Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
File: ml8NkStedHrlaNgIoEAptOvGbkc.mft (raw, json)
Hash identifier: nuPwhT3Y6LgMuRbqPgO+CSP/C7PFdxrV61L+BOTTWPk=
Subject key identifier: E1:AC:23:3E:F7:98:51:3A:96:8A:F6:78:BE:A6:AD:55:A7:B6:EA:57
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial: 019A269D36F74D054DE935F48202E14B58DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
Manifest number: 0E21
Signing time: Mon 27 Oct 2025 17:00:28 +0000
Manifest this update: Mon 27 Oct 2025 17:00:28 +0000
Manifest next update: Tue 28 Oct 2025 17:00:28 +0000
Files and hashes: 1: 0qMVRghLmSWdSNAhWBOt8uMlDGs.roa (hash: kOLfFL2EFwiaYaCo8C+GmQcPeyIeF+5TOTsfcPc2OmI=)
2: CoddMQm6LTCSZZwVDyRLAqAXOLQ.roa (hash: wya/ieDlwU5gulg2lLSwRO1xnpgtUhKNOqwGEK2Nmn0=)
3: ml8NkStedHrlaNgIoEAptOvGbkc.crl (hash: 1l6GjAhZ5lFgaxec+GeGxEXAmZmaBWsiY7xdnmZ/RsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:9d:36:f7:4d:05:4d:e9:35:f4:82:02:e1:4b:58:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Validity
Not Before: Oct 27 17:00:28 2025 GMT
Not After : Oct 28 17:00:28 2025 GMT
Subject: CN=e1ac233ef798513a968af678bea6ad55a7b6ea57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2d:2f:69:c6:bb:a8:ba:09:b5:0f:c5:6e:9f:
33:07:fd:ed:4b:1d:76:70:14:9f:2b:48:be:23:e5:
3f:06:10:1b:78:5b:99:a2:47:25:97:d5:bb:56:d5:
0e:3d:8c:9c:3d:be:5b:ec:a0:f2:49:c4:1b:cd:b2:
64:d3:f4:43:50:52:d1:c0:f2:3d:0e:96:aa:73:1f:
61:1d:00:b5:4d:f9:f6:cc:a4:4d:d9:97:61:3d:56:
34:a9:dd:c7:06:1e:8c:0c:1c:7f:09:73:2c:21:af:
ff:c6:74:e9:ba:20:4d:34:15:ab:1d:38:93:e0:92:
2a:58:be:90:e6:58:87:3c:66:7c:a9:be:12:37:c9:
e8:8c:e5:d1:93:d0:d9:9c:41:e9:e4:4c:ff:94:23:
d6:3e:10:0c:4d:2c:0e:d8:04:83:8a:d2:72:6a:02:
70:27:34:23:23:e2:a5:b4:6a:32:26:dc:8b:76:54:
a9:e2:6b:f3:a5:4f:45:27:48:86:bf:bb:d7:e7:f4:
c9:e6:91:4e:57:6a:35:3f:59:ca:d0:4f:02:21:2d:
d1:c4:0b:ad:f2:cb:e1:46:d4:a8:7c:67:a3:48:eb:
45:c5:71:94:47:80:7a:2d:1c:ae:b6:0b:eb:0b:1c:
2c:e0:94:59:be:15:74:ca:14:2d:f8:96:00:84:bd:
2d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AC:23:3E:F7:98:51:3A:96:8A:F6:78:BE:A6:AD:55:A7:B6:EA:57
X509v3 Authority Key Identifier:
keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:21:bc:bd:28:dc:1f:c8:be:a6:21:f6:95:20:f6:b0:f9:2c:
6c:82:77:42:15:1a:93:d4:9f:f4:d9:7a:98:96:63:55:bf:32:
59:06:85:dd:75:cd:d0:c3:3a:87:bc:16:e5:57:52:3f:15:f2:
d7:d5:30:a2:79:76:fd:36:9b:d3:6c:ef:84:52:b0:49:db:92:
7d:75:4f:8f:ba:26:d4:c1:5e:0d:e3:7a:b0:b4:c2:56:cc:c8:
38:41:2b:51:4c:c5:b4:43:08:7f:dd:b5:f5:d5:f3:97:2f:ff:
f7:3f:81:13:ef:4a:a2:0c:81:1d:52:ba:62:0c:93:ae:89:1a:
dd:8b:40:f1:22:ea:b4:94:49:aa:9a:75:8c:bb:91:f5:b6:fb:
ea:8a:59:8b:fd:3a:c9:25:b0:12:42:af:d2:e9:05:b2:79:f6:
24:57:42:4f:66:99:c5:08:ac:c7:f7:9d:f6:8b:6f:dc:f2:89:
4d:89:87:d7:c2:2a:4a:9b:a9:f9:af:cb:5d:cd:da:78:40:d4:
e2:1e:e2:68:ae:28:2e:55:11:ab:9c:ba:2c:01:da:03:3b:c1:
dd:5f:75:04:4e:df:72:62:5e:cd:a6:2d:9a:e0:a0:40:f1:4f:
b5:64:87:a1:0e:c3:11:aa:0f:36:0a:30:60:99:4e:d8:67:84:
e2:9e:03:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 23:37:38 2025 by rpki-client