Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
File: rMGajH8XQRRJx9SP-TCNJIMulSs.mft (raw, json)
Hash identifier: cu14p7F5SmFielVq2CN5CyhjFEa5ypPllLXoP8Gj+50=
Subject key identifier: 4E:A9:0D:BA:84:9C:7A:67:72:6A:7B:EA:47:3A:9E:07:18:C1:A7:33
Authority key identifier: AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
Certificate issuer: /CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Certificate serial: 0198D66004815523ED75762EDED6D4E3226F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:01:13 +0000
Manifest this update: Sat 23 Aug 2025 10:01:13 +0000
Manifest next update: Sun 24 Aug 2025 10:01:13 +0000
Files and hashes: 1: Qwfm7iyTFcUFA4cP-BGJUr6nVGo.roa (hash: cGT3x4JJQpP+f+7JmlJEaoJ5r1uUvYJMBAOOSckaWRE=)
2: rMGajH8XQRRJx9SP-TCNJIMulSs.crl (hash: KZ6RZ1UceePpb+76pkulKgHqrQ7JUX1opPN1y1smXpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:04:81:55:23:ed:75:76:2e:de:d6:d4:e3:22:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Validity
Not Before: Aug 23 10:01:13 2025 GMT
Not After : Aug 24 10:01:13 2025 GMT
Subject: CN=4ea90dba849c7a67726a7bea473a9e0718c1a733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:28:7c:12:41:67:dc:99:98:2b:33:79:39:8b:
76:c8:09:6a:c7:60:27:b6:34:99:da:7c:1d:7b:31:
75:6d:1d:e7:ba:05:ad:af:0d:c4:ec:b9:63:dc:e2:
46:e4:2a:9d:b7:80:c9:8d:1f:e2:67:71:46:7d:eb:
04:5f:b4:16:0a:9b:f8:ff:d2:44:e2:86:e2:bc:3a:
8e:ba:ee:bd:6a:9b:96:3a:1c:84:d0:e7:a6:48:8a:
60:ba:4a:c8:90:37:e3:ca:75:61:e1:0a:69:e5:5b:
d1:58:7f:81:51:e3:bc:04:b8:f5:bf:22:39:d7:d7:
58:a9:14:1e:46:db:8a:fc:6c:36:42:c3:6f:82:35:
63:86:70:3b:f3:05:20:12:e2:a0:aa:3e:4c:e7:05:
56:09:7a:af:08:bc:1f:19:1a:65:56:ce:c0:8b:7c:
eb:ab:34:2f:4d:1f:94:2e:52:3e:94:be:a2:2a:62:
b0:03:b2:38:36:99:21:19:16:a8:1e:96:e8:bf:5f:
51:b2:7f:6a:c5:b8:69:3a:5f:8f:54:12:77:61:37:
7a:d4:59:c6:7e:88:53:3e:41:98:cf:23:29:58:c4:
41:b9:3d:4e:34:9c:76:d6:c3:28:b9:af:31:5c:dd:
20:d9:7d:37:7a:f1:62:a3:e7:1b:49:fb:10:be:3f:
d2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A9:0D:BA:84:9C:7A:67:72:6A:7B:EA:47:3A:9E:07:18:C1:A7:33
X509v3 Authority Key Identifier:
keyid:AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2a:3e:1a:30:2c:b5:41:ce:af:98:8a:17:1f:3a:0a:8c:f3:
8a:81:4e:8c:61:77:2f:fe:4e:6f:15:40:ee:51:f5:42:d7:0b:
d0:58:17:48:14:20:d0:f9:36:34:c7:e0:c2:1b:f7:94:b2:11:
6e:55:46:85:49:a5:5f:5f:fa:5d:50:ef:23:ac:73:b1:ea:10:
34:20:26:31:2e:71:39:7f:b5:a0:7c:5f:b5:c5:40:f7:5d:22:
2c:6a:22:0c:72:6d:0a:b7:2f:05:cd:60:58:e4:1d:47:85:7b:
ce:10:3d:86:5d:53:a4:49:cd:f7:00:3f:67:a7:fb:22:56:43:
08:53:46:84:ee:54:e6:d5:62:72:24:aa:4c:12:c6:42:41:35:
bb:b7:58:31:95:5b:97:06:06:f9:8f:43:84:7e:61:4a:ff:63:
1f:08:ee:e2:d6:dd:df:6a:c8:c0:19:c5:90:99:05:c0:a8:6b:
30:5e:77:7b:ec:40:a3:df:a5:c2:8c:d9:d9:ab:05:b3:e1:db:
02:75:85:32:2b:65:5b:5c:51:31:bc:40:13:4a:e7:3f:13:09:
8a:ea:09:62:f4:53:af:4a:41:ec:ea:3c:1f:e7:d0:3a:98:b0:
cb:93:88:e5:e3:4b:b1:54:6f:5a:e8:b6:e8:ac:43:79:25:15:
57:60:22:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:26:09 2025 by rpki-client