Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
File: mlVQ6QipuWiMKarJiVNT3qg2xFo.mft (raw, json)
Hash identifier: FcqFYVdLJmuA+dz6EdSD8DFobaDa0QANUekobZaDUpA=
Subject key identifier: D1:7C:E6:1A:61:16:65:39:84:80:A2:4C:32:AF:2A:AA:C2:97:D3:64
Authority key identifier: 9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
Certificate issuer: /CN=9a5550e908a9b9688c29aac9895353dea836c45a
Certificate serial: 0199C42003DC67C07A680DE7B7DF56D069A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
Manifest number: 16CB
Signing time: Wed 08 Oct 2025 14:00:56 +0000
Manifest this update: Wed 08 Oct 2025 14:00:56 +0000
Manifest next update: Thu 09 Oct 2025 14:00:56 +0000
Files and hashes: 1: 9Wsyc-JvO9JC7caCozj-SAG1bJs.roa (hash: bKm+mUgzyZClr4J+G/kqKks+sApaN1YwjRFddgUbnbE=)
2: Ja52sUHZmNxWRgmcFqK35S3gf4U.roa (hash: gzJdIYNLI5m1VhTa8D7lky18Y5IJWwZN4llDEnmcK1o=)
3: mlVQ6QipuWiMKarJiVNT3qg2xFo.crl (hash: vvGGnmstTA2gjZ1N1tuQAutajbWtZ0b3Ylprvxl61Vo=)
4: pvgIN6QNHNBs60IvrUFIahwkpN8.roa (hash: SRb6cmNEXQNaL5JeiDfLUBlTpbbbs7eTPPHe0FchMao=)
5: qVkX5RlHS3sPyQOw3galYp3H46c.roa (hash: o5KCCl+KevQFiSBwzLjv5f5HLVAkS9bSZz+fAqp6nWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:20:03:dc:67:c0:7a:68:0d:e7:b7:df:56:d0:69:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5550e908a9b9688c29aac9895353dea836c45a
Validity
Not Before: Oct 8 14:00:56 2025 GMT
Not After : Oct 9 14:00:56 2025 GMT
Subject: CN=d17ce61a611665398480a24c32af2aaac297d364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7c:70:9f:bc:9e:21:83:04:20:6a:65:7c:54:
81:e6:4a:c6:c4:5d:9c:e1:e6:f6:3a:13:e8:4d:23:
bc:7b:ef:ec:2e:c5:f9:82:f5:a8:b3:a2:c9:8f:db:
af:6a:36:78:d3:8c:ad:4b:66:b9:d6:26:fe:61:e4:
7a:1f:a3:41:95:96:b7:09:39:75:de:a5:27:0d:bb:
aa:3c:3f:7b:65:4d:0a:3e:67:ab:a8:a4:a1:41:10:
d8:9e:a6:8a:e3:66:c5:95:27:56:d2:e4:06:f1:ef:
9a:2c:3e:b5:97:a5:82:0f:c7:5b:52:c4:f8:82:f6:
e7:51:a0:d4:1a:0f:d6:31:7b:39:0c:5d:d9:6a:26:
dc:97:4d:44:06:90:34:6b:76:f4:fe:d8:0d:ff:4f:
30:dc:2f:40:21:d0:3d:66:1f:0c:6a:9f:73:9c:26:
0b:ff:5d:2b:85:7d:30:59:be:5e:45:2a:b1:c5:cd:
71:d1:e4:43:00:3d:b5:87:ae:a8:60:6e:96:ee:cb:
90:f0:d4:14:58:a8:e2:87:2b:4e:93:24:4b:71:f5:
a4:f3:36:77:bc:88:25:e2:6c:0b:91:9d:3b:b3:0e:
76:a3:e9:93:29:c4:c2:0c:85:2f:65:27:7d:56:08:
55:0d:6a:da:93:a0:29:45:23:5f:45:74:ad:8b:fd:
f7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7C:E6:1A:61:16:65:39:84:80:A2:4C:32:AF:2A:AA:C2:97:D3:64
X509v3 Authority Key Identifier:
keyid:9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a2:c9:f8:d2:df:c9:9c:a5:47:2a:e3:a2:f9:85:fb:db:df:
21:4c:e2:27:a1:ca:90:7d:c1:1d:5c:53:04:b7:79:d2:d9:17:
50:2e:ef:cc:24:91:bd:cd:20:8a:48:b2:aa:13:61:c9:2a:6b:
55:15:a7:07:f2:fc:ac:8e:b2:2e:75:6b:d6:d7:2d:11:23:95:
e8:f7:96:03:9a:45:03:52:55:c4:92:f7:86:32:e8:ff:1d:42:
7b:7d:2b:ca:00:c0:a5:9b:ce:cb:5d:df:3b:b2:ec:4b:f3:45:
2c:7b:d2:35:2e:03:1a:a6:54:6a:40:78:6a:00:4a:66:de:40:
a5:85:70:b7:b6:d4:84:00:23:5a:38:f5:79:a3:a3:88:37:14:
7b:11:d8:b3:8d:c8:63:31:d6:1b:df:e7:ec:5f:02:42:f3:c9:
37:fd:60:b4:65:bf:7b:9d:94:a8:17:a3:41:90:16:be:18:38:
5c:d1:81:43:0b:2b:b3:a6:96:73:53:0d:59:9a:d6:48:82:b0:
2c:30:0d:eb:2c:1e:03:9e:3e:05:c4:c2:7d:b2:50:97:ed:bd:
1c:0d:72:72:05:6e:d1:bc:14:df:aa:8c:38:0c:15:e3:20:71:
40:a7:7c:dd:fc:0b:47:e7:0d:ae:d3:a2:3c:2c:a5:14:cd:71:
a4:21:f0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:16:21 2025 by rpki-client