/8BFndLvyDPrpqOadpBA=)
5: QHrBIBuD-dIq2_2Kb_iV4X3Tvr8.roa (hash: BqAzrOrplAEdRsolpRbFSr5bt0QDC4A+AWz6QKat1JE=)
6: QV8F5f3ACVvEZ-E_uBXaPecA7WQ.roa (hash: GrjilDWZQ5tfLM5SfOrXr2GKb7a1lIF6Yw9vJO3l+Uw=)
7: bsQ79sopvmytFgIfVjKeVkU1gag.roa (hash: QxyAvAZB9QJoIOi8Wnqy68Z4vmJR/0QuMU+vWQKlGE4=)
8: mJHESIaZ5tAk45zE1h7uq9OAEPo.crl (hash: am/vgglzMDzu1Fpkvljp8mw0N6q+NgMHO8sIyO2gHgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:e0:b4:5d:eb:7d:6b:6c:9f:90:13:d1:c4:84:f8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Validity
Not Before: Jun 13 06:01:08 2025 GMT
Not After : Jun 14 06:01:08 2025 GMT
Subject: CN=b83a64d86ecc761bfa6c548fe2f756697d06bab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3a:4f:78:b0:5c:aa:4f:c2:a8:9a:b4:76:18:
fa:ff:3f:eb:b1:df:71:7b:21:cc:19:93:96:c1:ed:
f5:24:48:ed:2f:41:d3:13:52:90:9c:b4:d0:2a:ba:
5d:ed:66:c7:6a:a1:c9:29:86:e9:da:0e:70:36:94:
90:41:ff:50:44:8e:28:29:6a:6e:ba:8a:ec:18:bb:
bf:95:96:92:50:3a:3b:86:77:dc:63:e5:38:9c:ae:
c2:b2:6a:09:05:c1:e6:db:fa:e7:ba:17:68:d4:06:
c9:f6:d5:ab:c8:ac:76:ce:f9:d8:1d:53:ad:8c:35:
80:9a:3f:7a:06:ee:80:ca:df:d1:0f:9f:2e:2d:73:
71:9f:f3:e5:70:da:71:58:b2:72:a4:69:9d:2f:ba:
30:cc:3b:c1:9a:c9:3d:1d:1c:3d:78:46:6f:54:ad:
54:81:7b:0d:cd:96:4b:a2:bf:35:66:ea:56:d2:e5:
27:ba:d8:f9:e6:70:b9:1a:30:51:32:44:c8:aa:b9:
da:6f:0f:f3:93:92:0a:44:07:7d:24:6e:ee:da:fd:
0d:44:08:b5:16:32:a5:1c:64:16:7b:40:1b:1a:54:
bf:a1:65:0b:8c:85:9a:5a:08:0a:4d:a6:ea:0e:79:
a0:45:a2:a6:c5:18:d3:0b:e6:94:dd:1a:94:a7:14:
00:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3A:64:D8:6E:CC:76:1B:FA:6C:54:8F:E2:F7:56:69:7D:06:BA:B4
X509v3 Authority Key Identifier:
keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:89:0d:46:26:67:71:0c:4c:8a:2c:41:5d:4d:ae:a2:5a:45:
55:a0:c5:6e:06:92:11:2c:00:73:f4:66:ab:f8:df:55:b8:41:
71:f0:5a:2d:74:d9:78:55:78:76:de:2d:39:45:56:12:f0:2b:
b8:41:31:17:17:db:6f:58:d9:54:65:86:ad:11:20:02:67:65:
a4:68:18:39:49:fd:b8:da:3c:2e:80:82:3e:69:eb:53:d5:e8:
cf:dd:15:a6:d9:2d:b4:07:60:9a:8a:29:cf:ce:38:73:bb:7b:
f0:c4:d8:41:6b:d5:03:ca:60:2c:47:04:e7:37:a1:04:c3:02:
e0:5e:e9:a9:5f:ea:0d:d2:da:fa:36:2b:56:22:a8:a4:35:81:
a6:2f:13:d1:d6:26:ec:0c:d1:f9:01:7f:c8:19:96:68:96:38:
8a:93:44:ad:fd:eb:84:8f:8f:40:e0:47:d4:d1:88:9a:05:0c:
25:7e:80:ca:37:70:fa:ed:79:db:f7:6d:fb:0e:d7:d1:77:c2:
43:9a:00:5c:d7:a2:b9:5d:b9:c9:16:03:80:cd:c0:67:ab:20:
d7:01:7f:03:65:18:ab:39:b4:d5:1e:cb:89:05:72:28:b9:64:
23:f2:36:1c:ba:5b:1f:ae:f0:9f:9f:6e:be:49:54:45:ef:61:
51:d5:69:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 16:44:20 2025 by rpki-client