Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
File: mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft (raw, json)
Hash identifier: q6+plN7jJPeCAivhiODmegXRed/y8Aw6VzKvRBmmb7o=
Subject key identifier: 68:79:99:BD:B1:DF:96:44:14:17:9E:E4:CE:41:03:1A:55:D8:92:8E
Authority key identifier: 98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
Certificate issuer: /CN=987277fc47d848fa5634ce8031a174fc249fa673
Certificate serial: 0197B70EA766F6DD0E714F4A3BB278382C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
Manifest number: 1128
Signing time: Sat 28 Jun 2025 15:01:20 +0000
Manifest this update: Sat 28 Jun 2025 15:01:20 +0000
Manifest next update: Sun 29 Jun 2025 15:01:20 +0000
Files and hashes: 1: VlN03NzU22VqBJjuuSiWL-bZBd4.roa (hash: zL/CNitpQTOFbWlPrnFZSimJtQPUsRcwGyao+n9vr6I=)
2: mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl (hash: oVJfHSTeoL1Cm+HU0IlzFcJBtZfUPTM2VzMkRJoPeDM=)
3: x-pf71LMqWAOfz_edcWa4jqcFtw.roa (hash: R9d0veM+s5qj9VQxcv57hMUlsfI6YWyDvMX5S+dYnf4=)
4: yNCFlHdmr6YTD4yj6Ff9apNqyt0.roa (hash: ZUFB1KnW1iXTKo6shI/8yLUB0t8Kkom2z+qOMPxu0jE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a7:66:f6:dd:0e:71:4f:4a:3b:b2:78:38:2c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987277fc47d848fa5634ce8031a174fc249fa673
Validity
Not Before: Jun 28 15:01:20 2025 GMT
Not After : Jun 29 15:01:20 2025 GMT
Subject: CN=687999bdb1df964414179ee4ce41031a55d8928e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:97:80:a1:2b:7c:b8:d6:74:e1:6b:62:26:31:
05:4d:0b:6a:3c:fe:89:86:86:b2:85:a6:04:f9:22:
9a:9d:92:1f:f7:6e:15:21:6d:a1:04:dd:79:62:ec:
2e:27:d2:98:5e:84:37:00:b1:2e:99:11:aa:db:b1:
94:1a:1d:cd:4b:f7:e6:9e:c2:f4:94:35:83:05:0e:
da:4b:e9:ad:e8:12:b3:72:8b:de:4c:dd:1c:c2:05:
a5:65:a5:e7:62:5e:a1:b8:1e:4d:71:5d:fd:f8:9d:
4b:db:5d:e0:57:dc:e0:d9:f3:32:07:ed:b5:81:55:
55:30:80:9c:6a:63:10:6a:7e:87:93:d5:0c:e9:c1:
d8:ba:bd:29:87:4e:f3:b0:ad:dc:e0:32:ea:61:b6:
86:bf:20:4b:1f:10:17:87:43:7b:42:da:cd:bd:00:
50:53:e6:4b:ef:c7:f7:3e:7f:da:4d:8e:4b:96:33:
c1:21:36:bf:1c:e6:f8:89:38:2d:aa:b4:d6:26:77:
de:d6:46:b2:2d:22:33:85:89:47:7b:6c:bd:3a:8e:
03:d5:9f:bc:55:42:53:c6:c2:e3:f6:ae:41:76:e7:
3f:6a:d7:95:28:05:2e:9e:4d:10:f6:90:89:cc:92:
17:b0:b8:08:93:8a:a2:9e:57:e0:47:9f:bc:36:5b:
b1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:79:99:BD:B1:DF:96:44:14:17:9E:E4:CE:41:03:1A:55:D8:92:8E
X509v3 Authority Key Identifier:
keyid:98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:9c:1f:66:cf:53:71:5e:1b:cb:c3:92:bd:bd:8c:fe:04:24:
8d:7a:ac:81:ce:ee:ef:3b:c7:72:34:a8:98:6b:31:7a:ea:75:
ab:a9:6f:73:48:d9:c0:1f:94:7c:3d:c8:1a:37:e9:9a:e1:b7:
64:de:77:dd:5b:12:fb:8c:1b:bb:96:9b:65:a1:ab:3b:13:8d:
33:15:0f:57:f5:0e:7f:24:29:ba:89:fb:a1:e0:09:3e:50:06:
c5:5c:9f:ec:23:8d:db:ba:62:22:b1:ba:f9:c9:87:1c:2e:e5:
cd:3d:b4:52:ff:26:c7:21:32:d3:0f:7b:f9:14:be:87:63:59:
aa:df:a8:ad:ac:95:7a:5b:f7:f0:e7:f3:3e:f1:7f:b2:7e:df:
09:59:59:df:50:6e:55:18:10:11:93:82:8f:89:d0:cc:65:91:
47:bc:83:0e:bf:13:60:8d:8a:b7:81:99:5c:78:5b:08:50:fe:
27:4a:6f:0e:23:aa:60:b2:fc:e4:3e:68:e1:1b:54:01:0b:da:
1f:09:1f:d6:1d:c4:69:a0:8d:12:f5:29:56:47:13:25:e9:84:
9b:b8:d6:cb:84:45:06:a5:d8:a6:40:67:39:b8:4c:9b:2a:f4:
3b:e3:a3:15:99:c5:c0:1a:9c:59:f8:d9:c3:e4:35:f2:80:4e:
c1:f4:70:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:18:28 2025 by rpki-client