Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
File: Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft (raw, json)
Hash identifier: RVovbLNOmroP6M2nQw2pZITehVJ6ESAGPqq6WD4Mh0E=
Subject key identifier: D8:F7:D6:7C:6D:BF:31:3E:7E:B5:75:3E:4D:3C:C8:A8:FD:D1:E0:D7
Authority key identifier: 32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56
Certificate issuer: /CN=325e98947fc948d5b62dfb85a7cb3a72a0672656
Certificate serial: 01974B8D413C3396D31CC0040A895D58C346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 18:00:37 +0000
Manifest this update: Sat 07 Jun 2025 18:00:37 +0000
Manifest next update: Sun 08 Jun 2025 18:00:37 +0000
Files and hashes: 1: Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl (hash: qE3d533bJCum6TG42yYeH2+rB/rXrxbuyM/a8s/jjUE=)
2: dUAVKEm8GyRd3ukyK_fDNJXfcdU.roa (hash: qbWS0ULrRE394HKcS/wIy0AZwGNwfCJA/twuzA/0BRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:41:3c:33:96:d3:1c:c0:04:0a:89:5d:58:c3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325e98947fc948d5b62dfb85a7cb3a72a0672656
Validity
Not Before: Jun 7 18:00:37 2025 GMT
Not After : Jun 8 18:00:37 2025 GMT
Subject: CN=d8f7d67c6dbf313e7eb5753e4d3cc8a8fdd1e0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:36:02:67:58:ac:d5:02:19:16:26:a6:9e:37:
ce:cf:91:5c:69:a5:6a:df:db:15:87:6b:4c:7e:18:
c8:47:af:1b:78:e8:04:e1:9d:76:3b:9e:a0:56:ed:
3f:ad:95:44:dd:d9:aa:f2:01:3f:0b:b2:e7:6b:cc:
9e:0e:17:28:7f:28:98:6f:b7:14:b7:63:46:d5:7c:
50:d5:bb:d0:73:5c:20:97:e7:09:41:6b:cb:f7:7c:
6f:44:cd:9c:1d:54:3f:3a:e0:ae:23:8e:e6:59:83:
cc:6f:62:53:57:b4:f7:35:03:ab:47:9d:d9:2e:b0:
9f:b2:d3:56:eb:36:39:c1:ed:2d:33:e9:d2:84:40:
28:cb:38:8d:b4:60:af:d6:f2:93:50:c6:b7:dc:21:
36:18:95:d3:c9:30:05:d7:e9:f2:45:b3:45:25:c2:
d5:9c:2c:b9:0c:02:36:ce:b8:2e:f5:28:e8:49:8b:
3c:4c:2b:26:80:37:99:7d:7f:df:17:ce:47:1d:40:
e2:9d:fb:29:d1:8a:2f:e4:7b:36:49:56:f1:c3:78:
af:c8:60:97:eb:3e:f5:4f:4b:e5:5a:08:5e:e5:9d:
81:35:df:b8:94:3e:60:97:1f:83:29:2d:59:04:32:
f2:ba:0c:3e:2e:9b:27:56:60:11:8d:8c:4c:39:c7:
14:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F7:D6:7C:6D:BF:31:3E:7E:B5:75:3E:4D:3C:C8:A8:FD:D1:E0:D7
X509v3 Authority Key Identifier:
keyid:32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:1b:7a:92:5f:c5:28:9a:34:be:d5:90:49:a1:d8:36:ac:b1:
f0:8c:bd:4c:ea:f0:d4:54:84:67:a7:38:76:94:05:41:e9:5c:
e9:a9:ca:41:43:90:d1:c9:ab:05:6b:dd:8f:e5:60:55:c0:45:
34:d1:82:f9:10:db:d6:c2:85:b8:55:ec:9f:20:b1:5a:5f:35:
6a:6b:c0:6c:a5:24:e7:be:2b:b8:5a:be:4f:9a:2d:08:5a:66:
14:fc:54:85:24:1e:50:ae:0a:b6:f2:8e:09:0d:67:93:b6:13:
f8:08:4f:6f:5e:45:64:26:8b:22:59:f3:a1:31:51:1f:94:87:
97:f6:be:66:0b:7a:a6:71:7e:9a:f2:4e:cb:5c:5e:1c:4e:b7:
40:3f:11:cd:7d:96:a7:c3:c6:0e:18:88:10:e2:e2:37:cf:13:
84:5f:fc:83:c7:4b:cb:14:3f:e2:2d:dc:01:08:5b:11:22:ef:
69:4e:97:32:a9:ba:70:0c:6b:c5:6a:47:e7:e4:ed:0c:2b:fc:
af:f9:c6:5c:47:cc:a0:45:43:fb:95:a9:67:b7:85:34:11:f5:
4a:39:17:c4:2a:6b:87:8c:a5:a0:af:08:3a:70:3f:55:58:5f:
97:4a:28:8f:2c:4c:f4:39:ae:2d:96:49:21:dd:13:5b:05:0e:
97:e5:1e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:26:00 2025 by rpki-client