Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
File: mJHESIaZ5tAk45zE1h7uq9OAEPo.mft (raw, json)
Hash identifier: tsF/fU9RMGmQcmUW6hw6qOt9dUJt4gouPdLjyDsyodI=
Subject key identifier: CE:EE:C9:EC:A2:62:5C:BE:26:5D:DD:33:0B:0B:5B:2E:82:91:8C:A5
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Certificate issuer: /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial: 019786C6BBB73E3716EC478E1B7F67F5D64A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
Manifest number: 15A0
Signing time: Thu 19 Jun 2025 06:01:00 +0000
Manifest this update: Thu 19 Jun 2025 06:01:00 +0000
Manifest next update: Fri 20 Jun 2025 06:01:00 +0000
Files and hashes: 1: 6QGkFK1SSLb8KrZSIt0KD4m_HTc.roa (hash: ICsAscU9gZxGHPDGe9P6Wa+cu9m9mX5jZ9qQYiJqk50=)
2: 9uUBmS-3S99xpluVPLmV1HsKam0.roa (hash: 8jxAhg8Odj2edlbiGdhpon+x7NalI3jCDbG8HGFfDDY=)
3: D4Or1IBlwc5hq86vIRWEwgXka1Y.roa (hash: r51O6/7Rhapt5pTnQgZxk/cJE7reXaPsMtgnkXNLEVc=)
4: PjDGJnV8bA-YxtE9UzyGXDTtzoM.roa (hash: 86bz/n2g96Qge58Du1MfgRD/8BFndLvyDPrpqOadpBA=)
5: QHrBIBuD-dIq2_2Kb_iV4X3Tvr8.roa (hash: BqAzrOrplAEdRsolpRbFSr5bt0QDC4A+AWz6QKat1JE=)
6: QV8F5f3ACVvEZ-E_uBXaPecA7WQ.roa (hash: GrjilDWZQ5tfLM5SfOrXr2GKb7a1lIF6Yw9vJO3l+Uw=)
7: bsQ79sopvmytFgIfVjKeVkU1gag.roa (hash: QxyAvAZB9QJoIOi8Wnqy68Z4vmJR/0QuMU+vWQKlGE4=)
8: mJHESIaZ5tAk45zE1h7uq9OAEPo.crl (hash: rxa4SmnEpYXIZ1bYxCshYbbaHSO41DgDPrg8tGZaRqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:c6:bb:b7:3e:37:16:ec:47:8e:1b:7f:67:f5:d6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Validity
Not Before: Jun 19 06:01:00 2025 GMT
Not After : Jun 20 06:01:00 2025 GMT
Subject: CN=ceeec9eca2625cbe265ddd330b0b5b2e82918ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8f:bd:33:68:07:8f:66:52:a3:40:91:95:ad:
12:c7:5c:2e:cc:33:84:8b:f8:fd:82:e5:f4:82:ad:
c3:af:12:1a:b6:3b:4b:ae:33:07:aa:a8:2b:ad:66:
5e:75:e2:b2:e6:49:b8:8a:bb:07:09:0f:75:51:fe:
4a:af:e3:50:16:fa:e1:ae:fd:f9:66:8f:d0:9a:e6:
e1:9f:69:a1:60:62:d3:23:b0:81:ef:1f:05:f5:3c:
a1:07:4d:32:4c:c2:45:30:23:6d:20:81:61:3a:d4:
3b:46:86:ce:42:1d:5b:1c:ce:64:95:66:0c:f8:68:
ae:31:6a:38:11:6c:25:bc:a4:6d:94:ac:1b:22:2a:
cf:de:6b:5b:4b:64:31:72:a9:de:80:c1:c3:4b:ef:
71:34:d4:ad:46:a9:29:58:fc:5b:1a:e2:96:ae:1a:
a1:39:44:99:05:dd:d6:3a:55:c2:b2:3c:2f:58:be:
c4:29:db:09:44:77:16:78:13:f3:d6:20:d6:c3:d7:
8e:04:10:6c:2b:80:59:92:dc:cb:d8:ea:b2:af:4f:
6b:74:f0:81:98:66:f3:d0:f7:91:03:6d:77:7a:9d:
e5:c0:86:0c:f9:19:54:65:f4:e8:14:b4:9e:3f:65:
4f:2f:ba:8b:70:f1:4c:6f:3f:a0:cc:11:31:32:41:
5f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EE:C9:EC:A2:62:5C:BE:26:5D:DD:33:0B:0B:5B:2E:82:91:8C:A5
