Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
File: MlDVjXew-l3OxPQq6W80e8gNqj4.mft (raw, json)
Hash identifier: ce10Q9tADX4Q4AM3++Rup2lL5mMH4p9RnsHkUcodEcc=
Subject key identifier: 8E:E6:41:A2:58:35:C8:02:F2:20:34:DC:A1:A2:AC:C0:24:17:FD:63
Authority key identifier: 32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
Certificate issuer: /CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Certificate serial: 01974E20519C89B693CA7280282FE1BD9020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 06:00:30 +0000
Manifest this update: Sun 08 Jun 2025 06:00:30 +0000
Manifest next update: Mon 09 Jun 2025 06:00:30 +0000
Files and hashes: 1: MlDVjXew-l3OxPQq6W80e8gNqj4.crl (hash: Jdp0+/yE6H5h34TBgJkfV4VdLtGInfIJx3brW2RSJLA=)
2: ndShIgCcbsHhUOk-1qX-uYRIuS0.roa (hash: czNtU+SX8QXrL7dVcdfeMOMIGpfeCslspqe7rpd0A8Q=)
3: xNxMZxSDyX7cldenO1Ro1zeTZuQ.roa (hash: EdeIoFQQfBBtul4Dl4kQ19MbiTrPJ3gXVWY5FjQfawo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:51:9c:89:b6:93:ca:72:80:28:2f:e1:bd:90:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Validity
Not Before: Jun 8 06:00:30 2025 GMT
Not After : Jun 9 06:00:30 2025 GMT
Subject: CN=8ee641a25835c802f22034dca1a2acc02417fd63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1e:2b:e0:20:a0:fa:24:76:37:31:ca:a4:d2:
b8:ef:73:3f:1e:6d:63:9a:4f:15:c1:57:b7:99:8b:
61:d0:e4:63:17:5a:c0:f0:5f:cd:d8:17:b7:70:c9:
6c:8b:6a:df:01:92:d8:31:4f:45:c7:53:81:38:ca:
84:db:89:a8:4c:f6:d6:64:14:65:27:f8:c0:4a:6c:
21:de:d4:d7:e0:2b:0b:e0:e1:7c:50:15:9f:2f:7c:
f8:39:02:fc:10:2b:75:5d:0c:8e:af:4f:d4:d7:dc:
55:46:b9:e5:aa:cc:89:ee:1d:70:ca:28:ba:db:8b:
a3:52:78:70:e9:d9:e4:3e:7c:00:29:e0:d4:b0:6d:
b8:c9:66:65:a4:dc:19:13:a6:b6:07:cd:d3:60:dd:
23:ff:20:53:2c:83:ce:b2:c4:e6:99:6b:71:67:ee:
0a:c1:34:63:2b:d1:be:e8:d1:f5:6d:f6:f9:eb:fb:
d1:ec:da:cb:90:a0:45:b3:bc:3d:cd:b1:bf:25:7a:
de:54:0a:2c:4e:cc:67:0f:d5:f9:20:b6:1e:96:50:
60:b3:21:1b:68:41:8d:50:b9:e7:40:9f:68:cf:d4:
67:ee:35:7a:a6:96:e6:a5:b3:f3:08:2f:fb:55:dd:
f5:44:ba:9b:10:84:9e:6b:47:44:fc:5a:5b:ba:f1:
ec:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E6:41:A2:58:35:C8:02:F2:20:34:DC:A1:A2:AC:C0:24:17:FD:63
X509v3 Authority Key Identifier:
keyid:32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:0e:56:ef:31:39:78:ef:b5:ce:c0:7b:0c:93:70:54:22:27:
ac:0b:d8:99:f0:e8:65:61:17:be:cf:17:ee:d8:f2:cc:48:f8:
