Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
File: Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft (raw, json)
Hash identifier: sR00erzGj3zWiHb9lVkJK7q9+Gn2x1q609I75TBfGAY=
Subject key identifier: 4A:F1:5E:3C:B4:BA:7A:7F:F1:3F:1B:D5:85:D5:54:FC:59:F4:4B:2C
Authority key identifier: 32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56
Certificate issuer: /CN=325e98947fc948d5b62dfb85a7cb3a72a0672656
Certificate serial: 0198D583709125A6B8DE09CC5B7A4309DB6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:17 +0000
Manifest this update: Sat 23 Aug 2025 06:00:17 +0000
Manifest next update: Sun 24 Aug 2025 06:00:17 +0000
Files and hashes: 1: Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl (hash: MQF0Id40XVbliRRSe7MZLK8SBr2OW0C9XMJgxxx7qyc=)
2: dUAVKEm8GyRd3ukyK_fDNJXfcdU.roa (hash: qbWS0ULrRE394HKcS/wIy0AZwGNwfCJA/twuzA/0BRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:70:91:25:a6:b8:de:09:cc:5b:7a:43:09:db:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325e98947fc948d5b62dfb85a7cb3a72a0672656
Validity
Not Before: Aug 23 06:00:17 2025 GMT
Not After : Aug 24 06:00:17 2025 GMT
Subject: CN=4af15e3cb4ba7a7ff13f1bd585d554fc59f44b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:83:ab:bd:10:e1:65:45:81:b4:1c:a9:2a:8f:
52:07:8b:93:b9:43:ef:1d:95:78:68:dd:a8:fd:39:
61:f7:43:cf:ce:47:31:ec:ee:8e:7b:50:e5:ce:ff:
ef:da:df:ad:26:ce:da:08:68:3c:eb:e6:32:67:40:
12:10:c9:1a:3c:10:b3:7c:49:e0:9a:b9:f4:c8:e5:
ac:26:17:00:b0:d1:e2:c2:d4:c7:37:a9:03:ac:41:
fe:a0:90:df:4d:64:25:3f:c1:60:a6:d9:41:2e:8d:
52:21:bc:4d:08:a5:b8:90:da:78:1c:8e:ac:08:2c:
23:07:67:bb:9b:86:9f:a8:ee:5e:a0:55:fb:11:fc:
f4:c8:64:f9:32:b8:d1:a7:5a:79:a9:0e:c4:dd:5c:
76:5b:3d:99:34:4b:39:83:db:49:5c:3d:0c:92:36:
85:06:52:03:02:57:ce:84:7b:74:65:c7:b6:f4:a6:
55:50:f1:c5:1b:64:64:e0:53:39:f2:3b:2f:5e:f2:
6d:7b:6a:80:11:86:6d:62:3a:4c:22:57:c5:9a:7d:
42:2b:c1:9c:3f:2c:24:55:ed:37:52:93:17:f7:96:
62:96:7e:0c:77:0c:48:36:ec:4d:16:03:56:d9:dc:
82:51:e2:07:ad:59:ca:0a:b6:a5:6a:25:bd:f7:32:
0d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F1:5E:3C:B4:BA:7A:7F:F1:3F:1B:D5:85:D5:54:FC:59:F4:4B:2C
X509v3 Authority Key Identifier:
keyid:32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:92:ef:65:23:4f:ad:9b:a3:de:3d:7b:d2:ca:e9:91:29:bd:
13:2c:39:e4:37:63:4f:ad:e8:1b:55:95:e5:c5:ae:6b:b6:b7:
4b:aa:b5:fb:5e:df:76:b2:cf:d6:cb:a2:b9:40:b5:56:fb:f3:
49:34:30:ef:bf:4b:1e:dd:ba:84:e9:5c:fa:c9:98:66:e5:77:
b2:86:22:f6:4d:a8:b7:8e:51:6a:75:a8:7f:98:78:ab:51:c5:
ca:6b:5f:4a:1b:5f:c4:15:f7:84:8a:1e:e9:62:b8:f5:bc:8b:
d4:c7:cb:57:69:d2:f8:f0:1c:62:6e:81:e1:d3:1e:be:4b:96:
a9:84:48:c7:ee:2d:fa:6d:c3:13:75:52:8a:9b:4b:12:4d:69:
0a:7e:66:de:89:2f:ca:12:23:f1:96:80:62:4a:66:1c:67:c7:
c1:18:84:c2:4a:0b:bd:92:c3:56:45:b1:46:58:c1:23:39:be:
7b:07:8a:07:a8:01:8a:ed:c9:00:5b:eb:7b:70:94:39:84:79:
5a:53:88:86:48:a3:d3:55:b6:4d:fd:39:3c:47:9e:64:86:27:
35:d6:75:e4:17:b3:f1:01:a7:12:c7:40:78:c8:98:97:16:4a:
0f:e3:f0:09:ef:5a:61:e1:06:b0:29:2c:06:58:b7:e7:df:8a:
55:0d:1c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:32 2025 by rpki-client