Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
File: rMGajH8XQRRJx9SP-TCNJIMulSs.mft (raw, json)
Hash identifier: ylHEM1mu2h5g9qxXvxestgfHz4SxcM2Hg/mOeuwZ+MM=
Subject key identifier: 86:06:52:8F:41:D4:89:5B:90:A5:C6:EC:1F:BA:36:8D:73:BA:21:4F
Authority key identifier: AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
Certificate issuer: /CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Certificate serial: 01976929AA38025DE4827C54DC0EED420DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 12:00:27 +0000
Manifest this update: Fri 13 Jun 2025 12:00:27 +0000
Manifest next update: Sat 14 Jun 2025 12:00:27 +0000
Files and hashes: 1: Qwfm7iyTFcUFA4cP-BGJUr6nVGo.roa (hash: cGT3x4JJQpP+f+7JmlJEaoJ5r1uUvYJMBAOOSckaWRE=)
2: rMGajH8XQRRJx9SP-TCNJIMulSs.crl (hash: cetVnYh8/a2Vy3ImerO92HgPYCyDFFHlgW6RbCYTOeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:aa:38:02:5d:e4:82:7c:54:dc:0e:ed:42:0d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Validity
Not Before: Jun 13 12:00:27 2025 GMT
Not After : Jun 14 12:00:27 2025 GMT
Subject: CN=8606528f41d4895b90a5c6ec1fba368d73ba214f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ee:8d:a8:5e:b7:ed:51:c5:da:d8:ea:ab:08:
f0:49:3f:03:42:51:9b:04:f7:38:27:73:d8:95:55:
4a:0c:89:ba:1e:8b:43:54:5b:b9:2a:f5:ed:33:97:
3f:f6:8f:e8:4d:0e:c0:6c:64:b6:c3:6c:00:8b:f6:
bb:9c:c4:2e:5b:b3:97:ba:f2:2a:97:f2:0f:44:d8:
b4:b9:47:ad:ae:3c:cd:7c:11:fe:8a:24:58:34:9f:
90:de:b8:f4:24:59:d9:a5:8e:34:ab:8a:56:5a:75:
10:11:be:82:83:aa:14:1c:bd:59:d6:02:c4:ac:f4:
b2:f1:80:ed:90:32:01:44:7a:a1:6b:99:f0:a6:0b:
f7:8b:03:8f:4c:01:bb:10:3e:fd:58:ac:01:e1:94:
50:ec:28:a9:df:ee:db:f2:0e:ed:a8:b4:c9:af:07:
19:d9:39:ec:47:b0:4f:cc:5e:28:db:73:88:5b:55:
44:e6:cb:ce:03:b5:35:21:2f:1d:4e:2e:c7:56:41:
0d:64:2b:20:b4:f4:b6:a0:4c:d0:6b:25:9f:5a:57:
54:b3:20:98:cb:56:07:c1:a8:87:fd:0d:a9:e7:4c:
6f:4b:82:70:9d:b9:d0:62:f5:c0:97:be:1b:3f:9f:
f6:bb:44:eb:c3:36:ff:4d:00:5c:6a:37:33:4a:3e:
1d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:06:52:8F:41:D4:89:5B:90:A5:C6:EC:1F:BA:36:8D:73:BA:21:4F
X509v3 Authority Key Identifier:
keyid:AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:01:41:e5:91:44:78:d9:51:cc:26:85:ab:5b:00:01:d1:c7:
e0:b2:6c:a5:08:39:82:ab:2a:49:cb:e1:1a:56:f6:04:00:23:
29:eb:94:8a:db:44:32:8b:1c:c5:35:14:63:7e:8a:72:3b:71:
