Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
File: mJHESIaZ5tAk45zE1h7uq9OAEPo.mft (raw, json)
Hash identifier: MXg6baB4+PVKah+E3oYLN/ngjoDA+lxU3E5EXJ6kcoU=
Subject key identifier: 55:89:37:8F:08:44:D9:27:FA:D5:5B:AC:04:52:F1:DC:3A:54:ED:FE
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Certificate issuer: /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial: 019765F1E7A581FB56E47157EB25ABC0A2AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
Manifest number: 158F
Signing time: Thu 12 Jun 2025 21:00:41 +0000
Manifest this update: Thu 12 Jun 2025 21:00:41 +0000
Manifest next update: Fri 13 Jun 2025 21:00:41 +0000
Files and hashes: 1: 6QGkFK1SSLb8KrZSIt0KD4m_HTc.roa (hash: ICsAscU9gZxGHPDGe9P6Wa+cu9m9mX5jZ9qQYiJqk50=)
2: 9uUBmS-3S99xpluVPLmV1HsKam0.roa (hash: 8jxAhg8Odj2edlbiGdhpon+x7NalI3jCDbG8HGFfDDY=)
3: D4Or1IBlwc5hq86vIRWEwgXka1Y.roa (hash: r51O6/7Rhapt5pTnQgZxk/cJE7reXaPsMtgnkXNLEVc=)
4: PjDGJnV8bA-YxtE9UzyGXDTtzoM.roa (hash: 86bz/n2g96Qge58Du1MfgRD/8BFndLvyDPrpqOadpBA=)
5: QHrBIBuD-dIq2_2Kb_iV4X3Tvr8.roa (hash: BqAzrOrplAEdRsolpRbFSr5bt0QDC4A+AWz6QKat1JE=)
6: QV8F5f3ACVvEZ-E_uBXaPecA7WQ.roa (hash: GrjilDWZQ5tfLM5SfOrXr2GKb7a1lIF6Yw9vJO3l+Uw=)
7: bsQ79sopvmytFgIfVjKeVkU1gag.roa (hash: QxyAvAZB9QJoIOi8Wnqy68Z4vmJR/0QuMU+vWQKlGE4=)
8: mJHESIaZ5tAk45zE1h7uq9OAEPo.crl (hash: +ENKecH/eeVak120t2TeABvPJ7YIBzBuamPSHMrio4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:f1:e7:a5:81:fb:56:e4:71:57:eb:25:ab:c0:a2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Validity
Not Before: Jun 12 21:00:41 2025 GMT
Not After : Jun 13 21:00:41 2025 GMT
Subject: CN=5589378f0844d927fad55bac0452f1dc3a54edfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:10:31:48:e0:bb:4a:60:ec:7e:9d:17:88:64:
b4:c4:29:3e:e1:3c:62:14:74:cc:1d:19:43:b4:1f:
88:58:41:1e:3b:75:cf:f6:5b:f3:21:ec:d9:13:c0:
2e:ae:c4:82:93:48:27:46:99:6b:fb:f6:78:fd:a4:
16:e2:74:f4:e2:ad:32:6f:1f:ba:85:e0:84:26:96:
c4:5a:f6:58:3a:0a:90:58:67:60:ab:ac:8d:86:08:
7b:80:b7:c0:b5:a1:84:40:30:ca:21:72:5c:95:63:
e6:99:27:0a:2c:46:08:bb:df:cb:10:9d:fd:e9:dc:
ef:d6:77:7f:42:3e:56:ed:5f:67:89:cf:49:eb:de:
5f:db:bd:2f:ad:8a:86:18:ad:49:15:ce:95:2f:a4:
be:c7:0b:45:38:82:44:cd:99:ef:81:50:14:dc:d2:
35:2f:18:7c:8b:e5:12:af:e6:c3:25:4f:87:26:8e:
22:8b:14:9f:10:f9:21:e2:35:a9:f2:43:41:eb:ec:
1c:96:8c:94:49:72:07:8f:72:43:a8:81:35:2e:eb:
7a:a4:21:e6:f6:c3:88:be:19:26:1a:0d:e8:6d:9e:
85:d5:9c:2a:72:37:e3:73:c8:95:d8:58:a1:ae:6c:
1a:e1:5d:5f:96:6e:61:41:09:a3:75:41:8a:f4:66:
01:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:89:37:8F:08:44:D9:27:FA:D5:5B:AC:04:52:F1:DC:3A:54:ED:FE
X509v3 Authority Key Identifier:
keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:98:38:ea:2f:0c:fc:cf:59:27:3a:38:02:01:96:d4:38:21:
f3:46:7f:45:bf:d3:f6:aa:68:fe:9d:f0:f5:3a:ed:b4:68:d9:
44:ae:40:f0:1e:ce:77:5e:57:ef:89:d7:0e:b1:ef:23:05:45:
65:9a:fb:8f:31:04:6a:84:41:97:53:a8:08:57:03:57:ab:47:
93:59:3e:a1:8a:92:c3:66:4f:e7:a2:df:f8:7f:c1:e1:2e:99:
1f:d2:37:ec:af:f3:59:8b:64:f3:a1:5d:60:cd:98:b6:51:5d:
a3:13:84:30:d4:f0:da:8f:1b:f2:3f:7a:8f:af:d2:1b:8f:41:
f8:5e:cf:62:8e:7c:55:9b:0f:31:a2:ee:3e:f4:a3:39:1e:a7:
5b:55:4f:09:2e:5e:fe:2d:d9:3e:e8:4f:56:04:6d:b0:d6:40:
5a:e0:e5:2d:13:29:60:2c:f7:11:2f:af:23:1e:43:a9:f9:75:
be:e7:45:b2:85:58:c7:71:93:d9:13:04:82:54:6f:4e:46:4e:
11:0d:78:05:85:91:13:7d:32:e3:bc:5c:ee:65:95:82:46:46:
3c:33:ee:2f:d8:e4:d2:cb:55:23:ef:ec:95:67:ee:9d:b4:ba:
0e:a3:df:29:cf:95:53:c0:b4:e0:fe:a9:93:6a:a3:f5:ca:77:
9d:a7:22:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 07:08:49 2025 by rpki-client