Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
File: MlqLaI3q27ke--B3Iwi6yfMEpTM.mft (raw, json)
Hash identifier: GXXqw07upFPeD/MdoX2h8lGIQb8q4ZTPqWR2D7YELUU=
Subject key identifier: C5:7F:E2:4A:61:64:C5:BC:69:22:A8:A2:CC:A9:D3:A5:12:11:A4:18
Authority key identifier: 32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
Certificate issuer: /CN=325a8b688deadbb91efbe0772308bac9f304a533
Certificate serial: 0198D5F159C59ECFB6B50EE6B84D13A4A8E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
Manifest number: 1538
Signing time: Sat 23 Aug 2025 08:00:20 +0000
Manifest this update: Sat 23 Aug 2025 08:00:20 +0000
Manifest next update: Sun 24 Aug 2025 08:00:20 +0000
Files and hashes: 1: CFfUxIFh9E3XN1EntjmEwUZAUfA.roa (hash: LKtIJVn3SPxlyKkXSz+8d7gF12Vd76h6cTs7tmGxKjM=)
2: MlqLaI3q27ke--B3Iwi6yfMEpTM.crl (hash: R8U4ZAHf5ECnznUG7/2IMGJ42eb3NwmoFqo2pTSLT5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:59:c5:9e:cf:b6:b5:0e:e6:b8:4d:13:a4:a8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325a8b688deadbb91efbe0772308bac9f304a533
Validity
Not Before: Aug 23 08:00:20 2025 GMT
Not After : Aug 24 08:00:20 2025 GMT
Subject: CN=c57fe24a6164c5bc6922a8a2cca9d3a51211a418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7e:17:9d:c6:79:c5:30:d0:1f:fb:f8:ec:04:
2d:26:12:e8:a8:49:c7:2d:8d:9a:34:b3:e7:90:66:
6e:06:ca:31:c1:ae:aa:df:12:75:18:85:e7:93:36:
00:62:4d:ad:79:28:29:2c:f2:3e:bd:61:08:a9:f1:
85:c3:41:d3:07:bb:8a:dd:d7:75:28:9f:7f:85:21:
d6:81:dd:40:85:50:5a:59:01:fa:89:49:e9:ae:4e:
8f:24:ae:b3:d6:fb:0f:d5:34:6f:b1:3f:ee:1d:51:
32:e0:eb:c0:b1:4e:5d:cf:17:88:34:5f:2b:26:53:
67:fc:e3:1c:b9:c8:d8:25:04:53:e7:06:9e:4e:3a:
6a:7f:e5:a8:1a:34:c6:ac:0d:19:34:45:c9:04:b3:
77:8c:11:f7:67:ba:c0:cd:0f:1b:e6:e2:05:2b:db:
d6:b8:cb:db:69:a0:d6:e2:d4:cf:da:e6:68:c9:8b:
8b:05:bb:1e:9c:b3:a6:f8:d2:ef:de:b3:98:df:1e:
4f:f5:f3:f6:72:fa:f0:8d:99:e5:b8:85:2e:e6:64:
b4:8c:b7:f2:72:2e:6a:2b:b0:a0:62:52:a3:09:0d:
71:be:04:bb:0a:9c:cb:19:e1:f4:cb:ab:c4:76:55:
82:ea:ef:ff:ba:29:ef:74:2a:b6:bb:4f:90:5f:ec:
a3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7F:E2:4A:61:64:C5:BC:69:22:A8:A2:CC:A9:D3:A5:12:11:A4:18
X509v3 Authority Key Identifier:
keyid:32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:03:7a:b4:c4:b0:01:65:12:60:7c:92:f5:bf:5f:05:5a:82:
66:68:2d:5f:39:8c:7a:b6:82:ff:1a:36:db:cf:6f:43:2d:cd:
ef:39:b8:ee:b5:7b:bf:24:02:54:83:84:12:cc:4b:c1:6f:a1:
f7:ec:0e:4a:9e:ae:ab:1b:35:9f:de:f6:ad:fe:4b:de:52:79:
be:91:09:38:ec:42:c2:57:37:69:40:04:0c:fe:71:94:0d:90:
d0:a0:aa:fd:3e:7f:db:0b:47:22:91:a0:d1:cf:9c:64:09:74:
f1:d7:89:79:7b:24:7d:f1:7d:cf:ed:f5:6c:20:a2:85:3a:29:
dd:46:bb:a6:3b:b3:ec:43:0e:92:ae:48:9e:66:1b:89:d8:df:
ae:10:fb:44:90:1f:4e:64:b6:a6:8c:4e:0f:85:87:92:9e:e2:
8e:95:95:6d:ed:d3:0e:85:c8:13:cd:89:c8:5d:3d:38:c0:32:
05:62:bd:93:b9:ba:ba:9f:a4:07:33:c5:ef:f3:fd:bb:b9:3b:
05:b2:62:d4:37:41:90:27:70:eb:bc:65:8e:15:fc:89:41:52:
f1:42:02:17:07:d2:53:b9:f6:2d:77:3c:58:97:f8:22:ef:de:
36:82:d4:b2:b0:8f:de:38:67:41:73:f5:76:8a:a2:e3:32:b1:
ad:ef:28:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:26:13 2025 by rpki-client