Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
File: mJAcfP_Rmk_qePebEASZkmbcwiQ.mft (raw, json)
Hash identifier: glsiSiuIm+5iute5mZVP0G92d6UrvtN0JsRnOupaHs4=
Subject key identifier: E7:96:AC:92:FD:A2:9B:90:AB:F5:86:B2:B4:7A:11:07:F7:53:1B:50
Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Certificate issuer: /CN=98901c7cffd19a4fea78f79b1004999266dcc224
Certificate serial: 0197C349B673B1E026E1A8DC9FCACFE2907F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
Manifest number: 15BE
Signing time: Tue 01 Jul 2025 00:01:17 +0000
Manifest this update: Tue 01 Jul 2025 00:01:17 +0000
Manifest next update: Wed 02 Jul 2025 00:01:17 +0000
Files and hashes: 1: HGWBnpYX08vMWUwwLOMJq_k78S0.roa (hash: yttjunWIbX6dwAiOo7g6fUQGb+c1a+Xf5qmbeU/dnp4=)
2: XmFs6QZFMPRdJzopVIFXmV--Vrs.roa (hash: btfm0oGigPJzbc1bJybbkI9gWRtDv9TpTBsAYkeB30s=)
3: mJAcfP_Rmk_qePebEASZkmbcwiQ.crl (hash: rZgO5Ymc7Qlf2WT1JGlKpmS0ybwu/uuM5cjz3uf2ovo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:49:b6:73:b1:e0:26:e1:a8:dc:9f:ca:cf:e2:90:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224
Validity
Not Before: Jul 1 00:01:17 2025 GMT
Not After : Jul 2 00:01:17 2025 GMT
Subject: CN=e796ac92fda29b90abf586b2b47a1107f7531b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a3:57:82:73:3b:de:6e:fe:d6:96:66:39:83:
47:8c:a6:c6:a6:9c:11:97:2b:a0:2c:4e:03:59:d7:
26:8d:00:36:a8:ac:fe:7a:99:93:39:af:03:0b:31:
62:b1:d4:89:af:ba:95:46:06:8f:45:3f:b5:91:88:
6f:a7:05:4c:c5:a3:6d:71:c4:43:0e:cf:13:3e:84:
f4:c9:41:4c:85:54:76:a5:03:3f:43:bf:b1:8f:53:
ef:7b:22:d7:5a:4a:69:48:cf:55:1c:49:c3:b1:c6:
53:b2:31:25:59:36:12:80:5a:cc:59:16:ed:dd:dc:
34:6d:ec:f8:aa:91:ec:06:33:a4:aa:cc:a0:53:ee:
b2:2a:54:56:88:5d:56:5a:e6:c2:db:1f:18:f0:97:
be:c4:3c:61:45:02:52:2d:2c:9b:60:77:a4:fc:0a:
0d:7d:89:2e:fd:1a:56:3a:8c:be:c8:99:94:38:b1:
39:89:4f:da:cf:87:26:db:de:9d:b7:80:d1:5c:c3:
3c:af:12:ee:96:17:f7:fb:c7:e6:8a:80:cb:d6:f6:
fd:98:70:ba:82:9d:f5:21:b5:62:12:c0:ec:d4:c6:
37:a1:be:52:f9:29:ac:28:e9:d0:94:77:eb:37:58:
02:08:1c:fd:55:8e:b6:d5:0b:79:97:63:73:c6:ba:
92:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:96:AC:92:FD:A2:9B:90:AB:F5:86:B2:B4:7A:11:07:F7:53:1B:50
X509v3 Authority Key Identifier:
keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:fd:3a:8b:a0:03:f3:67:c3:bb:cf:16:69:d2:34:a6:6e:68:
89:09:ec:82:91:d8:8d:3e:42:95:b4:c7:1d:59:bb:50:a0:2a:
25:af:26:8d:a7:cb:e3:db:ba:de:52:2b:03:67:86:a6:e7:b9:
19:02:de:ee:78:8d:65:ec:92:21:c0:15:3e:a7:23:03:69:24:
73:bb:9f:9d:b3:8d:82:75:45:e9:75:ed:38:36:b2:4d:6e:cc:
53:d7:a6:c4:79:50:13:7c:7c:c3:b2:fd:97:00:29:1e:39:7a:
ec:67:1d:75:e3:b9:26:dc:61:3b:e0:bc:64:fe:b2:c6:f6:89:
3a:3d:a3:86:8a:24:45:52:62:0e:f2:ee:05:74:e6:f5:db:2a:
f3:93:e3:b7:3b:6c:10:3a:a4:09:53:06:e4:9f:64:98:46:8e:
d1:1b:dc:55:df:84:b2:c2:35:99:10:14:ae:7b:a5:7b:e3:bb:
cd:50:8a:d1:75:56:e3:e7:fb:ff:5e:fb:72:e0:a3:7a:fd:a8:
8b:84:e0:71:cd:4e:ca:1c:80:00:c3:7f:56:d0:2a:eb:94:48:
da:32:b2:51:24:54:9d:d5:46:f0:48:d6:03:08:c9:81:de:73:
c2:2a:7a:94:83:ec:56:0d:a5:94:e0:30:28:b7:0c:f0:5b:ee:
29:ea:d0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:11:11 2025 by rpki-client