Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft
File: ml_TZv526ZmG92gN_M89y5TW3hQ.mft (raw, json)
Hash identifier: xnLVSdmmLvGifkNOc7VpjlOf3VkyIirtEhtQFi0Ydbc=
Subject key identifier: FC:71:C9:9A:8F:68:A5:EE:F4:21:84:CB:73:3F:D5:B4:AD:8C:01:46
Authority key identifier: 9A:5F:D3:66:FE:76:E9:99:86:F7:68:0D:FC:CF:3D:CB:94:D6:DE:14
Certificate issuer: /CN=9a5fd366fe76e99986f7680dfccf3dcb94d6de14
Certificate serial: 019751FD8A7E0A083525FBB4707EAD1E00A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml_TZv526ZmG92gN_M89y5TW3hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft
Manifest number: 040E
Signing time: Mon 09 Jun 2025 00:00:59 +0000
Manifest this update: Mon 09 Jun 2025 00:00:59 +0000
Manifest next update: Tue 10 Jun 2025 00:00:59 +0000
Files and hashes: 1: ml_TZv526ZmG92gN_M89y5TW3hQ.crl (hash: 24ybXLR2a0dfTeSA/tV3veDfx3zZ10FS9DoUouQ89oE=)
2: nzhgmUHMBkXurs4lxO-vVG71nK8.roa (hash: naLy7uq1sBONgf+ZVhFHwkdla3yLH7XoG0HQQOUDogs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml_TZv526ZmG92gN_M89y5TW3hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:fd:8a:7e:0a:08:35:25:fb:b4:70:7e:ad:1e:00:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5fd366fe76e99986f7680dfccf3dcb94d6de14
Validity
Not Before: Jun 9 00:00:59 2025 GMT
Not After : Jun 10 00:00:59 2025 GMT
Subject: CN=fc71c99a8f68a5eef42184cb733fd5b4ad8c0146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:86:74:ea:79:3c:71:b3:c9:c0:ed:8b:f5:
ce:f6:98:c0:c6:0d:33:7f:4e:4b:6c:dd:62:4c:32:
4c:c0:48:96:d3:d0:cb:9c:59:3d:ae:80:d7:33:2d:
ce:4b:ca:00:69:08:a2:09:90:92:c0:e3:08:e7:c8:
cf:6d:7d:0d:05:e1:61:1c:7b:2d:5b:c8:ef:1d:b6:
d0:cc:34:d7:a9:7a:79:9a:7e:e0:50:e4:7d:ef:fc:
f4:26:85:5d:a4:c7:8c:2a:3d:ca:63:61:25:a9:9f:
4a:3c:ba:9a:e6:96:f9:fb:ea:d1:1f:08:08:63:56:
fc:7a:a4:bb:05:1a:85:77:b8:e5:36:09:5b:c5:16:
74:e1:46:47:e4:44:ee:ab:27:c2:2d:48:95:2f:44:
31:ad:48:8f:8b:ef:e4:aa:69:50:7d:cd:78:05:ea:
4a:71:a2:52:ce:59:36:35:70:7f:fc:f6:22:80:8c:
4d:a0:41:20:73:74:cc:96:cf:39:7d:b1:87:29:3d:
c2:f8:64:a5:f4:10:34:4c:ab:6b:87:84:0a:f1:79:
b2:dc:8c:4b:3d:e8:b2:9c:0a:8c:ec:cd:78:cf:f3:
56:e3:8d:06:b9:7d:89:a4:b8:fa:93:4d:3b:78:ec:
08:6d:3e:fd:17:28:4c:a7:2a:b8:c2:73:e0:c5:a9:
91:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:71:C9:9A:8F:68:A5:EE:F4:21:84:CB:73:3F:D5:B4:AD:8C:01:46
X509v3 Authority Key Identifier:
keyid:9A:5F:D3:66:FE:76:E9:99:86:F7:68:0D:FC:CF:3D:CB:94:D6:DE:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml_TZv526ZmG92gN_M89y5TW3hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:bb:bd:97:e9:f1:17:d0:e9:d9:c5:8a:f8:8a:70:6d:3f:04:
78:a0:62:3d:7d:4e:1b:49:18:c3:db:f2:e1:69:19:5a:a6:21:
9a:78:c6:a3:ca:07:c1:0c:62:d0:29:41:95:ea:f6:84:da:b0:
a4:3f:66:48:b8:18:9e:5b:7c:d5:84:5d:3d:98:2f:7d:9f:db:
89:cd:01:9c:77:a8:0e:30:a1:73:6e:c7:02:ec:59:11:c4:2e:
dc:b3:b2:7c:8f:9e:5e:02:af:f0:10:75:2a:f9:35:2c:ac:8f:
98:ce:f1:bf:36:5c:d1:ec:32:d5:77:6c:35:14:58:e5:e8:3c:
fe:c4:3b:60:1b:02:ff:5c:67:9d:88:47:80:0b:39:80:35:62:
be:66:73:9f:3e:ca:6e:2b:b7:b7:1d:c9:54:7d:12:67:76:19:
20:dc:94:e6:2b:5e:78:d1:de:86:05:89:87:95:e3:99:9a:d3:
16:da:d0:50:d3:c5:87:52:3d:20:16:94:37:3e:c1:f7:47:a9:
af:95:dc:d8:a8:46:90:c7:f1:99:d8:e1:66:d1:92:38:61:a2:
8c:40:54:19:5c:aa:00:f7:de:d6:a1:78:20:45:b2:da:77:17:
cc:94:65:65:e5:20:5d:bc:fa:5a:f4:61:82:6b:c6:1a:38:8f:
34:27:0c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:17:20 2025 by rpki-client