Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
File: ml8NkStedHrlaNgIoEAptOvGbkc.mft (raw, json)
Hash identifier: LxdCtBcNqGVr0xX3BeeUi1MT8kXZzoOa53zPpGdMmFE=
Subject key identifier: 55:F6:11:B4:2D:FF:2E:73:64:13:27:96:8A:65:97:2D:4D:59:D1:27
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial: 01993380B004A3A5CB294A60D5FB06FFD00B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
Manifest number: 0DA3
Signing time: Wed 10 Sep 2025 12:01:35 +0000
Manifest this update: Wed 10 Sep 2025 12:01:35 +0000
Manifest next update: Thu 11 Sep 2025 12:01:35 +0000
Files and hashes: 1: 0qMVRghLmSWdSNAhWBOt8uMlDGs.roa (hash: kOLfFL2EFwiaYaCo8C+GmQcPeyIeF+5TOTsfcPc2OmI=)
2: CoddMQm6LTCSZZwVDyRLAqAXOLQ.roa (hash: wya/ieDlwU5gulg2lLSwRO1xnpgtUhKNOqwGEK2Nmn0=)
3: ml8NkStedHrlaNgIoEAptOvGbkc.crl (hash: NXWHhtXaHWn+/enH5KLCZrOI1/s1P3ZZJeN7C3JL+sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 12:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:80:b0:04:a3:a5:cb:29:4a:60:d5:fb:06:ff:d0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Validity
Not Before: Sep 10 12:01:35 2025 GMT
Not After : Sep 11 12:01:35 2025 GMT
Subject: CN=55f611b42dff2e73641327968a65972d4d59d127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:0e:78:9e:d1:35:04:56:5c:97:69:c8:14:
dc:3c:10:3a:31:50:e6:7c:a3:23:f6:16:e4:ad:dd:
3f:13:25:61:39:3b:2f:30:aa:c1:12:d1:cc:d9:ed:
9c:d4:06:ed:90:f7:0d:2f:e4:39:9a:9b:90:fa:3c:
a0:83:99:c8:b4:5e:23:25:d7:ed:87:24:a0:b1:8f:
a2:84:f0:d5:71:7d:9f:6b:45:ea:4a:97:e1:d1:0e:
1b:e1:02:1a:78:3a:a7:d8:e4:ba:d9:32:12:da:95:
2f:ed:c8:fb:12:1c:ef:24:df:3c:63:e2:d3:fe:7f:
51:ac:95:50:25:47:70:1f:41:80:0c:94:b0:05:11:
9b:6c:f1:ea:e8:fe:14:a4:f7:f7:c8:2b:e2:9f:d5:
44:78:e7:35:b4:17:90:1e:8b:fd:8f:05:df:44:36:
53:56:fa:f3:09:c6:d3:6d:6b:02:70:43:2d:16:9d:
b6:1c:98:6f:30:26:3d:9b:44:cd:f7:97:88:10:1a:
7c:18:d5:62:2a:0b:07:0d:95:a3:8c:ce:19:6a:f1:
38:89:52:72:c7:73:6c:7d:1a:c2:2a:c1:06:b3:5c:
00:f0:05:84:61:ad:32:62:04:2e:07:48:02:ab:83:
96:c8:c0:f7:6c:23:31:79:d9:aa:ee:d5:6a:97:6d:
71:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F6:11:B4:2D:FF:2E:73:64:13:27:96:8A:65:97:2D:4D:59:D1:27
X509v3 Authority Key Identifier:
keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:11:4e:73:04:3f:e6:4d:58:4a:a3:e5:33:c0:ec:b2:2b:73:
80:f6:bf:7c:dc:4d:1b:c0:de:b5:bb:15:89:2c:bc:64:71:65:
3b:13:0c:f3:95:f5:66:97:e2:fa:05:6e:c7:1a:11:af:a2:97:
17:73:ea:aa:d0:86:0c:82:15:fe:9e:a7:c2:3e:97:a2:8f:8c:
1e:95:e4:d3:45:fe:7e:37:25:a0:b5:c2:9d:e1:07:dc:ab:a7:
66:a1:f4:36:60:c8:80:6b:c4:ed:a9:e8:14:2c:d9:08:9d:79:
00:59:2a:39:c8:ac:20:2d:14:bc:c6:ae:cf:3d:2c:24:48:b7:
d3:a8:c4:97:f9:a3:8f:b4:02:c5:95:cc:32:19:6a:13:c5:38:
04:52:e8:b9:18:8f:c6:91:9d:d3:b8:c1:37:ff:24:66:c6:4f:
7b:01:98:65:51:02:06:0b:0b:ea:c9:01:bf:82:66:2d:86:a8:
dd:1e:bd:2c:12:b0:28:85:9d:ce:e5:72:a4:e4:ca:c6:ab:5b:
12:9f:23:04:ab:db:08:06:10:03:83:88:b3:67:82:d6:1b:4c:
f1:d4:7e:bc:16:71:c8:0e:9f:6e:ff:a0:de:68:48:26:9a:75:
6d:a3:19:b4:a7:63:e6:53:5f:4e:83:03:85:65:97:f5:97:9d:
7b:32:2f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:34:32 2025 by rpki-client