Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
File: MlDVjXew-l3OxPQq6W80e8gNqj4.mft (raw, json)
Hash identifier: yc7rucTL9u1lC77FYoSYuj98c0xCIFueD3NVPUbzuSY=
Subject key identifier: 54:21:8C:06:FC:B0:B4:15:80:19:C1:6F:66:76:F9:42:F4:BF:0B:35
Authority key identifier: 32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
Certificate issuer: /CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Certificate serial: 0197B6A1304B43BE6174E58709934CD74779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:01:46 +0000
Manifest this update: Sat 28 Jun 2025 13:01:46 +0000
Manifest next update: Sun 29 Jun 2025 13:01:46 +0000
Files and hashes: 1: MlDVjXew-l3OxPQq6W80e8gNqj4.crl (hash: fHui4EFXb2sHQgXB+MewMIXBy8KELQtmcMPiBEzDVhs=)
2: ndShIgCcbsHhUOk-1qX-uYRIuS0.roa (hash: czNtU+SX8QXrL7dVcdfeMOMIGpfeCslspqe7rpd0A8Q=)
3: xNxMZxSDyX7cldenO1Ro1zeTZuQ.roa (hash: EdeIoFQQfBBtul4Dl4kQ19MbiTrPJ3gXVWY5FjQfawo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:30:4b:43:be:61:74:e5:87:09:93:4c:d7:47:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Validity
Not Before: Jun 28 13:01:46 2025 GMT
Not After : Jun 29 13:01:46 2025 GMT
Subject: CN=54218c06fcb0b4158019c16f6676f942f4bf0b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:33:13:d6:b0:b1:94:a0:8b:cd:43:d1:18:d1:
1f:68:4a:52:39:5f:8a:2b:88:f3:25:88:e6:d0:2b:
01:a7:a4:01:65:d0:d5:3e:c6:7f:87:fb:5d:51:a7:
55:54:ab:46:8b:f2:91:03:42:68:6d:b0:c8:5e:69:
91:f2:a9:42:f7:d0:21:28:59:ab:08:7f:86:d4:46:
3e:15:db:c2:d3:64:0a:c5:e8:9f:c2:7e:72:75:bc:
39:b6:ad:1c:f1:b8:bd:b0:d7:17:6a:0a:09:1b:8c:
a0:36:39:fa:91:4e:2a:08:12:ac:4b:31:94:c8:fc:
49:af:2d:69:58:5d:33:84:f6:04:2c:24:36:90:b2:
8f:04:8b:1a:9c:f5:04:d6:28:87:57:72:6d:0e:34:
6f:33:af:0a:4b:60:41:ae:2e:26:dd:a3:85:34:1e:
70:38:82:a8:0f:76:a9:64:23:05:e2:01:8d:11:b4:
8f:01:c6:54:a8:ef:7e:0d:3a:44:1d:8e:c4:b2:c6:
48:e1:6e:e9:3d:9b:82:3d:03:cc:69:c8:60:35:ed:
28:6a:de:2c:96:20:b8:81:fa:00:b3:4a:ee:af:df:
af:37:67:7f:7a:98:4c:c3:4e:09:e6:43:9d:90:2e:
6e:a4:93:da:1a:81:81:19:72:d6:d8:3a:9d:dc:61:
1f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:21:8C:06:FC:B0:B4:15:80:19:C1:6F:66:76:F9:42:F4:BF:0B:35
X509v3 Authority Key Identifier:
keyid:32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:be:d9:10:88:00:3c:8a:93:b6:84:4f:ff:4e:d4:46:05:78:
18:90:3e:84:b8:b6:87:ee:82:c9:5e:b5:ae:3e:ce:aa:72:82:
ab:79:a3:9a:05:fe:37:39:16:61:26:e3:2a:d7:c2:45:44:2a:
68:b3:da:50:73:05:dc:52:80:27:8f:93:4f:5d:48:71:41:0b:
a8:10:43:f0:a0:7c:09:74:b8:39:f0:d4:83:8b:20:60:fb:1a:
db:7c:2f:df:0a:35:2c:e8:c2:f4:93:e9:6f:33:cf:11:6f:72:
5c:c0:b9:23:2b:ae:7d:9a:e6:7a:93:74:32:0c:ca:f1:ac:16:
ff:e9:cd:f6:d7:69:84:fc:fb:7e:02:b2:81:a6:6e:7d:ea:6b:
e3:f3:1a:b9:f2:b5:85:22:9b:df:7a:bb:8b:47:8a:54:15:34:
2d:0e:94:2f:d7:cc:f4:61:53:f8:35:9f:60:f6:61:82:1c:cc:
59:7a:16:6b:1b:b3:dd:45:21:79:a6:af:1c:df:bf:13:3a:77:
fb:a2:ed:1d:27:86:d2:6d:56:64:5f:20:42:bc:d5:07:e2:ed:
4f:24:0c:a9:59:40:4f:c8:a1:8c:f8:02:58:5e:ad:46:00:a7:
90:fd:37:34:fd:2c:e2:61:62:3a:64:3a:06:68:80:67:84:8c:
4e:05:a8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:40 2025 by rpki-client