7f:d4:42:cf:e5:9d:54:16:69:b6:c1:57:f6:1d:3d:f6:9d:bc:
e2:e2:1d:2f:64:f1:2f:d6:ed:af:9d:81:01:5c:7c:19:c4:1c:
88:fa:79:2a:af:db:1f:e4:65:bc:83:eb:50:02:ef:c6:41:3d:
81:10:6c:ef:3b:f5:d9:9f:1e:fc:4e:4b:2f:45:df:b5:7b:00:
78:6e:99:af:5c:9d:a5:f8:13:ff:8c:5d:24:a2:05:d1:b9:72:
15:b3:1e:0a:57:16:82:9c:e5:7e:cb:f2:20:51:d6:f6:ec:41:
af:4f:fb:95:79:4c:80:32:45:ec:66:4d:bf:61:7f:99:41:bc:
ee:63:7b:54:f6:f8:e5:0c:60:11:d9:d2:ad:54:16:da:ce:54:
ec:ef:6f:c6:ad:2a:99:6d:b9:3f:99:a5:80:97:f9:4b:4d:b6:
56:4c:6b:02:48:d3:74:be:ba:d6:8f:2b:12:64:1d:cb:a1:8b:
55:4a:ac:8f:78:0a:04:a6:8a:4a:d9:a9:d0:f9:d5:57:45:90:
30:70:be:cc:b8:b2:3d:23:9b:f6:97:37:1f:ee:3c:31:4a:3b:
e6:2b:72:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOIFGcibaTynKAKC/hvZAgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNTBkNThkNzdiMGZhNWRjZWM0ZjQyYWU5NmYzNDdiYzgw
ZGFhM2UwHhcNMjUwNjA4MDYwMDMwWhcNMjUwNjA5MDYwMDMwWjAzMTEwLwYDVQQD
Eyg4ZWU2NDFhMjU4MzVjODAyZjIyMDM0ZGNhMWEyYWNjMDI0MTdmZDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmB4r4CCg+iR2NzHKpNK473M/Hm1j
mk8VwVe3mYth0ORjF1rA8F/N2Be3cMlsi2rfAZLYMU9Fx1OBOMqE24moTPbWZBRl
J/jASmwh3tTX4CsL4OF8UBWfL3z4OQL8ECt1XQyOr0/U19xVRrnlqsyJ7h1wyii6
24ujUnhw6dnkPnwAKeDUsG24yWZlpNwZE6a2B83TYN0j/yBTLIPOssTmmWtxZ+4K
wTRjK9G+6NH1bfb56/vR7NrLkKBFs7w9zbG/JXreVAosTsxnD9X5ILYellBgsyEb
aEGNULnnQJ9oz9Rn7jV6ppbmpbPzCC/7Vd31RLqbEISea0dE/FpbuvHsdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7mQaJYNcgC8iA03KGirMAkF/1jMB8GA1UdIwQY
MBaAFDJQ1Y13sPpdzsT0KulvNHvIDao+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWxEVmpYZXctbDNPeFBRcTZXODBlOGdOcWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iOWZjZTctMDkyNy00ODQ3LWI2MDUt
M2UzMGE0YzRiODI2LzEvTWxEVmpYZXctbDNPeFBRcTZXODBlOGdOcWo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iOWZjZTctMDkyNy00ODQ3LWI2MDUtM2UzMGE0YzRiODI2
LzEvTWxEVmpYZXctbDNPeFBRcTZXODBlOGdOcWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASw5W7zE5
eO+1zsB7DJNwVCInrAvYmfDoZWEXvs8X7tjyzEj4f9RCz+WdVBZptsFX9h099p28
4uIdL2TxL9btr52BAVx8GcQciPp5Kq/bH+RlvIPrUALvxkE9gRBs7zv12Z8e/E5L
L0XftXsAeG6Zr1ydpfgT/4xdJKIF0blyFbMeClcWgpzlfsvyIFHW9uxBr0/7lXlM
gDJF7GZNv2F/mUG87mN7VPb45QxgEdnSrVQW2s5U7O9vxq0qmW25P5mlgJf5S022
VkxrAkjTdL661o8rEmQdy6GLVUqsj3gKBKaKStmp0PnVV0WQMHC+zLiyPSOb9pc3
H+48MUo75ityJA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:30:34 2025 by rpki-client