Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
File: mJHESIaZ5tAk45zE1h7uq9OAEPo.mft (raw, json)
Hash identifier: KWXDEjN/amnSiEeUBaF2hv//Mf1/4FDIj0mF2xx94PY=
Subject key identifier: B8:80:00:E5:1C:DA:6C:AB:56:59:E6:98:D4:50:D8:8D:0A:29:CC:94
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Certificate issuer: /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial: 01988B7CD3F758D5E6DEBAABAE089206F760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
Manifest number: 1627
Signing time: Fri 08 Aug 2025 21:01:10 +0000
Manifest this update: Fri 08 Aug 2025 21:01:10 +0000
Manifest next update: Sat 09 Aug 2025 21:01:10 +0000
Files and hashes: 1: 6QGkFK1SSLb8KrZSIt0KD4m_HTc.roa (hash: ICsAscU9gZxGHPDGe9P6Wa+cu9m9mX5jZ9qQYiJqk50=)
2: 9uUBmS-3S99xpluVPLmV1HsKam0.roa (hash: 8jxAhg8Odj2edlbiGdhpon+x7NalI3jCDbG8HGFfDDY=)
3: D4Or1IBlwc5hq86vIRWEwgXka1Y.roa (hash: r51O6/7Rhapt5pTnQgZxk/cJE7reXaPsMtgnkXNLEVc=)
4: PjDGJnV8bA-YxtE9UzyGXDTtzoM.roa (hash: 86bz/n2g96Qge58Du1MfgRD/8BFndLvyDPrpqOadpBA=)
5: QHrBIBuD-dIq2_2Kb_iV4X3Tvr8.roa (hash: BqAzrOrplAEdRsolpRbFSr5bt0QDC4A+AWz6QKat1JE=)
6: QV8F5f3ACVvEZ-E_uBXaPecA7WQ.roa (hash: GrjilDWZQ5tfLM5SfOrXr2GKb7a1lIF6Yw9vJO3l+Uw=)
7: bsQ79sopvmytFgIfVjKeVkU1gag.roa (hash: QxyAvAZB9QJoIOi8Wnqy68Z4vmJR/0QuMU+vWQKlGE4=)
8: mJHESIaZ5tAk45zE1h7uq9OAEPo.crl (hash: SFKmr7apzkPBlvOXkH6AMal0eZe1QZykb9Z2kIU3xSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:d3:f7:58:d5:e6:de:ba:ab:ae:08:92:06:f7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Validity
Not Before: Aug 8 21:01:10 2025 GMT
Not After : Aug 9 21:01:10 2025 GMT
Subject: CN=b88000e51cda6cab5659e698d450d88d0a29cc94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cb:d7:df:5d:4b:d3:91:b4:95:57:c7:b7:03:
61:86:83:a0:92:d9:4c:84:e6:07:86:53:d7:f3:3f:
b2:9b:dc:69:ea:a0:61:24:b3:8f:a4:2c:71:36:cc:
eb:58:89:bf:82:07:63:47:c3:36:0f:2d:ec:ea:c5:
48:64:07:b3:8f:ce:c2:1b:8d:76:ca:16:c9:38:5f:
8f:da:ec:7a:6e:7b:59:41:f7:de:e9:74:e4:3c:8e:
b4:15:f0:ae:db:f9:9f:b5:03:1b:94:7a:5c:1f:df:
b8:69:57:da:b2:88:e9:fe:ce:ec:96:ac:2c:16:10:
fd:b4:fe:12:7a:85:37:bd:7b:da:83:ac:40:7d:0f:
1e:79:2e:fe:ee:e0:72:a4:06:36:0a:8d:dd:31:3b:
b4:f4:14:22:c4:f8:43:89:43:5d:33:c7:3a:b5:0b:
32:8e:26:c1:10:e0:56:ff:b2:ad:d5:8a:ba:16:f6:
b9:eb:82:23:18:00:ff:2c:be:08:16:a4:16:71:4b:
ca:26:6c:a6:3f:d1:cf:52:35:a8:e9:39:e8:c6:d9:
17:14:c9:52:82:02:a3:11:2a:27:b6:b6:22:95:ea:
c9:0f:a7:64:fa:df:30:16:31:75:13:48:03:76:64:
c2:7d:75:10:17:2c:66:00:32:3e:5f:79:57:e9:6f:
9c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:80:00:E5:1C:DA:6C:AB:56:59:E6:98:D4:50:D8:8D:0A:29:CC:94
