Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
File: mJAcfP_Rmk_qePebEASZkmbcwiQ.mft (raw, json)
Hash identifier: xRKXUDrUuw8PN6xgKIibHa/HafqST4oAzUMNzizNwi8=
Subject key identifier: D9:36:88:0E:29:44:DF:4B:14:EA:03:AA:68:08:93:90:B5:0A:72:68
Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Certificate issuer: /CN=98901c7cffd19a4fea78f79b1004999266dcc224
Certificate serial: 0198D5836215F6C85957354C6F633715DAA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 06:00:13 +0000
Manifest this update: Sat 23 Aug 2025 06:00:13 +0000
Manifest next update: Sun 24 Aug 2025 06:00:13 +0000
Files and hashes: 1: HGWBnpYX08vMWUwwLOMJq_k78S0.roa (hash: yttjunWIbX6dwAiOo7g6fUQGb+c1a+Xf5qmbeU/dnp4=)
2: XmFs6QZFMPRdJzopVIFXmV--Vrs.roa (hash: btfm0oGigPJzbc1bJybbkI9gWRtDv9TpTBsAYkeB30s=)
3: mJAcfP_Rmk_qePebEASZkmbcwiQ.crl (hash: v/MxB2nFiZoALUgvvODA0UvgiUmodXBq4oP0S0kzfcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:62:15:f6:c8:59:57:35:4c:6f:63:37:15:da:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224
Validity
Not Before: Aug 23 06:00:13 2025 GMT
Not After : Aug 24 06:00:13 2025 GMT
Subject: CN=d936880e2944df4b14ea03aa68089390b50a7268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7d:60:23:23:a8:d8:e0:ee:94:e6:a7:6a:8b:
70:81:eb:1e:04:f6:2a:ec:42:23:f9:1f:78:51:ef:
aa:a9:3d:cc:80:48:ff:2e:12:e5:3c:b5:2d:ae:77:
66:08:56:bb:bd:b6:bc:7b:89:d1:37:44:ed:57:7d:
3c:b0:52:4c:e3:b0:29:f2:32:07:bf:4c:d1:ee:1f:
12:dc:c3:77:15:54:24:89:73:37:41:1a:25:78:03:
63:ab:0c:f5:48:ea:43:ad:3a:8d:95:40:9f:1c:53:
82:16:5a:44:0f:0d:b9:6b:b8:6e:35:51:2c:b3:75:
70:31:56:2f:03:70:8e:be:87:ea:bb:46:32:d2:c5:
af:00:9f:2c:8d:e1:06:8c:9c:28:4d:2c:42:9a:bf:
4e:7e:1a:70:54:34:e2:69:9e:5a:21:2a:9e:1e:39:
5e:c1:ff:81:8d:d3:a9:b9:b0:01:4a:8c:96:17:1d:
c0:46:1c:ce:1d:e1:1d:fd:b4:1c:23:a7:2e:64:c8:
4c:2a:cd:6f:58:a9:f0:0c:9b:31:f9:8e:53:ac:f6:
03:a8:67:95:0c:3b:31:e1:41:6f:7c:e6:9c:2b:7f:
f7:30:16:0b:38:c7:d0:9a:ec:ef:a5:69:f6:78:50:
3a:d4:ec:4f:3b:4b:fb:f3:36:29:67:63:4c:aa:28:
0e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:36:88:0E:29:44:DF:4B:14:EA:03:AA:68:08:93:90:B5:0A:72:68
X509v3 Authority Key Identifier:
keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:0b:d2:30:f2:4b:7a:c3:fc:ef:bd:8e:c3:64:5d:84:f1:78:
d7:a9:51:f4:8b:74:1e:d6:fe:46:46:07:00:fa:09:a5:0b:fa:
38:f3:69:4b:e8:ad:78:a4:1f:63:7a:ef:b9:3e:b9:c5:f1:59:
b3:6d:f8:16:0d:ca:86:3b:4e:e5:c7:8b:16:85:43:3c:f5:99:
6b:ca:83:86:8b:70:5f:8b:89:8c:cf:11:50:05:36:8c:6b:f4:
d3:27:81:15:f1:ce:8a:70:09:f6:3d:6c:6e:54:00:67:67:4d:
ab:d7:9f:1e:40:d1:45:9f:3d:5e:17:24:4c:27:94:04:ae:40:
98:b4:38:dc:b1:bc:cb:53:c3:d6:ed:6d:91:89:a3:67:4b:53:
e8:7a:45:d7:5f:fb:19:fa:e0:ad:50:42:6a:e4:9e:c6:b1:f0:
33:47:64:be:f3:22:6e:3b:84:0d:dd:da:c8:90:a6:45:b4:0b:
97:06:9e:66:32:13:24:09:1a:47:e7:78:3b:84:dd:cd:11:a2:
cb:eb:cb:47:55:69:89:6f:2a:e9:6a:33:ed:74:28:15:bc:1a:
47:c1:36:cd:c0:bd:44:a6:dc:40:b3:23:1a:08:90:41:8c:8b:
c5:7b:87:2a:6f:0b:1e:af:8d:a1:b6:c8:66:7f:1f:64:25:57:
d9:cd:a9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:48 2025 by rpki-client