Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft
File: MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft (raw, json)
Hash identifier: z4fgm6lI3HGBd4N14LKEXyXWXXp2MZAYImSbHk2SQSA=
Subject key identifier: 5A:4B:F1:BD:BE:32:1F:FD:6C:5F:00:85:AB:AB:F5:AB:2E:28:33:0C
Authority key identifier: 32:50:7F:9E:07:8B:E8:99:32:E9:1B:23:AC:F8:82:AB:46:7C:6A:A7
Certificate issuer: /CN=32507f9e078be89932e91b23acf882ab467c6aa7
Certificate serial: 0198D4E0E7CA522FDA531120AC73DB9BE8BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft
Manifest number: 0BBE
Signing time: Sat 23 Aug 2025 03:02:45 +0000
Manifest this update: Sat 23 Aug 2025 03:02:45 +0000
Manifest next update: Sun 24 Aug 2025 03:02:45 +0000
Files and hashes: 1: MlB_ngeL6Jky6RsjrPiCq0Z8aqc.crl (hash: D7glaW9E1BYgxuBKyjy+r/aurRc9IGEtWFSCXd9aJTM=)
2: QfrRCybDqFm7xRQ9KjUz6BIzKE0.roa (hash: YrxsXgfls6BVbz+S7KqunX1/zH0o4Orz7g8fkYHg2uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:e7:ca:52:2f:da:53:11:20:ac:73:db:9b:e8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32507f9e078be89932e91b23acf882ab467c6aa7
Validity
Not Before: Aug 23 03:02:45 2025 GMT
Not After : Aug 24 03:02:45 2025 GMT
Subject: CN=5a4bf1bdbe321ffd6c5f0085ababf5ab2e28330c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:76:a0:07:a0:c6:cf:47:3a:74:39:fb:6e:38:
40:22:ca:4e:a8:81:11:7a:60:a8:5c:4d:c0:11:39:
41:95:39:0e:59:4d:b6:6c:7d:d0:37:95:b9:a4:99:
87:ec:e9:a5:2b:b8:75:6d:2c:d5:6c:13:62:4b:d7:
72:13:11:ff:90:27:29:e4:63:d5:c3:04:63:ad:db:
42:ab:af:2c:b2:40:f9:f8:0c:ae:da:2d:c3:a6:a1:
cd:71:c4:ba:6b:8e:16:24:00:2a:3e:6a:55:ce:7b:
06:c8:b6:24:a2:15:96:80:96:94:93:09:ad:ac:11:
5a:f7:e6:36:73:48:9a:ce:2e:50:e7:d7:ef:06:12:
75:16:6d:99:c9:ac:ee:ef:85:d9:91:06:b4:13:1c:
f9:3c:5c:eb:93:48:4e:9c:8e:7b:7c:62:78:1c:56:
a7:ba:86:31:77:76:cf:21:ff:e0:69:80:8a:d4:c5:
59:7e:f3:0b:44:a9:47:10:2c:c2:28:ef:ea:88:03:
26:6a:fc:7e:1b:a9:36:79:df:c3:18:02:24:0c:ca:
60:94:49:e1:04:75:b7:34:6a:5b:e3:a8:8b:88:3d:
ff:d8:49:f3:f7:c0:85:80:ad:c2:fa:d3:eb:f6:2f:
78:97:e6:39:95:e8:25:06:cb:2c:5c:be:5d:55:91:
30:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4B:F1:BD:BE:32:1F:FD:6C:5F:00:85:AB:AB:F5:AB:2E:28:33:0C
X509v3 Authority Key Identifier:
keyid:32:50:7F:9E:07:8B:E8:99:32:E9:1B:23:AC:F8:82:AB:46:7C:6A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c2:71:43:ec:38:01:dc:17:ee:70:9b:d1:ca:d4:11:3a:d7:
8c:ad:16:1e:87:25:4f:27:7f:09:9b:28:e6:8a:13:ab:70:68:
bd:6f:6d:7f:5e:d9:c6:b5:15:ad:cf:20:8b:dc:58:ac:ae:f2:
3e:da:97:20:d1:b5:55:5f:ca:a4:2e:7e:d6:dd:46:f0:ee:76:
40:94:08:6c:b8:7e:ce:ed:cb:0e:80:6b:83:46:5e:94:fd:35:
91:d4:be:11:99:7f:d9:b6:11:53:00:69:1a:9e:46:b5:b8:93:
c9:f0:27:94:ff:3c:0d:f6:6c:e2:a5:35:4d:5e:c5:b1:39:a0:
8e:59:fa:7e:8e:93:ba:1f:de:3a:07:08:38:c6:1b:bf:3e:ad:
11:0e:fa:13:e1:cf:08:1f:85:f5:fd:d8:75:5e:a5:01:f0:8a:
c0:aa:26:6c:83:29:e3:3f:98:c3:1e:de:ac:85:ca:1e:de:1c:
24:51:0c:b2:81:a0:54:36:94:bb:77:b5:f4:05:98:11:2a:8e:
ea:25:c6:ef:33:06:79:44:3f:59:4c:4d:91:52:c9:e6:cb:90:
d7:2a:40:13:d0:cf:b1:14:01:0f:f7:15:a3:50:00:3e:10:9b:
56:e2:a6:b8:b8:ae:21:36:fd:7e:d2:b4:e7:95:b8:bb:a0:ed:
b6:6f:37:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:37 2025 by rpki-client