Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
File: mJAcfP_Rmk_qePebEASZkmbcwiQ.mft (raw, json)
Hash identifier: dzhdt4vlQD6eNO+0LLsrOEWROvFOZ4uQwKAX8uZpmPg=
Subject key identifier: A7:A9:DD:E6:8B:DB:58:8F:3A:6C:83:4F:FC:64:FA:BB:AF:C0:98:F2
Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Certificate issuer: /CN=98901c7cffd19a4fea78f79b1004999266dcc224
Certificate serial: 01976C62008D0E38D864D2A7D2E1B1C50A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 03:00:51 +0000
Manifest this update: Sat 14 Jun 2025 03:00:51 +0000
Manifest next update: Sun 15 Jun 2025 03:00:51 +0000
Files and hashes: 1: HGWBnpYX08vMWUwwLOMJq_k78S0.roa (hash: yttjunWIbX6dwAiOo7g6fUQGb+c1a+Xf5qmbeU/dnp4=)
2: XmFs6QZFMPRdJzopVIFXmV--Vrs.roa (hash: btfm0oGigPJzbc1bJybbkI9gWRtDv9TpTBsAYkeB30s=)
3: mJAcfP_Rmk_qePebEASZkmbcwiQ.crl (hash: 0qMPct4PB1ir/4QAavmYkuIfRXiH6PPonRHf6S0TjGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:00:8d:0e:38:d8:64:d2:a7:d2:e1:b1:c5:0a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224
Validity
Not Before: Jun 14 03:00:51 2025 GMT
Not After : Jun 15 03:00:51 2025 GMT
Subject: CN=a7a9dde68bdb588f3a6c834ffc64fabbafc098f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ec:79:be:5b:60:99:d4:35:bd:02:78:d4:0c:
62:b5:49:6b:47:d6:5a:3a:17:2a:2f:63:de:69:8c:
9f:45:69:23:c9:7b:d1:77:b5:95:df:06:57:b3:1f:
0a:67:ff:7c:ce:61:ea:ec:3f:5f:a7:ff:fc:2b:27:
81:68:77:dd:91:30:21:78:e5:66:82:f0:6e:12:65:
bb:30:c7:8b:42:5e:1e:05:3e:ad:07:03:62:2d:a3:
7c:67:83:64:7f:e5:35:55:86:17:2d:33:22:63:35:
d2:ad:69:20:cc:67:36:31:c5:86:ce:49:0a:79:98:
fc:4c:45:3e:fa:51:0f:d2:7b:ec:8f:93:f8:63:b3:
1e:19:9e:13:8a:df:82:91:16:04:21:21:c8:42:07:
f9:a6:e4:22:23:8d:9b:08:d9:2f:9b:51:1b:b9:c8:
19:6a:57:6b:44:6a:ff:e6:b3:7a:c5:0a:02:d4:4c:
26:32:3e:1e:4a:7b:ca:aa:55:c3:a1:f6:db:4b:c9:
e9:95:37:74:2e:80:b8:71:b9:be:d4:8c:4f:1f:be:
a6:76:a5:ab:83:62:ed:5e:14:25:f6:3a:5d:39:ee:
0d:c7:e5:67:2c:2d:3e:7e:4b:56:7b:40:88:bb:29:
f5:d6:33:b2:e7:8f:49:21:8d:9d:92:d0:b3:ce:3e:
c6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A9:DD:E6:8B:DB:58:8F:3A:6C:83:4F:FC:64:FA:BB:AF:C0:98:F2
X509v3 Authority Key Identifier:
keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:62:37:91:92:e2:f9:10:72:9c:b2:d9:03:2b:f0:e0:09:2f:
65:ce:2b:ef:9f:d2:d4:9b:bb:0a:1a:5a:90:0c:8c:83:23:cb:
07:3d:78:7d:43:77:d9:b6:a5:c7:f6:23:c6:95:7f:65:95:7a:
a5:2d:3c:dd:e4:08:50:2d:35:f6:76:af:cb:14:69:f3:c2:83:
a7:09:d3:e4:af:00:9c:e2:fa:e8:f4:01:ee:9b:28:86:91:e4:
a2:d4:75:b4:f4:f4:c7:9a:6b:e3:22:30:66:13:3d:0f:3f:3c:
54:2e:38:6e:ca:2d:78:d0:21:2b:5d:b6:d8:13:15:51:2e:71:
f2:7a:d6:a9:41:f5:aa:85:36:0b:86:d0:d8:13:1c:6e:6c:80:
9f:5c:27:23:5c:7d:89:b1:5a:21:68:24:54:af:63:5a:69:92:
a3:3a:e6:f0:38:13:c7:b1:92:f3:86:34:f3:74:e7:36:db:ce:
b5:b8:c9:c2:72:2c:35:e2:e9:0d:ce:12:a5:34:a0:f8:6e:54:
3b:d9:05:d0:a7:b4:3d:4d:12:9a:6d:fa:da:4a:29:03:3a:a6:
fb:07:e5:ec:f9:ba:e1:12:46:d6:eb:5d:8b:89:37:d3:71:41:
77:ab:af:d9:e7:99:ec:51:72:a7:9c:dc:4f:56:f2:81:7e:7b:
2d:35:99:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsYgCNDjjYZNKn0uGxxQoiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4OTAxYzdjZmZkMTlhNGZlYTc4Zjc5YjEwMDQ5OTkyNjZk
Y2MyMjQwHhcNMjUwNjE0MDMwMDUxWhcNMjUwNjE1MDMwMDUxWjAzMTEwLwYDVQQD
EyhhN2E5ZGRlNjhiZGI1ODhmM2E2YzgzNGZmYzY0ZmFiYmFmYzA5OGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ux5vltgmdQ1vQJ41AxitUlrR9Za
OhcqL2PeaYyfRWkjyXvRd7WV3wZXsx8KZ/98zmHq7D9fp//8KyeBaHfdkTAheOVm
gvBuEmW7MMeLQl4eBT6tBwNiLaN8Z4Nkf+U1VYYXLTMiYzXSrWkgzGc2McWGzkkK
eZj8TEU++lEP0nvsj5P4Y7MeGZ4Tit+CkRYEISHIQgf5puQiI42bCNkvm1EbucgZ
aldrRGr/5rN6xQoC1EwmMj4eSnvKqlXDofbbS8nplTd0LoC4cbm+1IxPH76mdqWr
g2LtXhQl9jpdOe4Nx+VnLC0+fktWe0CIuyn11jOy549JIY2dktCzzj7GJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKep3eaL21iPOmyDT/xk+ruvwJjyMB8GA1UdIwQY
MBaAFJiQHHz/0ZpP6nj3mxAEmZJm3MIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9lMjBjOTUtMGY5Mi00NTk4LTk2ZGYt
Y2JjMjc5N2MxZDBhLzEvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9lMjBjOTUtMGY5Mi00NTk4LTk2ZGYtY2JjMjc5N2MxZDBh
LzEvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADmI3kZLi
+RBynLLZAyvw4AkvZc4r75/S1Ju7ChpakAyMgyPLBz14fUN32balx/YjxpV/ZZV6
pS083eQIUC019navyxRp88KDpwnT5K8AnOL66PQB7psohpHkotR1tPT0x5pr4yIw
ZhM9Dz88VC44bsoteNAhK1222BMVUS5x8nrWqUH1qoU2C4bQ2BMcbmyAn1wnI1x9
ibFaIWgkVK9jWmmSozrm8DgTx7GS84Y083TnNtvOtbjJwnIsNeLpDc4SpTSg+G5U
O9kF0Ke0PU0Smm362kopAzqm+wfl7Pm64RJG1utdi4k303FBd6uv2eeZ7FFyp5zc
T1bygX57LTWZBw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:57:15 2025 by rpki-client