X509v3 Authority Key Identifier:
keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:21:76:da:98:c9:17:08:d1:35:f2:35:b8:b6:48:84:c5:ea:
07:be:cd:53:d9:07:4a:8a:bd:d1:15:ff:bd:1a:01:5a:cb:f0:
e7:24:22:bb:5c:77:bc:7e:ea:6e:8d:19:48:be:82:c5:94:bd:
c7:09:25:d0:e6:00:18:df:3b:fa:57:45:7f:08:15:3c:94:d4:
84:3b:30:a1:cc:ee:73:e7:99:7f:d0:54:88:6c:02:66:8d:49:
e1:9b:8d:45:40:b6:20:4f:35:95:65:90:97:be:7b:50:7f:02:
66:56:f7:a1:b2:b6:bf:d6:52:a0:f4:fe:ca:6e:41:6d:7b:7b:
52:38:7f:95:5a:df:63:db:9b:fc:28:78:1b:c5:08:d3:8d:b7:
42:53:19:bb:02:78:39:0d:bb:f2:6c:a1:ef:27:b2:d2:b3:9d:
39:21:ed:3d:98:86:a2:10:26:fe:65:07:97:e3:f8:46:48:c7:
39:13:61:06:72:f7:3e:7d:7e:9a:bb:55:da:35:d4:e0:a2:a9:
b0:cc:91:a1:b5:d7:dc:ad:47:44:71:33:b0:fc:ef:9c:76:99:
a9:e9:56:a5:2d:7e:19:42:c6:63:a9:ab:32:0e:13:5a:ba:de:
f8:df:0a:b1:b8:25:fa:16:23:af:6c:f1:de:13:ce:42:b3:36:
49:b0:de:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeGxru3PjcW7EeOG39n9dZKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4OTFjNDQ4ODY5OWU2ZDAyNGUzOWNjNGQ2MWVlZWFiZDM4
MDEwZmEwHhcNMjUwNjE5MDYwMTAwWhcNMjUwNjIwMDYwMTAwWjAzMTEwLwYDVQQD
EyhjZWVlYzllY2EyNjI1Y2JlMjY1ZGRkMzMwYjBiNWIyZTgyOTE4Y2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4+9M2gHj2ZSo0CRla0Sx1wuzDOE
i/j9guX0gq3DrxIatjtLrjMHqqgrrWZedeKy5km4irsHCQ91Uf5Kr+NQFvrhrv35
Zo/Qmubhn2mhYGLTI7CB7x8F9TyhB00yTMJFMCNtIIFhOtQ7RobOQh1bHM5klWYM
+GiuMWo4EWwlvKRtlKwbIirP3mtbS2QxcqnegMHDS+9xNNStRqkpWPxbGuKWrhqh
OUSZBd3WOlXCsjwvWL7EKdsJRHcWeBPz1iDWw9eOBBBsK4BZktzL2Oqyr09rdPCB
mGbz0PeRA213ep3lwIYM+RlUZfToFLSeP2VPL7qLcPFMbz+gzBExMkFfAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7uyeyiYly+Jl3dMwsLWy6CkYylMB8GA1UdIwQY
MBaAFJiRxEiGmebQJOOcxNYe7qvTgBD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUpIRVNJYVo1dEFrNDV6RTFoN3VxOU9BRVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80N2RmMDAtODQ2OC00YzM5LWJlOTUt
ZTEwYTYwNTk2YzI2LzEvbUpIRVNJYVo1dEFrNDV6RTFoN3VxOU9BRVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80N2RmMDAtODQ2OC00YzM5LWJlOTUtZTEwYTYwNTk2YzI2
LzEvbUpIRVNJYVo1dEFrNDV6RTFoN3VxOU9BRVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArCF22pjJ
FwjRNfI1uLZIhMXqB77NU9kHSoq90RX/vRoBWsvw5yQiu1x3vH7qbo0ZSL6CxZS9
xwkl0OYAGN87+ldFfwgVPJTUhDswoczuc+eZf9BUiGwCZo1J4ZuNRUC2IE81lWWQ
l757UH8CZlb3obK2v9ZSoPT+ym5BbXt7Ujh/lVrfY9ub/Ch4G8UI0423QlMZuwJ4
OQ278myh7yey0rOdOSHtPZiGohAm/mUHl+P4RkjHORNhBnL3Pn1+mrtV2jXU4KKp
sMyRobXX3K1HRHEzsPzvnHaZqelWpS1+GULGY6mrMg4TWrre+N8Ksbgl+hYjr2zx
3hPOQrM2SbDeZA==
-----END CERTIFICATE-----
Generated at Thu Jun 19 16:11:19 2025 by rpki-client