Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
File: mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft (raw, json)
Hash identifier: LWjAALo/FBrJgIIV5dCPh6s0oZRKBQ7sZUYwPlkz/yU=
Subject key identifier: 8A:AF:CE:E9:82:E1:1E:99:93:90:55:FC:F0:55:FA:56:77:3B:F9:9D
Authority key identifier: 98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
Certificate issuer: /CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Certificate serial: 0198D515D19C7A09C04DC72708C81357F238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
Manifest number: 0741
Signing time: Sat 23 Aug 2025 04:00:33 +0000
Manifest this update: Sat 23 Aug 2025 04:00:33 +0000
Manifest next update: Sun 24 Aug 2025 04:00:33 +0000
Files and hashes: 1: J5SKCaGOc1EmK2ciMl5AsL0Yt6k.roa (hash: G1OhQbiptYNimu4j0r+tzGfxHpXqGX5AtlwZt3l6QBs=)
2: TMwrQ9VEC3dWwdOdSzhchqd9LKU.roa (hash: ddLT4suSyGT63FePBoB4o2Q5fl/qPXcvtKn+r4yKT0g=)
3: mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl (hash: MEKaFYjbLECDwDzCFl3AtiKDneYqAARuYFM3I1aYxhQ=)
4: qjXXTFXVdVVWr7-MSHZr7AQqbSo.roa (hash: Sp8Mn3EU/O89RIW7deIN1lZCT2/D8tgJU4hIx0BHNRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:d1:9c:7a:09:c0:4d:c7:27:08:c8:13:57:f2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Validity
Not Before: Aug 23 04:00:33 2025 GMT
Not After : Aug 24 04:00:33 2025 GMT
Subject: CN=8aafcee982e11e99939055fcf055fa56773bf99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:08:87:34:0a:cc:01:6a:e5:6d:67:37:53:22:
82:54:9e:19:f0:1e:58:04:a6:14:1f:7b:c3:21:eb:
88:16:72:d0:fa:18:09:9e:29:36:54:41:ea:1a:e6:
24:cc:6e:f5:b3:aa:f2:9d:20:85:11:f8:91:7b:ae:
08:2d:a8:3e:3f:23:a1:1a:98:f8:3f:e8:27:ce:33:
8c:fc:d8:65:05:1d:a3:45:50:4a:1c:4a:25:7e:9e:
6a:18:b4:63:05:93:4f:b4:c2:70:79:15:a4:6e:e0:
9e:c9:21:8c:d3:9e:17:d3:a1:87:e7:20:95:0f:71:
f2:34:d1:be:28:d3:fc:76:30:e7:6e:5d:8e:5f:e3:
9b:57:0a:e9:bc:a8:54:f2:6e:1f:71:e6:b9:47:fc:
fc:5a:ec:eb:41:cf:39:5b:21:bc:9e:fb:06:5d:c5:
4e:00:25:fa:66:c7:60:20:08:29:21:06:eb:c8:f7:
48:11:ce:61:84:ef:6d:eb:38:77:b9:65:5b:0f:a8:
17:dc:73:e6:4b:f0:d4:67:65:18:8f:e0:51:2a:ca:
79:64:2b:8a:28:36:66:c4:46:66:b7:13:a4:98:ea:
3f:38:8b:d0:34:40:2e:81:77:f8:d3:9a:9a:96:1f:
ad:17:86:e9:62:08:7e:d4:d2:f8:a2:69:8e:f7:af:
3f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AF:CE:E9:82:E1:1E:99:93:90:55:FC:F0:55:FA:56:77:3B:F9:9D
X509v3 Authority Key Identifier:
keyid:98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9e:7d:ba:3b:df:38:34:6a:c4:ad:9d:d8:cb:ae:ba:3e:3c:
1f:6f:f5:e8:c5:e0:dd:ab:0b:db:91:6e:45:ee:45:3e:83:ce:
c9:3d:99:25:ef:1d:9f:88:da:c8:87:ce:1a:fa:e7:92:02:9e:
b7:b4:5e:05:11:93:b4:ee:ba:8c:f8:a8:b5:f0:ff:2e:99:90:
c8:c6:97:49:9a:4c:d3:ef:30:7a:fa:08:62:39:24:9c:7f:50:
77:e8:2e:c3:6a:78:01:3a:ef:84:aa:4d:03:45:f4:d6:cc:05:
b9:e7:25:a4:f9:d1:45:60:9b:65:c7:54:ad:6a:c9:f9:f4:93:
47:47:ec:ac:aa:a7:88:10:f4:88:7a:34:5a:8f:e7:7f:73:c7:
a8:73:a5:41:3d:d5:bb:86:62:dc:77:ca:dc:20:01:e5:b0:3d:
55:74:e3:61:f0:1f:ae:0d:b9:c8:47:0c:a3:d0:50:88:41:9e:
55:76:ae:0b:eb:9e:c8:ff:15:76:89:e1:57:e7:9c:51:c8:4a:
64:cf:cb:5f:ac:46:d5:44:3e:fa:b3:cd:45:3e:a8:30:d2:7f:
e8:6b:ec:3a:52:4e:d3:65:d4:9d:f6:6c:65:ed:62:c5:cf:3f:
aa:c8:16:58:f3:0a:9f:54:5e:cd:84:d3:05:9a:65:33:94:4f:
b2:f9:84:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:32 2025 by rpki-client