Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
File: MlNiVLPnSQBnW8br1QroJYKLmnY.mft (raw, json)
Hash identifier: VhPtyZZMxO9up0npM4ADezVDMeqtffXIC+KcXxas5y8=
Subject key identifier: 0D:9D:A0:7F:CF:28:9A:CD:4B:B3:6F:1F:61:AC:CD:7E:6C:02:78:CD
Authority key identifier: 32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
Certificate issuer: /CN=32536254b3e74900675bc6ebd50ae825828b9a76
Certificate serial: 0197B8215A5A6739FB7EC29B95F104479DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 20:01:22 +0000
Manifest this update: Sat 28 Jun 2025 20:01:22 +0000
Manifest next update: Sun 29 Jun 2025 20:01:22 +0000
Files and hashes: 1: MlNiVLPnSQBnW8br1QroJYKLmnY.crl (hash: mYem7pdH5GhfsfPmjYkBlxXra8fwrJET5AFsamLNTG4=)
2: eUynvlBI4OuUX1kGjVQZhKaUnMw.roa (hash: VKfdvSp0tX2NjmjbmhxKu4y9+1s59i+sIHADFu4rJzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:5a:5a:67:39:fb:7e:c2:9b:95:f1:04:47:9d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32536254b3e74900675bc6ebd50ae825828b9a76
Validity
Not Before: Jun 28 20:01:22 2025 GMT
Not After : Jun 29 20:01:22 2025 GMT
Subject: CN=0d9da07fcf289acd4bb36f1f61accd7e6c0278cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3a:a9:b0:42:d4:f5:6e:66:c1:d6:f6:d7:89:
42:a8:18:e0:13:e1:71:96:33:2d:d4:3b:4c:f6:e3:
5f:a6:e3:6a:ff:d8:b3:4f:73:0c:fc:eb:40:6b:4d:
ae:da:69:f0:1a:c7:1e:bd:aa:bf:7d:f3:6e:19:13:
b6:68:25:50:72:c5:10:6a:59:a4:74:f4:f1:01:27:
34:33:63:64:24:16:5a:5c:1b:96:fc:61:96:0a:b0:
95:9b:c7:34:23:21:0c:64:2f:0a:a7:f6:4e:06:25:
2c:32:ef:a8:a2:4c:b1:fe:8c:09:9d:06:d9:01:c8:
13:56:8e:8b:d1:f2:c5:2f:43:31:f9:b0:69:e9:03:
18:32:cc:25:91:99:27:f9:99:9c:f3:c9:1c:b8:23:
c3:ad:55:ee:e0:e0:f6:34:d4:61:eb:fa:e7:4e:0d:
79:b7:63:2a:78:8c:01:12:64:d3:28:26:4a:ce:30:
18:7a:e1:45:84:4a:6b:49:34:e6:59:86:49:55:e8:
e8:58:d3:3a:38:6a:99:0b:75:f3:95:57:83:91:fc:
4e:68:96:bf:ea:2d:cf:2a:ed:62:c0:8d:ba:8b:90:
59:8e:75:a1:95:1b:2f:75:2e:fb:c7:5b:47:52:6b:
29:7a:d6:3c:d1:a7:20:7b:67:cc:5a:f4:74:05:03:
73:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9D:A0:7F:CF:28:9A:CD:4B:B3:6F:1F:61:AC:CD:7E:6C:02:78:CD
X509v3 Authority Key Identifier:
keyid:32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:1e:5a:46:21:42:6f:33:ee:df:5e:66:fc:fa:52:6f:a0:1b:
e9:7d:58:bb:e9:03:05:f9:1e:00:6e:fd:54:3f:1b:f5:17:bd:
dc:68:77:f6:85:e9:63:4e:d4:a1:79:0b:97:05:e3:df:d8:40:
43:46:4e:d4:62:d5:36:26:f5:ea:ae:1c:36:9c:14:2e:41:17:
da:ad:00:4f:ba:2a:a8:80:00:7f:60:b4:77:64:7f:d5:2c:08:
b8:ea:0d:c8:28:5a:89:1b:8d:ee:30:58:2c:c7:dc:67:d9:35:
25:88:72:d6:73:b4:1a:c0:96:06:86:ec:d8:40:b9:71:ce:33:
1f:fb:df:d7:5f:c5:7d:b2:3c:ab:ed:65:a3:8e:41:39:64:ab:
ef:f6:9e:29:29:e2:79:05:a2:00:e7:32:6b:9e:74:e7:78:b7:
aa:5a:8d:14:7b:54:f8:b1:35:66:90:de:a3:e4:25:d8:35:40:
fb:e2:bb:76:7b:5a:62:da:91:05:4c:07:83:4d:52:b7:bc:b0:
10:65:38:96:4d:6f:78:f8:35:f4:5e:39:8f:2a:5a:ee:9e:98:
bb:18:ea:bb:1e:28:65:be:27:78:1e:ed:6b:da:df:b7:eb:90:
ca:04:a1:a8:77:5e:40:83:2a:6d:5b:e2:01:2b:bd:b9:b5:03:
4d:83:c6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:33:58 2025 by rpki-client