X509v3 Authority Key Identifier:
keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:21:62:94:9e:be:32:d0:85:ff:6b:12:4d:23:91:44:ac:27:
24:ff:e7:dd:dd:5a:13:f4:61:6b:58:44:91:21:e5:2c:98:3d:
cc:e6:80:9c:22:3b:80:bd:24:e2:21:65:b8:e6:5a:a0:75:1c:
47:26:a0:6e:83:71:e8:73:63:0d:64:d7:6f:d3:df:c0:09:78:
98:e7:b8:e0:4d:87:ba:07:a7:de:60:c4:e9:1a:e0:cd:7b:50:
60:52:99:9b:c8:fa:d7:ea:6a:fa:6c:ce:14:b3:9e:6c:9e:14:
de:4b:bf:85:cf:3b:5f:40:4f:a6:25:62:2a:1e:84:03:85:17:
44:43:f1:74:8d:58:98:87:e9:ca:c0:a5:48:bf:21:dd:dc:57:
8d:8f:9e:c6:e9:5b:11:39:73:2b:6d:51:e8:6d:77:da:a1:fa:
d2:83:4b:50:63:22:58:1f:8f:c0:3b:ea:63:49:17:82:8a:3b:
b7:73:d5:cf:33:08:10:3f:e9:5c:da:e5:11:54:c7:1a:9d:9f:
27:a3:87:97:97:5b:f1:d5:d2:e7:15:99:80:26:72:90:e5:7e:
9e:21:d9:54:31:bb:69:02:2c:35:00:cd:b5:e0:fd:a5:02:65:
f9:65:5d:ae:a4:b6:37:73:dd:16:8d:35:a1:ba:0a:73:2a:d3:
86:3d:9f:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLfNP3WNXm3rqrrgiSBvdgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4OTFjNDQ4ODY5OWU2ZDAyNGUzOWNjNGQ2MWVlZWFiZDM4
MDEwZmEwHhcNMjUwODA4MjEwMTEwWhcNMjUwODA5MjEwMTEwWjAzMTEwLwYDVQQD
EyhiODgwMDBlNTFjZGE2Y2FiNTY1OWU2OThkNDUwZDg4ZDBhMjljYzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMvX311L05G0lVfHtwNhhoOgktlM
hOYHhlPX8z+ym9xp6qBhJLOPpCxxNszrWIm/ggdjR8M2Dy3s6sVIZAezj87CG412
yhbJOF+P2ux6bntZQffe6XTkPI60FfCu2/mftQMblHpcH9+4aVfasojp/s7slqws
FhD9tP4SeoU3vXvag6xAfQ8eeS7+7uBypAY2Co3dMTu09BQixPhDiUNdM8c6tQsy
jibBEOBW/7Kt1Yq6Fva564IjGAD/LL4IFqQWcUvKJmymP9HPUjWo6TnoxtkXFMlS
ggKjESontrYilerJD6dk+t8wFjF1E0gDdmTCfXUQFyxmADI+X3lX6W+cPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiAAOUc2myrVlnmmNRQ2I0KKcyUMB8GA1UdIwQY
MBaAFJiRxEiGmebQJOOcxNYe7qvTgBD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUpIRVNJYVo1dEFrNDV6RTFoN3VxOU9BRVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80N2RmMDAtODQ2OC00YzM5LWJlOTUt
ZTEwYTYwNTk2YzI2LzEvbUpIRVNJYVo1dEFrNDV6RTFoN3VxOU9BRVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80N2RmMDAtODQ2OC00YzM5LWJlOTUtZTEwYTYwNTk2YzI2
LzEvbUpIRVNJYVo1dEFrNDV6RTFoN3VxOU9BRVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMSFilJ6+
MtCF/2sSTSORRKwnJP/n3d1aE/Rha1hEkSHlLJg9zOaAnCI7gL0k4iFluOZaoHUc
RyagboNx6HNjDWTXb9PfwAl4mOe44E2Hugen3mDE6RrgzXtQYFKZm8j61+pq+mzO
FLOebJ4U3ku/hc87X0BPpiViKh6EA4UXREPxdI1YmIfpysClSL8h3dxXjY+exulb
ETlzK21R6G132qH60oNLUGMiWB+PwDvqY0kXgoo7t3PVzzMIED/pXNrlEVTHGp2f
J6OHl5db8dXS5xWZgCZykOV+niHZVDG7aQIsNQDNteD9pQJl+WVdrqS2N3PdFo01
oboKcyrThj2fgg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 02:57:12 2025 by rpki-client