Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
File: mJAcfP_Rmk_qePebEASZkmbcwiQ.mft (raw, json)
Hash identifier: 26fIkby/ewyqk2XZ0vQVS8ciuM62dNzWsuv3O5jKOZY=
Subject key identifier: B9:82:E4:3D:23:F3:A0:63:8F:EC:CF:FA:50:19:FE:04:3B:B2:FD:02
Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Certificate issuer: /CN=98901c7cffd19a4fea78f79b1004999266dcc224
Certificate serial: 0197499F5C782AB1CB5545C4D2AC802A57FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 09:01:10 +0000
Manifest this update: Sat 07 Jun 2025 09:01:10 +0000
Manifest next update: Sun 08 Jun 2025 09:01:10 +0000
Files and hashes: 1: HGWBnpYX08vMWUwwLOMJq_k78S0.roa (hash: yttjunWIbX6dwAiOo7g6fUQGb+c1a+Xf5qmbeU/dnp4=)
2: XmFs6QZFMPRdJzopVIFXmV--Vrs.roa (hash: btfm0oGigPJzbc1bJybbkI9gWRtDv9TpTBsAYkeB30s=)
3: mJAcfP_Rmk_qePebEASZkmbcwiQ.crl (hash: RQAL/CkTdnos64wix/7TlTXwCCKMSd0pdV6XiOCp3Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:5c:78:2a:b1:cb:55:45:c4:d2:ac:80:2a:57:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224
Validity
Not Before: Jun 7 09:01:10 2025 GMT
Not After : Jun 8 09:01:10 2025 GMT
Subject: CN=b982e43d23f3a0638feccffa5019fe043bb2fd02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0a:6d:14:9e:32:85:d4:ac:c7:96:5c:d5:29:
da:43:c1:e5:d0:34:42:0c:5e:d1:ef:d4:31:c4:0a:
70:aa:77:12:70:eb:3a:c6:c5:2e:a5:da:83:49:01:
dd:ef:1c:71:49:b8:7f:78:63:65:a1:74:2c:8b:a4:
93:f8:31:a5:5c:16:da:e2:6c:c1:9f:98:05:78:24:
35:30:3f:a0:f0:c1:23:bd:b4:d6:66:01:ae:e5:e6:
1f:83:a2:de:96:12:2f:dd:ff:a7:c7:3b:df:f3:e4:
e7:41:fe:b8:37:69:cc:53:93:27:5f:ca:c3:6a:23:
58:fb:f8:61:fb:25:ac:d4:1b:c3:a9:c2:33:19:a8:
0c:2a:5c:d3:2a:a1:fe:b6:fa:9a:50:21:ed:6f:64:
79:a0:78:dc:b5:be:99:85:53:93:76:6b:1f:13:54:
35:aa:9e:81:69:2a:ee:48:bf:bd:63:9a:06:14:7c:
f4:7d:17:db:d3:c6:ae:e1:5f:33:9c:a8:e0:7c:97:
73:3b:e1:9d:87:83:93:f9:72:93:12:63:93:86:db:
99:ee:c9:10:a4:a3:3b:c4:45:8f:28:1f:fc:e2:2f:
07:d4:c0:24:01:08:2a:dd:2a:e5:a3:82:7e:ed:c1:
1d:69:b8:f2:7b:a5:b9:01:5c:e0:1e:94:71:9d:3f:
ba:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:82:E4:3D:23:F3:A0:63:8F:EC:CF:FA:50:19:FE:04:3B:B2:FD:02
X509v3 Authority Key Identifier:
keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e0:1a:1c:d5:20:ce:63:cb:a8:fc:07:65:5e:62:c0:1f:2e:
27:9a:15:4f:5d:32:02:91:95:85:ad:a3:cf:9d:b5:a5:44:e6:
4a:d7:f1:ca:14:3b:5b:6a:04:d6:22:4d:e2:02:2f:b4:07:8c:
9a:00:7e:b6:1c:5d:53:e8:53:98:4c:85:60:26:9d:43:14:49:
ff:bd:21:1c:05:df:1e:12:41:2d:c0:f0:62:c2:be:31:6c:2b:
1d:08:be:27:05:0c:a7:c7:05:19:5d:59:ab:39:e5:de:fe:93:
eb:cf:83:69:26:a2:d5:dd:b5:38:93:63:24:03:17:f1:8a:fb:
71:17:9c:cc:cf:2b:4d:ad:a8:70:ff:80:b6:03:f5:d2:30:72:
76:43:90:eb:8a:01:90:0d:87:ea:a3:c8:3b:1c:c2:31:e1:1e:
c2:24:32:70:3f:4c:da:c6:26:3d:51:2e:d5:9c:df:c1:db:e8:
52:9f:2e:34:05:38:32:25:4e:58:4b:87:15:38:02:2f:31:76:
25:f4:de:2f:60:85:4a:8c:8d:ca:dc:2b:98:c0:66:1f:00:72:
cc:f5:d3:db:65:59:f6:8d:8c:08:ee:a2:17:a2:e1:3e:e7:f6:
05:aa:93:82:4e:be:11:ac:ab:ea:02:26:6e:50:9b:5e:28:52:
37:cd:11:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:30:41 2025 by rpki-client