Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
File: mJAcfP_Rmk_qePebEASZkmbcwiQ.mft (raw, json)
Hash identifier: zSs8ahnAghmAnxdNtI0b5A9LxlP5KPPckXsV6SaTcc0=
Subject key identifier: 30:56:AA:6B:BE:66:4E:16:AE:44:BE:36:2B:DF:0B:75:DF:A9:0B:3A
Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Certificate issuer: /CN=98901c7cffd19a4fea78f79b1004999266dcc224
Certificate serial: 0198808B5258FB3CBF72B3B5FF8596D5DC49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
Manifest number: 1620
Signing time: Wed 06 Aug 2025 18:01:10 +0000
Manifest this update: Wed 06 Aug 2025 18:01:10 +0000
Manifest next update: Thu 07 Aug 2025 18:01:10 +0000
Files and hashes: 1: HGWBnpYX08vMWUwwLOMJq_k78S0.roa (hash: yttjunWIbX6dwAiOo7g6fUQGb+c1a+Xf5qmbeU/dnp4=)
2: XmFs6QZFMPRdJzopVIFXmV--Vrs.roa (hash: btfm0oGigPJzbc1bJybbkI9gWRtDv9TpTBsAYkeB30s=)
3: mJAcfP_Rmk_qePebEASZkmbcwiQ.crl (hash: Inne9jtRyP0L71qVHG35YwIDmMVo6wMNMu9rE2ke/ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:52:58:fb:3c:bf:72:b3:b5:ff:85:96:d5:dc:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224
Validity
Not Before: Aug 6 18:01:10 2025 GMT
Not After : Aug 7 18:01:10 2025 GMT
Subject: CN=3056aa6bbe664e16ae44be362bdf0b75dfa90b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bd:85:c2:ed:5d:1f:04:23:3f:8e:ef:00:b0:
81:26:9b:ec:ba:01:24:25:3d:c8:90:72:b9:ce:99:
98:f9:6a:78:fc:a5:66:87:52:78:e2:41:6d:f6:25:
f9:19:e8:0d:6d:f4:ca:3b:06:6e:2a:21:e1:e1:f6:
1b:4a:70:41:50:2b:60:83:37:0c:20:9d:e7:ad:9b:
22:77:07:f5:e3:ff:84:30:77:86:0d:51:40:69:6f:
d5:45:32:f0:91:58:78:77:c4:06:dc:ca:64:ca:ff:
12:78:2c:4f:82:31:90:2d:62:ca:c9:47:f3:33:0c:
eb:0b:7d:d4:29:36:28:9f:7e:e9:2a:23:bb:36:2d:
13:44:81:57:af:96:a9:6a:c5:db:37:ab:d1:e1:58:
c9:5a:67:57:ff:2e:77:34:f3:8f:81:59:b8:78:7c:
05:6a:5a:4b:18:0e:5b:6b:c7:db:b1:a6:21:94:79:
88:3c:8f:c6:8e:b1:41:ff:48:7f:bd:60:65:b7:1f:
27:e2:a5:a8:33:f7:b8:a0:dd:a7:ba:69:cf:97:12:
50:3a:f1:4c:51:dc:ae:a6:e7:56:a2:ee:d9:76:3b:
49:33:78:e7:27:f6:80:7a:2e:2b:fc:7f:d5:e9:a6:
76:86:de:04:03:f4:a0:a0:96:14:60:7c:6d:65:95:
8f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:56:AA:6B:BE:66:4E:16:AE:44:BE:36:2B:DF:0B:75:DF:A9:0B:3A
X509v3 Authority Key Identifier:
keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0e:54:50:de:7f:8f:b2:8c:21:85:3b:dd:3a:b8:c5:6b:4e:
b6:c9:df:b9:30:27:2b:d9:e6:1a:f7:11:1d:0d:f8:4f:7b:3b:
3c:3c:45:60:0a:19:09:c1:02:db:e7:70:89:86:10:39:60:c6:
a5:9c:1c:ed:2f:f3:de:61:49:88:c6:10:76:0b:a1:60:fb:75:
57:7a:d2:99:8b:15:7c:e4:55:3d:2d:60:75:dd:4a:60:e0:c1:
4a:cb:01:57:ab:39:5b:ba:77:79:12:f1:62:38:36:16:95:1a:
1c:3e:9e:49:3c:73:4e:84:ab:16:cf:6b:22:cb:c7:cd:c6:01:
bf:b8:a6:83:0b:5b:61:4e:49:44:fc:76:b7:6b:75:02:88:fe:
c8:17:92:19:3f:14:08:8d:ef:52:c8:86:4d:fa:19:5f:67:e8:
cb:82:b1:ec:8e:41:c3:30:ff:93:5a:c4:6c:04:80:8b:7d:57:
9d:b8:01:f7:3c:b7:11:30:4e:b8:d2:1d:df:1b:7d:84:1f:54:
02:3b:2a:16:b1:15:0e:67:e9:ca:c7:92:c5:e5:5e:76:da:d5:
0e:33:fa:cb:e6:80:3a:37:f7:4a:76:cd:66:15:e7:6c:87:0f:
36:7d:fa:b7:c3:ac:dc:71:58:c2:b4:e1:3a:5d:96:c7:3b:2b:
5e:bc:ec:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:02:06 2025 by rpki-client