Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
File: MlqLaI3q27ke--B3Iwi6yfMEpTM.mft (raw, json)
Hash identifier: D+bqV6Va8QZIwIy9WYo1hxP8Ptttzktba2HBafqvQEs=
Subject key identifier: E8:C6:81:6E:09:A4:0B:2D:D5:02:B7:99:CA:08:B2:83:83:3B:C0:D2
Authority key identifier: 32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
Certificate issuer: /CN=325a8b688deadbb91efbe0772308bac9f304a533
Certificate serial: 01974DE99C5E9931D0CCED4E8486493D3C8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
Manifest number: 146D
Signing time: Sun 08 Jun 2025 05:00:44 +0000
Manifest this update: Sun 08 Jun 2025 05:00:44 +0000
Manifest next update: Mon 09 Jun 2025 05:00:44 +0000
Files and hashes: 1: CFfUxIFh9E3XN1EntjmEwUZAUfA.roa (hash: LKtIJVn3SPxlyKkXSz+8d7gF12Vd76h6cTs7tmGxKjM=)
2: MlqLaI3q27ke--B3Iwi6yfMEpTM.crl (hash: 0QmIF+t3C0Qn9cbBAPLPoiSkqjoquiNnRXKh1Sde+W4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:9c:5e:99:31:d0:cc:ed:4e:84:86:49:3d:3c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325a8b688deadbb91efbe0772308bac9f304a533
Validity
Not Before: Jun 8 05:00:44 2025 GMT
Not After : Jun 9 05:00:44 2025 GMT
Subject: CN=e8c6816e09a40b2dd502b799ca08b283833bc0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:da:e3:08:ee:23:d4:ba:9b:53:c0:0b:c2:72:
27:42:4e:a9:06:97:15:71:c8:01:a3:03:0b:70:f7:
2b:39:57:82:55:67:ac:87:6b:9e:d5:12:49:fb:72:
1e:ee:47:40:6c:7a:36:f2:32:81:94:1c:c8:d3:33:
2e:82:32:ab:21:9f:61:49:f8:f3:ce:30:b6:b6:7f:
30:30:35:ea:66:2f:6a:d3:5d:bf:c1:ab:75:7c:c4:
47:c0:f7:7e:80:17:48:2b:1c:2f:63:48:05:3f:80:
50:56:9d:34:ea:94:b8:c1:d4:ce:f1:52:28:3c:e2:
94:b7:5b:a9:64:4c:ab:7f:20:9e:32:78:e2:5c:1e:
7d:aa:2c:ad:e5:a2:85:ba:45:31:08:78:8b:9e:a6:
4e:fd:ee:39:f9:de:09:e2:8d:1b:78:8e:10:d5:bd:
82:6a:78:05:2e:a8:ce:fb:4a:72:66:b9:b9:01:03:
96:01:c0:17:38:ab:1b:fc:bd:fb:ae:42:d9:23:69:
f6:05:77:ec:70:6a:fd:5f:92:e3:3f:08:a7:83:cb:
79:5b:d6:10:f4:43:bb:d7:00:1a:6e:54:b1:ea:9a:
78:ba:73:bf:0f:cc:87:78:96:30:8f:4e:41:a8:fc:
3c:48:93:66:47:91:9a:0b:7d:d0:8b:06:37:4f:38:
5c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C6:81:6E:09:A4:0B:2D:D5:02:B7:99:CA:08:B2:83:83:3B:C0:D2
X509v3 Authority Key Identifier:
keyid:32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:1a:1a:20:5f:c8:5e:9a:e9:e5:84:a3:c9:85:fb:85:53:c9:
5e:2a:8b:78:5e:f9:cc:ae:ad:1f:85:32:aa:af:1c:34:21:01:
2a:44:13:72:25:74:ec:b8:02:b4:7c:8b:01:b6:f6:10:a0:b4:
cd:d2:44:40:37:39:81:af:03:e2:bf:4a:df:65:16:4f:9c:6f:
78:d2:c7:51:8c:e3:6c:6e:f3:dc:17:34:f1:50:1c:4c:f6:6a:
65:9a:86:67:44:b2:55:d6:1e:14:11:dd:da:f5:ed:33:ae:93:
dc:65:2c:d5:9f:ae:7d:4e:27:e6:05:0f:69:06:8a:14:35:e9:
7c:a4:99:72:89:09:95:58:45:c7:41:be:a0:c5:c5:6d:25:97:
86:44:a2:08:6d:68:0b:f8:72:41:53:aa:b6:95:01:a2:1a:46:
20:d7:64:25:ce:b4:d3:92:6c:33:bf:7d:71:dd:df:79:11:f3:
0b:3f:07:77:b6:c7:25:79:f0:79:cc:3a:bf:7a:8f:aa:48:fe:
90:b5:b4:c5:3e:c0:d6:3b:3e:57:a4:e5:30:6a:17:17:07:41:
c5:94:18:71:42:4f:15:b4:b9:7e:9f:e3:48:d9:9b:7e:3a:fb:
ed:c8:30:e9:6f:de:96:f9:e8:34:b4:79:74:1a:ed:eb:da:c3:
a7:a7:89:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:57:32 2025 by rpki-client