Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
File: Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft (raw, json)
Hash identifier: BxxqnV1nse1zMiN4Ui9PtPNn9nR1kqcy6B84x9pGQ7U=
Subject key identifier: 7A:8A:8D:EE:BE:4D:9B:6B:5D:F4:57:18:D3:D9:F7:33:B7:B5:FA:5F
Authority key identifier: 32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56
Certificate issuer: /CN=325e98947fc948d5b62dfb85a7cb3a72a0672656
Certificate serial: 0199FEEBA3587F67040ADAB953032E92789B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 00:01:19 +0000
Manifest this update: Mon 20 Oct 2025 00:01:19 +0000
Manifest next update: Tue 21 Oct 2025 00:01:19 +0000
Files and hashes: 1: Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl (hash: Ar0oW16oFyjQt36+8jIFz5pUTZrx2JIMzqm0Jt7gxcw=)
2: dUAVKEm8GyRd3ukyK_fDNJXfcdU.roa (hash: qbWS0ULrRE394HKcS/wIy0AZwGNwfCJA/twuzA/0BRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:a3:58:7f:67:04:0a:da:b9:53:03:2e:92:78:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325e98947fc948d5b62dfb85a7cb3a72a0672656
Validity
Not Before: Oct 20 00:01:19 2025 GMT
Not After : Oct 21 00:01:19 2025 GMT
Subject: CN=7a8a8deebe4d9b6b5df45718d3d9f733b7b5fa5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ea:0e:3d:b5:38:13:60:b7:42:2e:8c:d6:5e:
d5:7e:a2:de:ca:87:d1:72:fc:2c:47:92:a4:6b:f2:
b8:52:c9:9b:09:c3:68:e3:ab:60:b3:ef:36:1a:eb:
b3:f2:7a:5d:e5:2e:fd:a7:32:73:22:d6:9e:b0:cc:
4c:e5:59:bc:d7:7a:4b:9b:fd:9f:65:bc:cc:9c:5d:
ce:ad:6f:5b:2f:03:c2:c1:4e:94:af:31:4a:78:52:
5a:b2:fa:18:73:5c:76:72:16:57:85:1d:2f:f3:ce:
1a:6e:33:a6:c2:d6:79:e4:5a:5b:af:be:aa:11:d1:
a9:00:9b:ec:79:6f:0e:39:bd:3b:29:8e:aa:4b:b7:
4f:99:b8:da:fc:4f:03:ec:82:f2:f4:a9:f0:59:df:
62:90:c8:cf:19:96:25:50:51:1e:27:fd:bb:74:fc:
1e:e7:76:6f:a9:0d:f5:a0:90:a8:b7:74:c8:09:25:
fa:01:ca:e7:f6:43:e2:e5:29:ed:e3:24:a2:00:59:
f3:07:5c:89:76:73:a1:11:de:dd:8c:66:11:1b:9c:
45:c0:ff:08:bd:36:83:dd:e7:b4:02:47:79:0a:73:
2b:8c:ac:d8:80:83:67:11:17:3d:0b:23:b4:3f:87:
76:21:58:8f:bc:f4:3c:76:08:b5:28:c9:de:d0:f4:
51:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8A:8D:EE:BE:4D:9B:6B:5D:F4:57:18:D3:D9:F7:33:B7:B5:FA:5F
X509v3 Authority Key Identifier:
keyid:32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c9:a8:42:d5:15:5b:1c:a2:a7:69:83:cd:58:3c:4d:cc:7d:
85:a6:8e:90:51:ec:29:d9:c6:f4:81:95:3f:00:6a:45:c0:8b:
05:4b:34:71:1c:92:a2:39:7d:16:33:1f:ff:b0:d3:d4:1f:c4:
58:3b:ec:cf:1a:9c:f0:47:b6:fb:4d:be:68:58:55:2b:01:62:
f7:1d:fb:93:9c:a9:65:fc:8d:e2:1f:a7:cb:f2:a5:2a:71:45:
a1:6e:90:01:0b:f8:d3:2a:e0:37:b0:f2:db:c0:97:7c:a7:90:
39:e8:ee:86:c4:39:dd:74:c6:ca:b4:7c:df:9a:f7:2f:d4:1c:
27:6f:90:1c:6b:f1:62:c6:ac:56:c4:60:50:3d:f0:61:73:63:
6e:a7:ab:41:03:28:ae:7a:78:2e:b7:f4:d3:dd:a7:64:bf:bc:
ed:a5:4d:d3:e4:46:b6:93:b1:33:ed:74:3f:32:28:81:33:a0:
e6:71:20:c3:5c:13:04:53:2a:17:16:12:97:1a:61:be:03:56:
4a:a3:fe:e0:c0:d4:4c:85:0f:24:55:98:1c:61:ab:1b:90:e3:
e0:f0:7f:6e:fe:10:68:7a:f0:26:5a:3a:83:d0:d1:36:d0:66:
77:29:b7:06:ad:b5:6b:3e:4e:a9:e9:41:0b:55:69:89:83:db:
87:bf:f4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:01:28 2025 by rpki-client