Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
File: mJAcfP_Rmk_qePebEASZkmbcwiQ.mft (raw, json)
Hash identifier: QZSzo4dg/oir84IzGZ5v1H8i9StHZxaanw/g/2pdM8g=
Subject key identifier: 48:B1:AF:58:FA:7D:19:47:39:EB:FF:CD:35:73:9B:7C:BC:0B:5F:96
Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Certificate issuer: /CN=98901c7cffd19a4fea78f79b1004999266dcc224
Certificate serial: 01993612A822B9E19132347FD7F35FC714C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
Manifest number: 167E
Signing time: Thu 11 Sep 2025 00:00:16 +0000
Manifest this update: Thu 11 Sep 2025 00:00:16 +0000
Manifest next update: Fri 12 Sep 2025 00:00:16 +0000
Files and hashes: 1: HGWBnpYX08vMWUwwLOMJq_k78S0.roa (hash: yttjunWIbX6dwAiOo7g6fUQGb+c1a+Xf5qmbeU/dnp4=)
2: XmFs6QZFMPRdJzopVIFXmV--Vrs.roa (hash: btfm0oGigPJzbc1bJybbkI9gWRtDv9TpTBsAYkeB30s=)
3: mJAcfP_Rmk_qePebEASZkmbcwiQ.crl (hash: EDT3xNPNkwvXpKi17c2YFhSFehbCq4dzQ0wIhLwmUj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:12:a8:22:b9:e1:91:32:34:7f:d7:f3:5f:c7:14:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224
Validity
Not Before: Sep 11 00:00:16 2025 GMT
Not After : Sep 12 00:00:16 2025 GMT
Subject: CN=48b1af58fa7d194739ebffcd35739b7cbc0b5f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d0:0e:23:5c:2e:29:f9:b2:f2:64:e0:00:84:
3a:11:d0:73:d6:d8:3c:00:77:28:3d:b9:9a:e1:00:
fe:eb:71:0a:2e:8a:01:da:1d:80:22:84:a7:ec:99:
50:4c:7c:33:45:15:aa:73:d0:1f:9e:7e:be:70:bf:
7a:70:7c:b8:fc:70:58:2b:15:87:2b:57:15:1c:f7:
4e:68:40:a1:16:e2:69:27:18:5b:82:e0:28:14:bb:
30:3f:9d:3e:90:6d:b9:7f:56:de:25:9f:d5:af:5f:
1c:77:57:aa:0f:a7:4e:cd:42:85:ae:10:1f:cf:1c:
8d:19:e8:92:d8:b5:97:0b:6a:0e:0b:b8:75:6a:d9:
60:80:6a:7f:17:3f:8e:ec:c4:a3:c8:c4:8b:f6:91:
ab:08:09:37:de:65:80:93:46:1f:2f:ae:34:5f:49:
3e:3d:83:c0:9e:1c:e7:a1:40:9e:93:d4:bb:b9:c3:
9f:7b:f9:f7:41:de:4c:f3:1f:4c:14:08:4c:5e:34:
af:a3:34:f9:23:2a:23:eb:fa:62:4f:50:4f:70:28:
93:dc:26:6a:31:27:e1:73:4e:02:fa:1f:ff:ec:7f:
79:98:49:7a:22:1c:92:6b:d7:ec:21:27:3c:91:27:
01:b5:64:9f:44:09:54:e4:18:23:5b:6f:70:2e:fe:
0d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B1:AF:58:FA:7D:19:47:39:EB:FF:CD:35:73:9B:7C:BC:0B:5F:96
X509v3 Authority Key Identifier:
keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:bc:8d:a9:7c:f8:3b:08:ae:a7:c5:d5:94:71:d4:e5:f8:5a:
ab:bf:7c:e8:fc:64:c5:84:f1:99:8f:a6:e0:c7:d9:db:a9:20:
9b:dd:49:b3:f2:25:05:d8:3a:b1:11:15:e9:a6:0c:e2:2f:06:
61:19:19:4a:22:ae:97:ce:09:d0:08:e0:f0:da:8d:9b:8a:ed:
32:2b:a0:08:7b:2f:d9:f5:f8:31:7a:0f:65:c7:90:5b:92:e7:
78:f3:d4:e9:5c:b0:e8:cf:39:f9:9c:3e:2f:27:68:06:1a:c9:
b8:ed:44:52:45:af:6f:b5:71:13:da:78:b4:3d:0a:b7:b9:37:
35:60:67:ed:88:b9:c1:ab:94:6d:87:f8:ba:77:53:8d:c1:03:
bd:01:b0:70:7a:44:bb:2d:b2:6c:83:ce:f7:9e:25:13:4e:3b:
b7:1e:d7:3e:28:bf:06:70:db:1e:4f:d5:a8:34:9c:45:5e:82:
ec:5d:d1:86:98:2b:d2:24:30:40:28:b0:2f:dd:2a:e5:fd:0f:
69:e9:65:0f:bf:25:cc:83:14:7c:78:d6:db:2b:7b:66:eb:4e:
60:14:f3:34:41:de:15:20:30:1d:50:6f:58:df:b9:9d:1e:b9:
c9:db:20:e4:0c:9b:b5:b5:0e:2e:c5:1f:9d:a6:2a:f5:06:ad:
d8:b7:5d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:37:50 2025 by rpki-client