92:e8:e7:81:91:20:ff:b9:de:46:81:aa:51:a7:25:56:0d:57:
09:ef:80:df:07:c7:d9:ee:a9:df:b5:27:56:1d:d5:30:18:b6:
af:24:8c:bf:13:07:64:85:2e:9f:cc:fe:be:55:94:f1:c7:e9:
90:98:3d:b8:66:5c:36:b4:01:91:d3:cf:00:6d:f4:67:fb:7d:
a4:25:2f:fc:22:10:28:48:81:5e:83:5a:cf:0a:e7:c4:22:3a:
e5:d9:38:3c:dd:ae:98:a1:42:d1:43:58:04:30:9d:58:1b:9d:
29:b4:cc:c1:de:a7:17:e8:58:14:62:9d:a6:f2:4a:c1:70:b5:
ae:59:c6:be:e3:a2:c7:2c:af:aa:78:97:b1:52:71:f6:41:43:
9e:8c:4f:1c:8b:67:c2:63:f7:ea:87:5e:dc:57:1d:03:13:b2:
6e:06:b6:12:4a:86:b5:1a:20:55:60:c8:99:94:c4:6e:7f:fe:
b4:97:48:af:bb:99:c7:c3:18:eb:a9:7d:c8:7f:f9:e5:e7:fa:
1d:f8:db:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpKao4Al3kgnxU3A7tQg2mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYzE5YThjN2YxNzQxMTQ0OWM3ZDQ4ZmY5MzA4ZDI0ODMy
ZTk1MmIwHhcNMjUwNjEzMTIwMDI3WhcNMjUwNjE0MTIwMDI3WjAzMTEwLwYDVQQD
Eyg4NjA2NTI4ZjQxZDQ4OTViOTBhNWM2ZWMxZmJhMzY4ZDczYmEyMTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne6NqF637VHF2tjqqwjwST8DQlGb
BPc4J3PYlVVKDIm6HotDVFu5KvXtM5c/9o/oTQ7AbGS2w2wAi/a7nMQuW7OXuvIq
l/IPRNi0uUetrjzNfBH+iiRYNJ+Q3rj0JFnZpY40q4pWWnUQEb6Cg6oUHL1Z1gLE
rPSy8YDtkDIBRHqha5nwpgv3iwOPTAG7ED79WKwB4ZRQ7Cip3+7b8g7tqLTJrwcZ
2TnsR7BPzF4o23OIW1VE5svOA7U1IS8dTi7HVkENZCsgtPS2oEzQayWfWldUsyCY
y1YHwaiH/Q2p50xvS4JwnbnQYvXAl74bP5/2u0Trwzb/TQBcajczSj4d6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYGUo9B1IlbkKXG7B+6No1zuiFPMB8GA1UdIwQY
MBaAFKzBmox/F0EUScfUj/kwjSSDLpUrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck1HYWpIOFhRUlJKeDlTUC1UQ05KSU11bFNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mNDA1YTItNGUzZS00NjIxLTk3MWQt
YmY4ZjNkNDM4ODRmLzEvck1HYWpIOFhRUlJKeDlTUC1UQ05KSU11bFNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mNDA1YTItNGUzZS00NjIxLTk3MWQtYmY4ZjNkNDM4ODRm
LzEvck1HYWpIOFhRUlJKeDlTUC1UQ05KSU11bFNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwFB5ZFE
eNlRzCaFq1sAAdHH4LJspQg5gqsqScvhGlb2BAAjKeuUittEMoscxTUUY36Kcjtx
kujngZEg/7neRoGqUaclVg1XCe+A3wfH2e6p37UnVh3VMBi2rySMvxMHZIUun8z+
vlWU8cfpkJg9uGZcNrQBkdPPAG30Z/t9pCUv/CIQKEiBXoNazwrnxCI65dk4PN2u
mKFC0UNYBDCdWBudKbTMwd6nF+hYFGKdpvJKwXC1rlnGvuOixyyvqniXsVJx9kFD
noxPHItnwmP36ode3FcdAxOybga2EkqGtRogVWDImZTEbn/+tJdIr7uZx8MY66l9
yH/55ef6Hfjb4Q==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:00 2025 by rpki-client