Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
File: mJHESIaZ5tAk45zE1h7uq9OAEPo.mft (raw, json)
Hash identifier: vSxjcBJfMwIxP1bWhspEsyj6T9lbDSnzWT/5ab9Tw0o=
Subject key identifier: 5E:01:E8:70:B4:14:AB:29:F7:44:79:5F:6E:BC:61:13:CB:F3:0A:63
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Certificate issuer: /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial: 0196C5A808DC328307016EA64D16EDBAA7A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
Manifest number: 153C
Signing time: Mon 12 May 2025 18:00:45 +0000
Manifest this update: Mon 12 May 2025 18:00:45 +0000
Manifest next update: Tue 13 May 2025 18:00:45 +0000
Files and hashes: 1: 6QGkFK1SSLb8KrZSIt0KD4m_HTc.roa (hash: ICsAscU9gZxGHPDGe9P6Wa+cu9m9mX5jZ9qQYiJqk50=)
2: 9uUBmS-3S99xpluVPLmV1HsKam0.roa (hash: 8jxAhg8Odj2edlbiGdhpon+x7NalI3jCDbG8HGFfDDY=)
3: D4Or1IBlwc5hq86vIRWEwgXka1Y.roa (hash: r51O6/7Rhapt5pTnQgZxk/cJE7reXaPsMtgnkXNLEVc=)
4: PjDGJnV8bA-YxtE9UzyGXDTtzoM.roa (hash: 86bz/n2g96Qge58Du1MfgRD/8BFndLvyDPrpqOadpBA=)
5: QHrBIBuD-dIq2_2Kb_iV4X3Tvr8.roa (hash: BqAzrOrplAEdRsolpRbFSr5bt0QDC4A+AWz6QKat1JE=)
6: QV8F5f3ACVvEZ-E_uBXaPecA7WQ.roa (hash: GrjilDWZQ5tfLM5SfOrXr2GKb7a1lIF6Yw9vJO3l+Uw=)
7: bsQ79sopvmytFgIfVjKeVkU1gag.roa (hash: QxyAvAZB9QJoIOi8Wnqy68Z4vmJR/0QuMU+vWQKlGE4=)
8: mJHESIaZ5tAk45zE1h7uq9OAEPo.crl (hash: 06wo6BJvvmp3xau3UUbqvA8LvKYKnRWL7nIvFWOSXR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a8:08:dc:32:83:07:01:6e:a6:4d:16:ed:ba:a7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Validity
Not Before: May 12 18:00:45 2025 GMT
Not After : May 13 18:00:45 2025 GMT
Subject: CN=5e01e870b414ab29f744795f6ebc6113cbf30a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:28:1b:e7:d2:67:af:21:2d:cc:e7:c4:2f:1b:
a7:b6:c7:a5:fe:ca:62:28:f4:84:2f:8a:9f:c2:09:
3f:07:5c:57:5b:9b:9e:bc:d0:9a:87:1a:ed:0e:36:
5d:ad:d9:a1:e6:e4:9f:7d:33:42:03:73:04:ee:e1:
89:84:ff:46:be:ad:78:7c:9e:50:f4:41:2d:ad:56:
9a:1b:6c:70:ad:27:7c:8a:12:84:33:a1:2b:b8:a9:
54:ab:26:dd:cc:03:62:3b:db:24:83:bb:65:0c:bd:
29:10:e8:23:38:6d:55:b3:f8:bb:c3:95:f4:a0:bd:
50:56:1b:e1:88:c2:e5:e6:3c:fb:59:a1:6b:ab:4b:
ba:6e:76:32:39:14:26:de:02:6e:52:04:85:fd:f4:
66:83:aa:45:52:8a:0f:2f:a2:ef:70:d3:70:5a:11:
64:d3:e7:66:ab:e1:55:dd:0a:45:6b:a7:ad:2e:cd:
5a:d7:83:a1:67:f5:e4:9c:69:c4:38:46:aa:29:83:
1e:5d:78:5a:32:de:2d:3f:db:a9:26:82:54:37:ae:
f0:50:36:79:3d:eb:7e:28:97:52:e9:35:9b:04:8a:
23:13:4a:bf:b4:57:9b:e4:d8:bb:6e:d4:05:49:a4:
06:bd:66:9d:3f:b7:fc:a5:03:4d:41:89:5c:5c:ae:
14:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:01:E8:70:B4:14:AB:29:F7:44:79:5F:6E:BC:61:13:CB:F3:0A:63
X509v3 Authority Key Identifier:
keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ad:b1:ea:02:30:28:3d:7d:08:42:e8:6e:1a:7e:a1:e2:dc:
00:a4:05:53:05:9e:21:0c:fc:ab:9d:96:e4:3b:d6:eb:66:47:
e6:13:82:53:48:a3:a5:ce:be:5b:58:e8:38:2e:1d:7a:d7:f1:
61:4c:99:af:20:06:02:fe:86:70:fa:b0:a6:83:9e:18:ef:2e:
8d:66:2a:b5:3a:35:80:1d:43:df:d6:fd:ec:a4:f8:94:fe:1b:
9b:c8:74:f7:fb:66:bd:20:bd:82:c5:ca:35:e5:77:de:f3:76:
9b:99:2a:38:37:93:69:cf:e4:e7:6c:e5:3f:f8:75:2a:99:7e:
38:d8:2e:d4:cf:a6:91:b2:0a:cc:d5:49:42:30:19:7e:92:bb:
d1:c2:b2:e9:32:57:51:04:e2:40:e6:3a:24:d3:a2:bf:b6:6c:
b6:1a:d2:51:39:b7:3a:8b:c2:46:6b:0f:29:5d:e8:9d:19:d1:
f1:6c:5e:91:c2:89:c4:f0:fd:c1:d5:0a:24:bc:45:4e:ab:93:
0d:cb:c7:48:c0:bc:a7:43:84:a2:c5:90:48:47:0a:0b:14:a6:
35:3a:7f:dd:a5:5f:a3:17:55:4a:a5:5f:3c:f8:14:ec:31:5d:
5b:06:5b:d7:59:3c:7d:10:25:79:fd:98:4f:3d:af:d9:7f:f3:
47:61:26:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:07:18 2025 by rpki-client