Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
File: rMGajH8XQRRJx9SP-TCNJIMulSs.mft (raw, json)
Hash identifier: RPAsB5aT1pAhWl8NtFvQuKwnShxvvkgWErqvtWqLt8c=
Subject key identifier: E1:46:38:C2:7C:2C:75:AE:47:73:9A:4D:01:B3:80:DF:0F:11:3D:5F
Authority key identifier: AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
Certificate issuer: /CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Certificate serial: 01974A43C9F8FF3A2C64B4B78266A64F3023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 12:00:45 +0000
Manifest this update: Sat 07 Jun 2025 12:00:45 +0000
Manifest next update: Sun 08 Jun 2025 12:00:45 +0000
Files and hashes: 1: Qwfm7iyTFcUFA4cP-BGJUr6nVGo.roa (hash: cGT3x4JJQpP+f+7JmlJEaoJ5r1uUvYJMBAOOSckaWRE=)
2: rMGajH8XQRRJx9SP-TCNJIMulSs.crl (hash: RfFaVKzpKTI8an6DCy0DaudR1nK+DjVJgBritLx39Ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:c9:f8:ff:3a:2c:64:b4:b7:82:66:a6:4f:30:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Validity
Not Before: Jun 7 12:00:45 2025 GMT
Not After : Jun 8 12:00:45 2025 GMT
Subject: CN=e14638c27c2c75ae47739a4d01b380df0f113d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:ea:9f:43:e4:39:35:0b:13:43:43:8e:d4:
6c:3e:19:d5:8e:fa:98:67:80:ee:25:49:55:fe:93:
a4:e8:9b:81:25:99:eb:41:95:6e:02:94:d6:e9:48:
9f:d4:15:88:4f:22:cb:68:70:0c:86:99:78:b3:90:
4a:28:38:f8:d5:70:b9:6c:41:9c:9f:d3:f4:83:b4:
98:1b:9f:76:98:86:c6:b1:52:0e:b8:09:33:ad:8e:
5b:ec:29:7a:d3:1f:b6:2a:f2:59:64:db:32:79:1f:
49:dd:41:93:af:6b:f9:d5:c1:e0:ce:3a:b3:19:de:
b6:46:7b:eb:35:37:2d:1e:1f:7e:44:c7:e5:75:9e:
eb:d4:8c:cb:12:cc:51:59:35:3c:91:50:58:2a:b2:
5c:e9:e9:bc:7a:9e:c5:75:fb:84:29:05:db:b6:ed:
b6:0f:9c:51:de:e1:c2:ba:93:31:d4:79:c8:2c:87:
e8:01:a3:0a:96:2b:99:47:e5:b1:79:b0:4a:52:2b:
58:cb:70:a7:e4:57:d3:a9:bd:9e:6f:38:57:25:b4:
08:5a:d5:cb:ae:b8:15:8d:fa:6f:ce:b1:9f:7a:6b:
1a:d9:7a:01:4d:5e:c5:b5:08:4b:0a:6f:41:8e:5e:
b7:fe:69:20:36:a1:9d:d9:a9:f6:cf:76:6f:63:c2:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:46:38:C2:7C:2C:75:AE:47:73:9A:4D:01:B3:80:DF:0F:11:3D:5F
X509v3 Authority Key Identifier:
keyid:AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:6a:43:ea:71:75:c8:05:10:cc:6f:86:4d:65:be:41:b1:56:
53:fa:a5:cf:ed:ae:df:36:14:36:ed:f9:40:d1:2e:29:68:89:
57:63:d3:fb:f4:2f:50:42:56:72:27:cb:ce:4f:71:06:3b:ef:
17:80:8d:46:a5:d5:87:71:74:fc:89:e2:cf:64:92:7a:55:db:
8d:03:c1:d0:2d:43:a9:f8:58:c9:5c:5c:1e:db:f9:9f:4d:2a:
b3:f8:a3:73:ce:9e:5d:82:aa:d3:ec:ff:5a:11:77:d1:75:6c:
7e:85:56:21:18:34:53:ee:8a:5d:3e:40:da:8c:8d:43:7e:2a:
ad:8f:f7:b6:b2:7c:29:1a:6c:50:e8:15:c4:99:a3:22:3a:78:
51:7f:cb:cd:5c:89:8a:24:06:0a:09:77:99:8a:ce:86:b7:a8:
23:2d:f3:fd:27:79:22:78:13:dd:e1:f0:c0:33:5b:09:92:74:
34:d1:77:72:16:dc:40:d9:58:4b:fd:12:8c:32:bd:e6:ea:4e:
72:f8:be:ed:5e:29:a3:94:8a:f4:46:b9:f8:18:bf:c9:2e:52:
23:6a:a9:23:b5:bd:3b:34:05:8f:15:64:64:71:da:4e:1c:02:
cf:e9:eb:55:b8:f4:cb:00:48:e7:d5:78:2d:17:32:42:12:63:
43:ec:f1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:14:14 2025 by rpki-client