Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
File: MlDVjXew-l3OxPQq6W80e8gNqj4.mft (raw, json)
Hash identifier: d0zOSNtr2QDm0NoYZbKjv7grRxW7udJr9EkbGvQYeNw=
Subject key identifier: 8C:11:5D:AB:92:AD:35:85:8D:F1:F8:2A:B1:80:C7:3F:0B:BD:37:65
Authority key identifier: 32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
Certificate issuer: /CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Certificate serial: 0198530D6C6027046EAB3093E492A279DC45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
Manifest number: 1606
Signing time: Mon 28 Jul 2025 22:00:45 +0000
Manifest this update: Mon 28 Jul 2025 22:00:45 +0000
Manifest next update: Tue 29 Jul 2025 22:00:45 +0000
Files and hashes: 1: MlDVjXew-l3OxPQq6W80e8gNqj4.crl (hash: cWnYiBaoLsEvJ1+6/7Vm0MGvOapWozt9zkVU0T6E3gQ=)
2: ndShIgCcbsHhUOk-1qX-uYRIuS0.roa (hash: czNtU+SX8QXrL7dVcdfeMOMIGpfeCslspqe7rpd0A8Q=)
3: xNxMZxSDyX7cldenO1Ro1zeTZuQ.roa (hash: EdeIoFQQfBBtul4Dl4kQ19MbiTrPJ3gXVWY5FjQfawo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:6c:60:27:04:6e:ab:30:93:e4:92:a2:79:dc:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Validity
Not Before: Jul 28 22:00:45 2025 GMT
Not After : Jul 29 22:00:45 2025 GMT
Subject: CN=8c115dab92ad35858df1f82ab180c73f0bbd3765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:29:d8:16:cb:c9:22:ac:fc:1e:f2:de:73:a0:
05:98:6c:8f:80:15:a8:c8:87:8a:bc:3b:4c:a1:40:
01:77:7d:b3:d2:30:4b:67:0b:6b:9e:e5:94:95:cc:
f7:26:aa:47:bf:ce:d9:cd:b3:b8:26:8d:98:34:98:
aa:b8:98:12:51:0e:af:c7:37:e4:06:58:af:80:1d:
0d:0a:50:d2:fb:a0:ce:2d:d0:3f:f8:82:3b:41:4f:
5f:3d:cb:cd:44:93:f5:cd:5f:81:73:ef:b6:fb:fe:
2d:f9:39:ee:dd:87:a0:23:f3:59:40:c2:b7:d8:65:
ce:68:b3:7f:03:ef:cf:53:7d:7f:c4:22:08:d8:02:
91:e6:8c:cd:d9:a3:71:47:af:5a:1a:d4:67:0c:44:
ba:c3:58:73:ff:8a:90:2a:f0:ab:fe:1d:c6:31:a1:
70:de:c9:cf:0b:f5:95:04:04:6d:7c:27:ef:5f:da:
b3:bc:57:75:fb:a5:fb:25:43:31:bb:95:9b:d6:92:
54:17:c8:c6:bf:e0:e0:91:07:65:fa:92:13:f5:f7:
ea:e5:c4:6e:20:2d:96:70:c6:76:fd:79:28:56:e5:
d4:7c:5f:3c:c4:0c:00:e5:11:ab:b8:84:07:f8:c2:
49:61:ab:be:7d:46:d1:65:ce:b1:42:11:21:0e:42:
cb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:11:5D:AB:92:AD:35:85:8D:F1:F8:2A:B1:80:C7:3F:0B:BD:37:65
X509v3 Authority Key Identifier:
keyid:32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8c:72:e9:ee:43:84:30:87:6d:2f:d9:2f:61:e5:0c:1e:b5:
bd:3b:c1:81:8e:c2:23:5c:b5:60:fc:f3:10:80:b2:6a:1f:b4:
25:f4:d0:b5:22:c9:6b:d2:58:06:1f:db:1f:a7:1e:0b:dc:05:
75:0f:15:c2:16:0e:eb:3e:e1:34:83:6e:22:21:5a:f6:92:fb:
af:12:31:ac:ad:f7:42:76:0a:39:05:e9:17:77:a6:d3:b4:95:
43:ee:1b:9a:32:f5:91:65:b9:5c:5d:6d:62:fa:7a:a7:52:9a:
87:df:84:8d:cf:e9:6b:9e:ba:12:35:de:81:d3:e5:30:ac:3d:
0b:67:6c:c5:e7:11:03:d8:38:d3:be:1b:08:b7:f0:cf:5a:3b:
ae:8b:e4:e9:0f:93:4e:37:0a:0a:d5:7a:d0:37:c4:c4:f7:a5:
d3:3e:f5:ec:47:83:a8:4f:44:0f:6c:24:7a:78:73:c1:d1:50:
c8:66:32:d7:75:c6:bd:f5:48:d0:9a:24:74:33:f1:90:71:10:
e4:66:5b:31:c1:15:4b:27:8b:7f:c9:b6:23:ee:7f:6c:db:31:
73:c6:63:e1:ea:01:75:af:fa:92:2e:6f:ae:08:1a:f7:1d:ed:
70:8d:84:77:8f:c1:a5:f8:6d:42:38:3c:dc:db:d1:6d:e6:49:
48:40:00:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:01:13 2025 by rpki-client