Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
File: ml52-SnSG1hvQuMPfZsAOZs9y_A.mft (raw, json)
Hash identifier: C9sa1423uofpnu5MLz9NL7W22yA0aaqBcTvF+ztNSuM=
Subject key identifier: 68:B9:BA:D6:F9:E6:9F:41:8C:E4:4E:FE:EB:82:EA:AB:B4:B0:53:88
Authority key identifier: 9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0
Certificate issuer: /CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0
Certificate serial: 01974931940EDFD87BF4C5859D5B192C998D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
Manifest number: 0321
Signing time: Sat 07 Jun 2025 07:01:15 +0000
Manifest this update: Sat 07 Jun 2025 07:01:15 +0000
Manifest next update: Sun 08 Jun 2025 07:01:15 +0000
Files and hashes: 1: lNqtvqUZifhN9hUTQHsN8rzDv6s.roa (hash: noJIwI7/Q+WHXTBLIOr4/ymrWUykyqujMSct/kdt/UE=)
2: ml52-SnSG1hvQuMPfZsAOZs9y_A.crl (hash: C9Hvow7vilHnhYe2h45HvC+XkgUX1Gn2CizASV3Zflw=)
3: sLN0Xk8eYZ3fOkEohN2U_OcDnBE.roa (hash: hLQ2+Hv/BslGw+2RJD0A2omXlm9351c5s36b6sRZHRM=)
4: tbYCEHCORQD2jU1FhjpVeyl7yzw.roa (hash: UJRgmyhwhn7tm70C5e/aIyFO87+Jd/xNlqZSp90NpM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:94:0e:df:d8:7b:f4:c5:85:9d:5b:19:2c:99:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0
Validity
Not Before: Jun 7 07:01:15 2025 GMT
Not After : Jun 8 07:01:15 2025 GMT
Subject: CN=68b9bad6f9e69f418ce44efeeb82eaabb4b05388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:f4:67:71:76:c2:7d:12:b5:cd:32:b1:ed:
33:9c:ba:7a:ca:88:0e:ec:c3:bc:74:46:25:61:97:
2c:d8:7f:2b:b9:1a:5f:50:5a:e5:06:00:a6:00:8f:
15:61:6e:21:c6:61:be:70:48:2c:12:cf:42:aa:aa:
f6:33:68:f4:4d:3c:ac:7f:ed:29:7f:85:97:4c:57:
9b:c6:e2:b0:56:fd:7f:a8:17:7d:39:a8:fd:15:dc:
67:e4:29:bd:22:a0:92:7a:34:c4:07:91:35:b1:31:
fc:62:0d:42:3a:f1:f4:94:72:b0:56:6c:4c:b8:6e:
d4:02:81:3c:90:9a:4b:3f:9f:44:fd:a1:b3:09:a8:
a4:1b:13:68:6d:b6:25:d2:56:06:bc:dd:81:43:44:
05:a1:12:ad:40:69:82:bd:55:57:5e:49:c6:ac:cd:
16:41:d9:ab:7b:2b:b7:6e:51:ce:24:cd:1c:64:bc:
d9:f2:7c:53:2a:f7:7a:5c:2a:9a:17:d9:31:c1:12:
0f:e3:ff:8c:39:dc:69:ab:b4:04:82:1c:bc:30:37:
51:00:66:bf:26:f5:5c:16:12:0d:27:da:27:7c:5b:
08:69:3a:79:c6:3d:6a:1d:03:a7:15:3e:41:e1:0f:
40:2a:a3:b2:5a:6c:bc:ba:55:9c:bb:69:ea:04:66:
f1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B9:BA:D6:F9:E6:9F:41:8C:E4:4E:FE:EB:82:EA:AB:B4:B0:53:88
X509v3 Authority Key Identifier:
keyid:9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0b:78:24:ae:0a:c4:4c:c5:ba:f5:3b:dd:dd:ac:3c:70:0a:
c4:27:38:37:b7:e8:c2:4e:7a:71:01:b2:18:49:e6:5a:65:2a:
0e:f0:12:1e:56:f2:b2:cf:08:e0:16:32:62:de:0f:4b:40:85:
27:78:e3:d3:ac:74:66:9b:8c:2b:6e:ea:d9:46:93:8c:00:d2:
cc:a2:77:5f:7c:e4:f9:0e:3c:13:1d:fe:7c:5b:e3:ea:ba:43:
f5:4e:56:df:26:87:f0:ef:12:8b:53:3f:70:23:eb:80:13:fe:
d0:ea:67:51:23:a7:99:ff:d7:7d:78:88:ef:c1:db:0b:55:43:
44:60:72:dc:f5:5e:65:1d:c8:d5:fc:c0:68:ce:8b:59:1e:49:
d8:bf:06:76:86:d0:6a:83:c8:e9:a3:e9:6d:5b:de:03:4d:fc:
d3:2b:b5:f7:99:51:fe:ad:20:f5:b9:55:a4:45:bf:ea:38:3b:
9d:e8:6f:ee:87:d7:66:ab:54:e4:1a:81:4c:b1:64:82:ad:93:
dd:1a:47:39:d9:eb:51:8f:40:56:8e:16:44:1b:65:0f:06:c5:
ed:58:86:62:8e:2a:92:ab:28:e5:e6:71:42:d4:83:58:05:43:
71:ad:0b:6e:4d:ac:9b:ee:fd:ff:00:22:64:c0:91:78:ec:b7:
26:aa:9e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:07:09 2025 by rpki-client