Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
File: ml8NkStedHrlaNgIoEAptOvGbkc.mft (raw, json)
Hash identifier: 5bnbs8Xm06cecfUcUh9eHXYgjK5lgUqLEkwnfvuri6g=
Subject key identifier: 7E:73:5F:34:3E:C1:2E:C5:29:C7:9E:61:74:03:80:C3:7D:64:DD:BD
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial: 01984BC2332FB881B04A5AE3A7B33132883D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
Manifest number: 0D2B
Signing time: Sun 27 Jul 2025 12:01:14 +0000
Manifest this update: Sun 27 Jul 2025 12:01:14 +0000
Manifest next update: Mon 28 Jul 2025 12:01:14 +0000
Files and hashes: 1: 0qMVRghLmSWdSNAhWBOt8uMlDGs.roa (hash: kOLfFL2EFwiaYaCo8C+GmQcPeyIeF+5TOTsfcPc2OmI=)
2: CoddMQm6LTCSZZwVDyRLAqAXOLQ.roa (hash: wya/ieDlwU5gulg2lLSwRO1xnpgtUhKNOqwGEK2Nmn0=)
3: ml8NkStedHrlaNgIoEAptOvGbkc.crl (hash: vyFRb50RGZY7UTGmkmXMY/GTzrVsFRWLU3QNDo95ZgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c2:33:2f:b8:81:b0:4a:5a:e3:a7:b3:31:32:88:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Validity
Not Before: Jul 27 12:01:14 2025 GMT
Not After : Jul 28 12:01:14 2025 GMT
Subject: CN=7e735f343ec12ec529c79e61740380c37d64ddbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ee:b6:21:5d:09:34:72:e1:2a:94:b6:2f:72:
58:64:fe:bb:e3:55:7f:5f:7f:0a:21:82:3f:8d:40:
0f:8d:0b:e6:fe:5c:46:06:8b:06:28:ac:6b:4b:15:
50:af:a1:27:9e:cf:a3:0e:b6:08:23:bd:d2:a3:7e:
67:f1:2d:42:6f:56:62:27:44:ab:19:ad:78:fc:2c:
ee:62:55:9a:c9:ef:b6:3b:04:37:94:1a:66:8e:01:
be:a8:43:0b:e1:05:01:7e:0b:fc:de:a0:89:41:11:
a9:d1:0a:5e:6b:ab:9e:fc:20:d8:2e:d1:2d:30:a6:
ee:d7:32:60:03:ed:5c:0c:52:8a:64:48:63:97:29:
e7:86:b1:89:5d:b1:0d:73:5e:86:87:ab:30:f4:92:
c0:91:f9:15:88:a5:5f:4f:42:fa:7a:1d:74:d1:b0:
ad:db:bf:b4:1b:45:89:14:df:cd:a3:2b:db:ba:3a:
1f:77:97:eb:34:fa:e9:77:3d:4f:d4:39:c3:e3:1e:
f5:61:6b:bf:c7:ad:02:6e:ce:56:2c:b1:24:c0:4a:
dc:6d:a2:cc:96:81:07:6c:9c:b2:33:a3:da:2f:aa:
6a:ac:48:57:73:3b:1b:28:8a:8a:b7:33:ab:cb:85:
ee:b6:ae:e5:3c:fa:12:93:65:31:fa:c5:80:06:81:
63:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:73:5F:34:3E:C1:2E:C5:29:C7:9E:61:74:03:80:C3:7D:64:DD:BD
X509v3 Authority Key Identifier:
keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:44:a9:d0:1f:4f:45:dd:01:ab:86:0c:34:8e:4e:da:33:75:
c2:0d:0a:3a:87:c4:1d:b0:9d:2e:4d:31:e7:1a:94:71:83:22:
77:c3:f3:5c:a6:6f:90:58:1c:6e:ef:d0:fa:28:ac:9d:16:8b:
71:eb:bb:bd:59:20:20:3a:15:8e:c8:86:ea:78:a2:97:95:3c:
65:9a:f2:82:07:b9:ea:5d:71:71:8a:d8:67:62:2f:86:2c:7c:
93:4b:98:99:05:21:c2:8d:f1:7d:54:d6:2f:10:fa:98:2d:7f:
d4:4c:8a:00:33:7b:16:aa:d1:01:99:8c:66:dd:6b:fb:5a:81:
80:89:cf:0f:cc:a8:9e:ad:f2:f1:f0:ff:d8:3e:d5:31:d6:8b:
2b:f9:40:f6:ee:97:3a:b2:1e:5c:a2:79:5a:91:2f:21:8a:7b:
cc:52:df:79:52:bf:b8:2b:a7:3f:fb:26:6b:ff:83:2e:49:a3:
78:d2:1b:b8:98:ad:ca:88:1a:e8:a6:b3:be:1e:aa:86:a0:13:
c9:fc:10:a5:a2:ce:05:28:80:86:c3:6a:e0:1c:68:fe:96:5c:
78:c8:ce:6c:ec:65:08:2c:f0:7f:4f:41:3c:ba:cc:46:fd:c4:
97:ec:61:24:40:bf:b7:02:4c:3a:35:8e:ff:8f:02:01:f6:c3:
39:1f:a4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:36:09 2025 by rpki-client