Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
File: rMGajH8XQRRJx9SP-TCNJIMulSs.mft (raw, json)
Hash identifier: 8211BhNnKwoFgC7XUZDuXmh1PIXG/hDUNSXgcT9XNl0=
Subject key identifier: E5:E4:9A:93:CC:B5:A2:FE:E8:5E:B8:5A:25:E9:2F:3F:E0:D1:EC:61
Authority key identifier: AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
Certificate issuer: /CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Certificate serial: 0197B6A22DA47DA01EAE5878E5EB955E97F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:02:51 +0000
Manifest this update: Sat 28 Jun 2025 13:02:51 +0000
Manifest next update: Sun 29 Jun 2025 13:02:51 +0000
Files and hashes: 1: Qwfm7iyTFcUFA4cP-BGJUr6nVGo.roa (hash: cGT3x4JJQpP+f+7JmlJEaoJ5r1uUvYJMBAOOSckaWRE=)
2: rMGajH8XQRRJx9SP-TCNJIMulSs.crl (hash: BfJNhGgDbizOyx/aiTF+EMIYib45vlRyEJm4GL24KHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:2d:a4:7d:a0:1e:ae:58:78:e5:eb:95:5e:97:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Validity
Not Before: Jun 28 13:02:51 2025 GMT
Not After : Jun 29 13:02:51 2025 GMT
Subject: CN=e5e49a93ccb5a2fee85eb85a25e92f3fe0d1ec61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0a:3a:29:ec:54:9f:9d:62:2e:c0:38:49:ce:
c6:71:9c:72:a0:cd:92:58:68:f7:9d:08:8a:50:c4:
68:9b:53:c1:0f:57:8f:0b:4d:0c:35:16:8b:3e:a1:
d7:31:07:ca:35:28:80:ad:a6:74:28:c2:06:ec:c4:
03:78:05:e9:ca:fc:0f:08:d0:e1:d2:25:a7:c4:51:
08:99:11:46:ee:e7:f7:88:c9:30:18:76:e6:32:9f:
d8:87:a4:d9:38:b7:61:01:3c:cb:28:e3:16:42:a0:
a0:8b:2b:3a:35:47:c0:85:b8:73:3b:a3:72:4c:56:
04:99:93:22:4a:5e:fa:63:b2:88:c3:12:6f:63:52:
7b:8a:07:c5:22:ad:dc:ff:2d:e0:08:60:b3:0b:55:
95:78:9e:11:fd:7f:c5:74:a7:ce:d7:36:ab:e3:7d:
eb:a7:21:a9:05:f1:e0:d1:36:79:59:43:7c:8f:b6:
c1:69:8a:69:cb:f7:bd:65:c6:1e:9d:5f:fb:78:90:
a2:6b:90:d3:6f:d8:ac:6e:37:c9:f9:20:33:be:fb:
ba:99:45:24:da:55:cc:3e:76:39:04:29:a4:9d:2d:
10:30:0b:d6:98:cd:2c:6d:a6:bd:2b:f2:46:73:aa:
13:cb:18:ad:70:e8:d1:8d:dd:33:73:32:4e:70:e2:
5a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E4:9A:93:CC:B5:A2:FE:E8:5E:B8:5A:25:E9:2F:3F:E0:D1:EC:61
X509v3 Authority Key Identifier:
keyid:AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:41:7a:7d:ce:a2:f4:8d:72:90:cd:42:a5:fb:fe:d0:18:2b:
ac:95:b0:de:a0:18:b4:05:6c:a0:7e:aa:7d:c7:ef:14:76:1b:
bc:a8:71:50:28:6c:50:13:be:09:a1:b1:53:ec:80:a8:e8:22:
2a:49:85:a6:28:b9:9f:08:46:2e:94:47:bd:6f:bf:24:90:44:
cb:ec:c7:77:5a:e0:3a:5a:4c:e6:65:36:12:3c:ff:a6:ee:27:
65:c9:d8:98:c4:0f:35:20:1f:33:35:53:f3:e4:88:f7:7a:70:
ee:2f:de:7b:0d:fa:df:9e:79:3e:be:68:78:d0:bd:64:86:32:
12:7a:55:94:41:68:47:b1:1e:ed:72:13:e9:77:2d:78:2c:97:
a6:fc:6b:8e:75:f8:a6:34:58:0d:dd:d7:a6:66:3b:2e:79:59:
b3:82:df:28:72:e6:01:90:f0:38:21:74:9a:f5:f6:9d:bb:a1:
16:e5:9a:31:ea:f6:51:d8:52:3f:81:96:2f:3d:fe:df:df:80:
3d:e8:c3:3c:1e:2b:cf:42:5c:6a:01:79:67:24:32:de:17:17:
a6:3a:bb:7b:73:78:38:83:4d:4c:59:ad:73:df:f1:a7:a9:ae:
7b:d1:53:98:de:28:62:e3:7d:ff:8d:04:75:c6:13:0f:5c:ae:
15:c0:b9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:39:32 2025 by rpki-client