Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
File: mlJqc86Pn2LBShGi6pE-wnPVjEY.mft (raw, json)
Hash identifier: a8bE62P9E78LrUQIE/qu9vQy/xGXjJqTgU5yRoaZokE=
Subject key identifier: 24:EB:63:7D:2C:3A:4F:90:71:6B:0B:AF:B5:30:2D:DB:01:C3:D9:CB
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Certificate issuer: /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial: 019A1EE3F686B6EABCFF1145543E8A8B643A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
Manifest number: 1700
Signing time: Sun 26 Oct 2025 05:00:47 +0000
Manifest this update: Sun 26 Oct 2025 05:00:47 +0000
Manifest next update: Mon 27 Oct 2025 05:00:47 +0000
Files and hashes: 1: 37xCCUhytigOkbo8skkNphl6CDo.roa (hash: EZZOllbO3rU0Aq71pT+LnxPWU1OR5RUdYC5xtbHlqV0=)
2: EzlaPz9ay6RZ4KUo_Zx1lcWyYyE.roa (hash: 8mVwmiELeQwOp0IzUJ7CNWnPRJxXboTOfv7waHdL35E=)
3: HmloYPhthfBI7_3S01XoeHMHM_0.roa (hash: zT7e2sKU35SC+6Uf05YzOC00VreFA+3zPNOd9kp3exg=)
4: aBb_QnqfCmFuIbPpQn9d7-oaQds.roa (hash: 9cT2/7QK1Jv3/LAJrIXNohZ9zwR8FjnbBcxZKBheYgE=)
5: bJE571Es9mWytmWy8Hm2hU0LvwQ.roa (hash: G4ykv8ElUqNocIC2Di9TU9f+tq6JYb2XSPQUlNwbQs8=)
6: jNEc9JKntfCRYR_UowBHCVGcgfU.roa (hash: wUVreTUUoleXZY0NQI3FxCnAa07OL9N5o1BFPoQRf+k=)
7: lPFksRdLJVDV0BeRSYCopl0nK1A.roa (hash: Z/l2sT/TM2PqTeCwRcYw3ZHE/PJvSKLQBMiM2PLHoBk=)
8: mlJqc86Pn2LBShGi6pE-wnPVjEY.crl (hash: oTrpcCQf0jwzIWG5eTLFj8KuJ38Y41fPM6Rd8EceF1c=)
9: rxtrSvmD_RFnWzieVlVkl0VvNHg.roa (hash: /miHkpCVQbdxK2uWlYSN1Ko3dggZV4gzjlL/pMNtIqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:e3:f6:86:b6:ea:bc:ff:11:45:54:3e:8a:8b:64:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Validity
Not Before: Oct 26 05:00:47 2025 GMT
Not After : Oct 27 05:00:47 2025 GMT
Subject: CN=24eb637d2c3a4f90716b0bafb5302ddb01c3d9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:aa:65:52:51:d3:91:ed:8a:9b:9e:85:fc:53:
46:bf:0f:c7:04:52:a9:4f:49:52:0f:b9:6c:cb:91:
8a:ca:99:9a:4d:41:2e:1c:a1:07:67:c3:9b:c7:4c:
83:10:ec:72:43:6e:6b:72:13:ae:02:84:95:22:11:
cd:d3:59:55:76:42:60:09:91:0e:0c:91:f9:25:de:
24:43:41:cd:02:32:1e:81:0c:a2:66:84:8f:63:a9:
18:31:5f:8b:08:c3:58:70:9d:ad:1e:9a:4a:33:c8:
dd:29:99:2c:02:6b:de:a2:60:4e:ba:e4:b3:24:7e:
ba:99:b0:8a:e2:3f:24:3a:b5:1e:ca:dc:a6:8a:08:
9e:a0:7d:28:1c:ad:6b:85:66:bf:57:54:e5:4f:a6:
5b:25:67:5c:74:22:00:d8:06:fe:e3:85:56:a3:3e:
02:75:f1:54:18:c6:ce:4b:b8:1c:5f:2c:96:bf:a1:
cb:75:6d:9e:26:60:9f:31:ed:d6:9d:5b:47:dd:9e:
f0:59:2d:2c:a1:97:70:c1:09:10:26:48:77:a6:3b:
b5:b6:13:09:54:b8:bc:6d:80:e7:ba:cc:97:62:a6:
78:a5:75:24:98:78:2c:27:89:cd:c4:1e:7d:e1:77:
5a:d4:07:97:f4:63:53:67:aa:8c:74:19:70:70:f3:
d5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:EB:63:7D:2C:3A:4F:90:71:6B:0B:AF:B5:30:2D:DB:01:C3:D9:CB
X509v3 Authority Key Identifier:
keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:7d:bc:40:45:17:c3:b3:12:6c:3c:10:b0:04:e5:6e:ec:ff:
b8:2d:9a:68:f0:53:8d:e5:1a:0a:0f:2c:51:77:fe:6b:95:cd:
34:84:81:d2:8c:1f:28:11:60:b0:39:0f:66:f7:81:d0:3e:77:
b8:5d:33:f1:b8:0c:ca:95:00:74:fa:b9:e1:e7:a3:2e:43:86:
c4:3f:27:b8:d1:cf:d1:a5:93:57:9e:bc:a5:b2:d3:53:88:38:
b3:67:f5:aa:7b:16:c3:c8:6d:dc:77:63:10:e3:be:c9:63:08:
13:84:8f:f1:4b:d7:49:1e:cf:da:0d:d7:41:3c:6f:51:71:33:
cf:ea:30:11:86:a4:cf:44:74:d3:f1:91:58:5c:9c:28:bf:7c:
35:a8:70:bd:fe:79:d0:37:b1:83:a3:dc:7a:d3:98:fb:a9:f7:
8b:6e:49:e0:3b:58:02:dd:12:c8:b7:40:22:9f:08:43:ab:5b:
1f:3f:58:78:00:64:57:fb:b5:31:28:94:31:34:14:00:ab:7f:
1f:16:9a:30:f9:a6:17:e9:15:b8:d6:02:9f:c1:ea:91:79:8b:
c6:90:b6:74:dd:14:bd:03:ac:c4:7e:f8:92:40:91:af:08:56:
d5:19:31:4a:a4:89:8d:91:a7:51:26:58:b3:e6:a9:79:d5:97:
2f:f1:f4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 10:48:58 2025 by rpki-client