Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
File: Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft (raw, json)
Hash identifier: axFW+jGyWeC5dNHm8nCzN4kHm2CZgHye0VB+VMdWicM=
Subject key identifier: F2:65:DB:0B:24:4B:8C:62:0D:2E:FD:EA:BF:6C:04:59:93:B2:AD:92
Authority key identifier: 32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56
Certificate issuer: /CN=325e98947fc948d5b62dfb85a7cb3a72a0672656
Certificate serial: 0197B5C4CE1688C82CAF5257B169562A383A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 09:01:03 +0000
Manifest this update: Sat 28 Jun 2025 09:01:03 +0000
Manifest next update: Sun 29 Jun 2025 09:01:03 +0000
Files and hashes: 1: Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl (hash: 5WVpSvT9Lndush59hayzLKYTm+3brLRuD00zUk8NNPY=)
2: dUAVKEm8GyRd3ukyK_fDNJXfcdU.roa (hash: qbWS0ULrRE394HKcS/wIy0AZwGNwfCJA/twuzA/0BRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:ce:16:88:c8:2c:af:52:57:b1:69:56:2a:38:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325e98947fc948d5b62dfb85a7cb3a72a0672656
Validity
Not Before: Jun 28 09:01:03 2025 GMT
Not After : Jun 29 09:01:03 2025 GMT
Subject: CN=f265db0b244b8c620d2efdeabf6c045993b2ad92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fd:ba:0f:ac:8d:2b:82:f7:ea:0e:43:52:55:
a9:61:8a:82:04:a7:04:2a:da:75:70:a6:be:49:ea:
37:00:2d:22:a1:61:0d:4d:87:a2:0a:99:42:56:c4:
23:51:ec:bb:1e:e0:7c:3b:bf:0b:30:a8:3f:0b:0d:
5d:35:d6:b5:5c:76:cf:e4:6a:57:f3:cb:e3:3e:9b:
e4:61:d4:22:1e:b6:15:c1:c6:ac:59:ca:16:ea:28:
0f:2f:2b:2c:58:f6:e3:71:f1:09:26:bf:71:3d:ae:
40:c5:74:19:56:84:4c:15:42:9f:ec:2a:41:fb:10:
5c:55:81:65:8d:44:21:25:d2:3e:81:7e:9c:80:7c:
0a:4a:41:d1:2c:dc:54:a7:4e:1f:d1:20:5b:55:fa:
8c:b1:99:9c:84:d4:d0:c0:a0:05:19:28:28:3b:07:
80:54:b0:1f:ce:84:0a:21:fd:a4:59:3c:ac:aa:72:
40:0b:52:c7:90:12:b6:fb:38:1e:40:a9:b2:be:6c:
ba:78:6f:b2:19:71:b4:87:d8:d8:70:98:02:2e:22:
90:a9:88:38:ab:8e:1e:e9:c7:7b:1f:1a:d2:6d:3c:
da:7f:89:e8:86:6d:56:cb:dd:e3:74:bc:18:b6:5a:
1d:1b:62:d7:4b:73:f7:6d:a4:5b:cd:63:2b:10:64:
2a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:65:DB:0B:24:4B:8C:62:0D:2E:FD:EA:BF:6C:04:59:93:B2:AD:92
X509v3 Authority Key Identifier:
keyid:32:5E:98:94:7F:C9:48:D5:B6:2D:FB:85:A7:CB:3A:72:A0:67:26:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d6f8a9-d6c7-4d52-91cb-4caec97f7d92/1/Ml6YlH_JSNW2LfuFp8s6cqBnJlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:9f:47:56:bb:4b:48:c2:86:db:b0:ba:fb:98:5b:f7:f7:51:
65:c7:32:1a:c4:d1:c1:51:3d:0a:5f:31:c6:a8:ec:b6:c0:28:
94:3d:df:c7:35:eb:ed:77:f5:5d:56:fe:c2:d6:33:3b:ba:0d:
42:d2:8f:50:93:7c:e9:a8:34:df:50:dc:4b:12:2b:26:62:3c:
12:f0:2d:9f:31:47:de:06:b8:6d:04:90:22:6a:27:d0:c7:2e:
af:44:1e:bc:3a:9f:78:c2:bc:7b:86:2e:f4:d9:f6:f2:d6:0b:
c7:7b:fd:fd:ae:ac:c8:2a:6b:d5:0e:92:c7:28:bf:5a:fb:ed:
88:4a:10:72:82:7c:4d:a4:66:96:6e:0f:2d:c6:cb:c4:ae:b9:
f2:3d:a0:23:c0:72:11:d6:2d:2b:e9:1e:1b:fc:b9:88:fa:79:
ef:c5:14:9e:d4:cc:44:f9:3c:88:99:e3:12:9a:58:95:3b:6c:
e7:31:0d:3a:43:a2:70:c0:39:07:c2:e3:fe:3c:b3:6b:ba:6c:
59:7b:5d:3d:8a:4d:a6:ed:36:e6:91:7d:48:30:fe:74:12:ed:
b6:c1:b0:34:31:b3:8f:0f:a5:20:1a:66:b3:61:03:28:3e:51:
f1:1c:27:fc:2b:43:79:fa:8e:1b:6b:99:27:f7:7c:1a:ed:c4:
70:0a:d1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:25 2025 by rpki-client