Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
File: mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft (raw, json)
Hash identifier: JHTo5fMNUUDMiKgHp2eCGeL7gnyno2vfOStJIZnXISw=
Subject key identifier: A4:FC:85:E8:A7:55:C1:B0:A3:2A:42:10:31:FB:49:8A:C0:1F:D8:4E
Authority key identifier: 98:21:E3:7E:AB:6E:F6:32:69:33:E5:FA:37:48:D0:7D:83:02:6D:B0
Certificate issuer: /CN=9821e37eab6ef6326933e5fa3748d07d83026db0
Certificate serial: 0198898EEC278F5926F2683B5CF6524CCDEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
Manifest number: 1627
Signing time: Fri 08 Aug 2025 12:01:41 +0000
Manifest this update: Fri 08 Aug 2025 12:01:41 +0000
Manifest next update: Sat 09 Aug 2025 12:01:41 +0000
Files and hashes: 1: Fb0UwpxCy0DRKLuSbZAzVNuZQGI.roa (hash: FQG+r4pQE3E1WCi2kVbQ4HOY+Sj6V8FJrKG1h8vbtwQ=)
2: mCHjfqtu9jJpM-X6N0jQfYMCbbA.crl (hash: eM+BnpBGF57rkseJLiNvGA5dTzCHeeJb+uM046gWW9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:8e:ec:27:8f:59:26:f2:68:3b:5c:f6:52:4c:cd:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9821e37eab6ef6326933e5fa3748d07d83026db0
Validity
Not Before: Aug 8 12:01:41 2025 GMT
Not After : Aug 9 12:01:41 2025 GMT
Subject: CN=a4fc85e8a755c1b0a32a421031fb498ac01fd84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:99:6c:6a:59:48:65:1e:55:70:bd:10:e5:09:
08:9e:51:09:fe:52:b9:4a:13:30:7f:1e:e2:61:85:
48:02:7a:bc:65:45:2f:74:cf:ea:48:19:40:73:e6:
8c:4a:da:58:d7:e9:af:d7:94:ba:8c:cd:07:9d:f0:
af:bf:40:54:40:9f:6d:ec:73:6c:61:3a:d0:64:0b:
63:55:87:f4:18:70:d6:23:33:ec:9a:5b:b3:81:39:
8c:60:0d:3f:f6:73:96:a7:c5:f9:d4:e4:9c:93:09:
e5:e4:04:ed:9d:79:1c:8a:47:bf:40:b9:b0:79:b0:
81:47:72:f3:6b:f0:8b:ef:07:53:bd:ba:06:20:6f:
ac:5c:96:b8:5b:7a:3d:0f:20:99:ee:34:5c:c7:a1:
a0:26:7d:d0:99:16:b3:b0:6b:b8:a3:ae:ab:a0:06:
6b:f2:f3:66:6a:98:ab:fb:65:a7:f7:19:af:72:2a:
db:19:17:d0:b8:71:6f:e5:39:d3:ac:3d:ee:56:ac:
55:2f:13:f9:fd:c5:a2:eb:bd:5c:65:25:14:e3:b0:
74:b4:c4:3d:aa:b5:e6:23:ea:d8:fb:9a:8b:6b:5d:
6a:a8:c0:89:8f:5b:5c:83:c1:aa:3d:98:d9:eb:90:
ed:7e:6d:88:c1:70:c7:be:f4:f1:c2:93:b7:e9:f2:
4c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FC:85:E8:A7:55:C1:B0:A3:2A:42:10:31:FB:49:8A:C0:1F:D8:4E
X509v3 Authority Key Identifier:
keyid:98:21:E3:7E:AB:6E:F6:32:69:33:E5:FA:37:48:D0:7D:83:02:6D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e0:02:2b:db:b2:3f:72:6a:2d:b5:74:e6:f0:f1:2a:8e:54:
05:57:93:69:13:db:f9:ef:d7:e1:94:e8:a5:b3:d0:01:ad:05:
e1:d0:61:a8:e8:2e:3f:fd:4d:d6:44:e2:ba:ce:fe:d6:7b:89:
e5:d0:67:25:72:96:3b:7d:84:90:a5:d0:5f:94:84:17:26:61:
10:d6:3a:b3:fd:6e:fa:4a:0f:fb:0e:89:3d:96:ab:2e:83:ef:
eb:17:8e:9c:11:e4:49:55:9f:24:c5:e8:cd:22:6b:2f:c9:5c:
b0:6e:7c:26:c7:5a:89:91:34:2c:4f:2a:58:02:21:ff:12:b1:
95:e1:1b:95:3e:db:b9:c2:e1:8d:58:30:7c:00:e1:57:b1:41:
86:fb:69:ac:e2:5e:10:4e:bb:f8:f8:bb:47:2e:5a:7a:11:11:
4e:8f:b5:b0:06:37:42:80:f7:9c:b0:77:61:28:8a:dc:f0:ed:
6a:d8:28:59:5c:2c:e4:5d:32:9b:83:c4:08:f9:b5:60:5f:6b:
8a:d4:95:eb:72:d5:7b:42:9b:a9:6a:e0:9b:d4:1f:4e:9a:46:
b1:21:3d:99:e1:8c:25:5f:7a:29:c7:a8:71:0a:0b:f5:5c:47:
a9:56:e5:2e:04:13:a4:a5:cc:50:48:65:d5:5b:0d:13:be:09:
5b:7f:52:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:52:13 2025 by rpki-client