Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
File: mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft (raw, json)
Hash identifier: h0q6fz1CGMCLncahQSNphxWjnvTPcaoa9EqkXHxY8VQ=
Subject key identifier: 39:E0:61:25:48:37:1D:5B:62:C1:53:73:D3:79:02:9A:B9:A5:AF:5B
Authority key identifier: 98:21:E3:7E:AB:6E:F6:32:69:33:E5:FA:37:48:D0:7D:83:02:6D:B0
Certificate issuer: /CN=9821e37eab6ef6326933e5fa3748d07d83026db0
Certificate serial: 019752A27F3B4652A9D67340806A0FA12878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
Manifest number: 1586
Signing time: Mon 09 Jun 2025 03:01:10 +0000
Manifest this update: Mon 09 Jun 2025 03:01:10 +0000
Manifest next update: Tue 10 Jun 2025 03:01:10 +0000
Files and hashes: 1: Fb0UwpxCy0DRKLuSbZAzVNuZQGI.roa (hash: FQG+r4pQE3E1WCi2kVbQ4HOY+Sj6V8FJrKG1h8vbtwQ=)
2: mCHjfqtu9jJpM-X6N0jQfYMCbbA.crl (hash: C57lr9WyevW0dnI4rOSi/mZT5xLWEZUHbRuUZwK85Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:7f:3b:46:52:a9:d6:73:40:80:6a:0f:a1:28:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9821e37eab6ef6326933e5fa3748d07d83026db0
Validity
Not Before: Jun 9 03:01:10 2025 GMT
Not After : Jun 10 03:01:10 2025 GMT
Subject: CN=39e0612548371d5b62c15373d379029ab9a5af5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0b:65:02:6a:8b:0f:88:99:0b:10:e9:81:43:
c6:d3:0b:08:23:36:02:84:1d:77:32:98:5a:32:f9:
5a:69:ec:61:7c:17:b5:ab:6f:5d:f8:fe:ed:27:3a:
c7:94:a6:8e:bf:04:1b:c7:aa:2a:6b:ad:f2:74:60:
1a:88:ca:3c:eb:c7:f1:a1:4a:fe:1f:b7:17:58:b5:
c6:dd:34:94:68:2c:06:0a:1e:bd:0a:7a:b4:4d:f9:
a4:c5:b1:03:4c:dd:dd:9f:61:d6:f9:a5:ac:75:b0:
b3:01:52:2f:5e:94:89:6b:20:1c:a4:d6:dd:1b:72:
63:d6:2a:39:39:4f:bd:3e:a2:dd:95:49:1c:88:0c:
fc:9c:0c:98:82:84:1f:88:ee:5a:3a:c9:c8:a0:a2:
f3:d4:29:52:d5:72:46:f1:e6:8d:d6:bc:a4:fe:d7:
40:77:9d:ef:3c:8f:04:c4:81:9c:b1:45:52:ee:76:
b4:93:d6:6a:81:36:c8:5b:85:d6:22:36:b9:19:2d:
12:41:27:ad:06:b1:73:cf:0e:46:73:dc:dd:c9:aa:
82:ff:8a:05:1a:ff:df:15:74:ad:3a:da:4d:85:3d:
27:b3:f8:2f:ce:04:99:58:29:e9:6c:fe:82:6c:10:
6a:4d:bd:e2:ee:11:c7:ce:9a:8e:89:71:fa:24:0e:
07:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E0:61:25:48:37:1D:5B:62:C1:53:73:D3:79:02:9A:B9:A5:AF:5B
X509v3 Authority Key Identifier:
keyid:98:21:E3:7E:AB:6E:F6:32:69:33:E5:FA:37:48:D0:7D:83:02:6D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:56:49:0a:c9:86:62:c9:3d:73:b0:03:6c:91:d3:a4:9d:f4:
0a:e6:f5:51:c0:09:eb:bb:1b:b1:d7:5c:32:49:e9:70:25:ab:
57:ba:2e:81:b9:0e:c4:1a:7e:e3:cd:89:d6:06:b6:c9:50:25:
ad:64:d5:62:9e:a8:48:83:e8:59:fc:1d:45:0a:af:1e:0f:0f:
0c:0b:4b:55:3b:2f:40:ca:a7:eb:ad:5d:ca:19:88:d5:19:1e:
49:c6:2a:0f:bf:5a:05:d9:64:2b:3e:12:0c:11:df:6a:20:78:
e5:3c:33:67:f0:b6:14:4f:0c:07:94:d1:de:47:f6:fb:15:50:
87:0b:c9:d4:64:e6:ac:66:2d:b2:d1:ba:a4:80:18:73:f8:c1:
50:c0:4c:55:5f:eb:94:cf:fb:2a:e9:45:e6:95:2c:a1:ec:5f:
8e:a8:a9:db:01:da:31:19:6f:55:31:e8:4a:2c:97:62:f6:4a:
3f:70:d3:15:ec:12:f3:82:8c:83:a9:2a:3b:cf:f3:95:54:c3:
83:05:02:8f:71:c4:bb:53:d1:ee:b7:53:8b:52:01:b8:d4:66:
a8:dd:e5:89:b8:3e:1c:8c:73:35:2e:4f:3a:4d:ea:06:fb:ca:
ba:32:f7:af:1b:f0:25:cb:24:97:a7:a2:85:81:ab:dd:a1:00:
38:5f:fe:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:57:59 2025 by rpki-client