Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
File: mJHESIaZ5tAk45zE1h7uq9OAEPo.mft (raw, json)
Hash identifier: gq9wPTl8iUFcXcMsDsjijUFiGlhwlsGRomSmRq1uDTs=
Subject key identifier: A8:59:19:4D:6D:D7:7C:02:16:62:9D:22:9F:80:42:F3:B2:86:99:44
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Certificate issuer: /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial: 0198D4E0E861B94E7E3351679D932D89ADAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 03:02:46 +0000
Manifest this update: Sat 23 Aug 2025 03:02:46 +0000
Manifest next update: Sun 24 Aug 2025 03:02:46 +0000
Files and hashes: 1: 6QGkFK1SSLb8KrZSIt0KD4m_HTc.roa (hash: ICsAscU9gZxGHPDGe9P6Wa+cu9m9mX5jZ9qQYiJqk50=)
2: 9uUBmS-3S99xpluVPLmV1HsKam0.roa (hash: 8jxAhg8Odj2edlbiGdhpon+x7NalI3jCDbG8HGFfDDY=)
3: D4Or1IBlwc5hq86vIRWEwgXka1Y.roa (hash: r51O6/7Rhapt5pTnQgZxk/cJE7reXaPsMtgnkXNLEVc=)
4: PjDGJnV8bA-YxtE9UzyGXDTtzoM.roa (hash: 86bz/n2g96Qge58Du1MfgRD/8BFndLvyDPrpqOadpBA=)
5: QHrBIBuD-dIq2_2Kb_iV4X3Tvr8.roa (hash: BqAzrOrplAEdRsolpRbFSr5bt0QDC4A+AWz6QKat1JE=)
6: QV8F5f3ACVvEZ-E_uBXaPecA7WQ.roa (hash: GrjilDWZQ5tfLM5SfOrXr2GKb7a1lIF6Yw9vJO3l+Uw=)
7: bsQ79sopvmytFgIfVjKeVkU1gag.roa (hash: QxyAvAZB9QJoIOi8Wnqy68Z4vmJR/0QuMU+vWQKlGE4=)
8: mJHESIaZ5tAk45zE1h7uq9OAEPo.crl (hash: FnvRcCDlia3Cs0z0gHd2flqV1iX1q7W2WAnr28gM8qE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:e8:61:b9:4e:7e:33:51:67:9d:93:2d:89:ad:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Validity
Not Before: Aug 23 03:02:46 2025 GMT
Not After : Aug 24 03:02:46 2025 GMT
Subject: CN=a859194d6dd77c0216629d229f8042f3b2869944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:87:ca:9c:9a:7c:40:40:a2:ab:59:19:c7:fe:
d2:06:17:aa:36:8c:df:a0:de:40:ee:a9:5f:d6:92:
e8:26:1b:c4:12:3a:69:f2:ca:45:e3:50:be:37:7d:
66:cd:cc:55:96:db:f9:83:ee:0a:4e:fe:b2:a1:70:
96:e1:23:de:0d:80:8a:0a:ed:aa:69:85:b2:3d:c9:
ef:ba:e2:82:e0:ef:2d:b8:54:f0:d7:d2:5d:e7:e2:
fa:19:de:ec:a8:7c:7c:a1:a2:7d:65:84:31:f1:2d:
3c:eb:ec:e9:89:c3:18:e8:7d:74:9f:16:7d:3c:7b:
b8:bf:c5:6b:b3:e2:bd:1a:59:ac:6b:ad:f9:97:98:
8e:25:2b:14:96:99:24:42:81:5c:a2:fe:a7:11:35:
8d:37:bd:b5:0e:2f:90:4d:9f:66:42:52:0f:bf:09:
30:47:a8:b9:0e:45:86:af:b7:e7:b9:f1:bd:e0:44:
30:0a:d5:5e:c5:33:5a:b8:38:09:a1:4f:f4:08:d0:
87:36:b7:c5:f7:69:17:7f:ba:a8:a5:5d:0c:72:2d:
b2:f8:00:f0:4a:89:3a:54:ff:4f:4b:f7:be:a0:66:
ca:85:81:4a:d4:81:5a:ac:46:14:64:ae:2c:d7:45:
7c:cb:61:a1:be:2b:a1:54:25:4f:dc:ff:ec:9a:3c:
d3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:59:19:4D:6D:D7:7C:02:16:62:9D:22:9F:80:42:F3:B2:86:99:44
X509v3 Authority Key Identifier:
keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:0c:f8:53:89:ac:11:3a:94:0c:71:13:a2:41:9f:63:03:e1:
12:ce:e8:8e:09:83:4e:f0:74:6f:25:01:bf:22:09:eb:eb:2b:
59:f2:22:3a:dd:80:89:61:32:8f:92:e5:93:ab:c9:c3:62:03:
25:cb:68:e5:ac:fa:4a:ec:5c:78:e6:11:d8:72:24:0b:7a:eb:
71:eb:4a:5d:66:f5:42:f6:8f:ae:52:e5:67:8a:db:6d:d0:cb:
63:e3:93:7d:fd:87:77:ab:88:4a:c1:15:47:fb:7a:b3:db:92:
3d:e7:a7:0e:c3:bf:34:f7:0d:c7:3a:f2:11:c9:32:47:0f:bc:
9d:25:9b:33:e0:9c:0f:61:46:23:78:cc:43:c7:ac:6b:75:dd:
26:03:61:c2:10:1d:30:e4:b4:8f:2d:15:2b:bb:df:ad:6a:c5:
2d:fd:79:37:f0:fa:e6:4e:8d:19:a6:f3:5b:6f:2c:9d:33:1e:
ab:ad:eb:61:3f:0c:b9:c6:15:10:af:3d:ad:e5:15:1c:04:60:
39:56:f6:96:85:ce:98:e3:28:6e:00:6a:72:97:e2:a0:b5:4a:
17:cf:28:62:0f:6e:0f:cc:df:9b:bb:9d:0b:77:0c:cd:43:5d:
71:5c:ab:06:f4:56:f6:e7:d3:d9:6d:ec:e0:25:2e:d5:fb:ea:
9b:1a:59:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:41 2025 by rpki-client