Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
File: MlqLaI3q27ke--B3Iwi6yfMEpTM.mft (raw, json)
Hash identifier: meMmkWyC7WZJ2c6w9n1+FlI7xmev0k5bTgMNyUeSuzo=
Subject key identifier: A8:D1:3E:E6:18:93:6C:C7:98:5C:13:84:76:CA:D9:EB:72:AB:BA:30
Authority key identifier: 32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
Certificate issuer: /CN=325a8b688deadbb91efbe0772308bac9f304a533
Certificate serial: 0199FB7CB1033A0A872173C9D344C16B16C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
Manifest number: 15D0
Signing time: Sun 19 Oct 2025 08:01:16 +0000
Manifest this update: Sun 19 Oct 2025 08:01:16 +0000
Manifest next update: Mon 20 Oct 2025 08:01:16 +0000
Files and hashes: 1: CFfUxIFh9E3XN1EntjmEwUZAUfA.roa (hash: LKtIJVn3SPxlyKkXSz+8d7gF12Vd76h6cTs7tmGxKjM=)
2: MlqLaI3q27ke--B3Iwi6yfMEpTM.crl (hash: l7NmmQubkkYvu32Lus16ILQKGEzDzaCOFQ/+6aofFYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b1:03:3a:0a:87:21:73:c9:d3:44:c1:6b:16:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325a8b688deadbb91efbe0772308bac9f304a533
Validity
Not Before: Oct 19 08:01:16 2025 GMT
Not After : Oct 20 08:01:16 2025 GMT
Subject: CN=a8d13ee618936cc7985c138476cad9eb72abba30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a3:6b:91:1a:a2:a0:11:f8:13:e5:5a:57:4f:
a0:81:4a:ff:06:f9:2c:5b:f7:64:80:4f:3f:12:b3:
d7:f7:c9:01:97:81:62:f7:bd:71:cb:4a:c1:95:b8:
46:92:3f:57:cf:6d:a8:da:45:c3:69:3e:2d:eb:4f:
03:aa:0c:72:8b:72:82:d7:e3:55:30:21:4e:c6:27:
a7:82:e9:4e:6b:99:97:4d:1b:91:71:4e:5b:5f:7a:
b5:cd:25:6b:fd:89:ee:cf:f1:fc:c8:0e:17:99:74:
2c:bc:fb:35:2f:9c:64:84:1c:3f:f9:b1:2e:5e:f6:
27:ba:34:72:52:8b:f2:18:04:28:fe:c0:95:57:3e:
02:3c:80:c5:3d:81:11:2d:54:f1:8d:a6:65:20:0f:
d4:cd:08:41:ee:e5:b7:da:99:f6:da:49:09:09:5b:
29:27:ea:57:cd:ed:b4:1d:64:17:0f:ba:8a:b9:98:
d1:b0:87:f4:66:26:5a:ac:54:e6:5e:a4:de:0d:ad:
58:af:e8:1a:37:07:79:70:ee:5c:d5:2c:48:38:ed:
01:70:ab:e2:8a:a8:a7:4f:64:36:55:14:af:fd:df:
58:da:24:89:18:89:bf:b1:10:81:91:bb:c3:fd:26:
69:73:8a:83:ee:96:68:cb:d0:56:0e:b5:b9:74:7a:
ab:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D1:3E:E6:18:93:6C:C7:98:5C:13:84:76:CA:D9:EB:72:AB:BA:30
X509v3 Authority Key Identifier:
keyid:32:5A:8B:68:8D:EA:DB:B9:1E:FB:E0:77:23:08:BA:C9:F3:04:A5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlqLaI3q27ke--B3Iwi6yfMEpTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a35bc9-72e6-4979-b462-bb4a8672cc0c/1/MlqLaI3q27ke--B3Iwi6yfMEpTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e4:5c:12:d4:84:15:b4:16:f1:f0:6a:69:c2:bc:75:7c:0a:
50:eb:96:7b:be:f1:6a:42:0a:da:d3:91:88:d6:32:62:d7:68:
a9:e9:e7:36:62:65:dc:e5:2a:ee:9a:fc:42:e1:49:1b:57:e6:
e6:10:79:7f:98:f2:ac:0a:5f:8a:55:e6:7d:9c:d4:5e:0d:53:
7f:3e:39:9f:19:33:53:5f:ab:79:5a:e1:c5:bc:5a:be:63:e7:
55:5a:57:f7:6c:49:b5:05:7d:a1:a1:d1:8e:ee:0d:55:40:2c:
45:16:89:6a:bb:d9:e9:1f:ab:11:53:2f:37:f9:9d:00:83:3a:
09:15:61:50:8a:0b:7f:b7:d4:a7:b1:b0:e5:ab:b0:f1:6e:c0:
64:f7:b1:cc:38:4e:3e:d3:a0:31:31:11:e9:66:7c:31:19:fb:
93:5c:a8:76:03:f0:c2:b1:98:3c:2e:b1:6e:02:aa:fd:81:65:
b4:cb:91:37:40:be:ae:7e:8a:d4:0e:6f:6a:e0:f9:8f:2c:61:
d4:4f:5b:6f:45:24:36:bf:8f:90:10:a9:00:0d:86:ea:27:f4:
dc:d8:a6:45:b4:10:e3:92:21:c2:89:4d:c9:ba:6d:d4:8c:70:
85:cc:b4:62:53:39:c0:48:67:2a:9e:e0:0d:b2:fd:44:da:e1:
69:bf:63:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:33 2025 by rpki-client