
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
File: mlJqc86Pn2LBShGi6pE-wnPVjEY.mft (raw, json)
Hash identifier: GDtsWd8BulbE5Q2c5B9STzgvw1Z6Jjszbc6w6uIs28I=
Subject key identifier: F9:71:A0:FA:EE:7E:55:AB:12:60:E9:68:1C:D4:0A:63:55:CB:E7:95
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Certificate issuer: /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial: 0199FC217B470AC101FBB3206F214023FD7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
Manifest number: 16EE
Signing time: Sun 19 Oct 2025 11:01:16 +0000
Manifest this update: Sun 19 Oct 2025 11:01:16 +0000
Manifest next update: Mon 20 Oct 2025 11:01:16 +0000
Files and hashes: 1: 37xCCUhytigOkbo8skkNphl6CDo.roa (hash: EZZOllbO3rU0Aq71pT+LnxPWU1OR5RUdYC5xtbHlqV0=)
2: EzlaPz9ay6RZ4KUo_Zx1lcWyYyE.roa (hash: 8mVwmiELeQwOp0IzUJ7CNWnPRJxXboTOfv7waHdL35E=)
3: HmloYPhthfBI7_3S01XoeHMHM_0.roa (hash: zT7e2sKU35SC+6Uf05YzOC00VreFA+3zPNOd9kp3exg=)
4: aBb_QnqfCmFuIbPpQn9d7-oaQds.roa (hash: 9cT2/7QK1Jv3/LAJrIXNohZ9zwR8FjnbBcxZKBheYgE=)
5: bJE571Es9mWytmWy8Hm2hU0LvwQ.roa (hash: G4ykv8ElUqNocIC2Di9TU9f+tq6JYb2XSPQUlNwbQs8=)
6: jNEc9JKntfCRYR_UowBHCVGcgfU.roa (hash: wUVreTUUoleXZY0NQI3FxCnAa07OL9N5o1BFPoQRf+k=)
7: lPFksRdLJVDV0BeRSYCopl0nK1A.roa (hash: Z/l2sT/TM2PqTeCwRcYw3ZHE/PJvSKLQBMiM2PLHoBk=)
8: mlJqc86Pn2LBShGi6pE-wnPVjEY.crl (hash: qrSCAfGQW/phNzPVoWqrs7irgO3OyYbH25qVqp27R3Y=)
9: rxtrSvmD_RFnWzieVlVkl0VvNHg.roa (hash: /miHkpCVQbdxK2uWlYSN1Ko3dggZV4gzjlL/pMNtIqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:7b:47:0a:c1:01:fb:b3:20:6f:21:40:23:fd:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Validity
Not Before: Oct 19 11:01:16 2025 GMT
Not After : Oct 20 11:01:16 2025 GMT
Subject: CN=f971a0faee7e55ab1260e9681cd40a6355cbe795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9f:3b:e9:67:81:63:29:3d:41:ad:30:7b:1f:
7c:b7:42:90:15:0e:4b:49:d4:41:97:c9:4f:f4:f8:
66:d8:16:9b:35:6d:ac:25:fe:bc:ce:07:42:d4:c4:
09:e1:f0:72:ad:f5:e0:05:be:26:ae:f2:6e:2a:a9:
72:f8:c6:e3:4b:bf:54:8e:a8:17:1b:aa:19:21:ae:
73:6c:7b:fe:11:6e:e7:58:10:23:e8:7a:bf:16:c7:
e3:ba:9f:58:bb:96:12:f2:e7:d7:2d:dd:c6:8c:ba:
ed:b7:f0:7d:a0:db:04:14:f3:7a:0b:e1:31:43:6a:
81:9e:0d:d9:98:44:e8:f9:ae:6b:2b:2a:b7:a0:e9:
75:f7:02:2a:29:b9:ef:7a:a5:a8:b7:72:0f:28:f3:
d1:d9:3e:55:ea:77:7a:69:09:7a:b1:aa:dc:ba:e7:
c1:c1:99:68:a2:7b:fc:16:b2:1c:38:63:e0:58:ef:
6d:c6:48:54:4b:79:c3:2c:ff:1e:9a:5f:62:4e:73:
71:6d:95:86:62:d3:b3:9c:0d:85:dc:67:10:a6:44:
46:b4:ac:db:13:93:9e:75:3b:17:53:3a:ad:17:bd:
7b:9d:62:2d:07:5c:e6:b5:8a:e6:b0:79:74:23:96:
d0:86:65:cf:48:aa:5c:82:74:17:02:c6:6b:f0:99:
a5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:71:A0:FA:EE:7E:55:AB:12:60:E9:68:1C:D4:0A:63:55:CB:E7:95
X509v3 Authority Key Identifier:
keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:39:95:b8:24:e8:bc:fe:24:1f:2c:a1:54:93:34:c1:36:85:
4b:fb:59:a1:81:e9:33:2c:48:67:89:d1:ac:7c:14:68:85:db:
45:33:60:53:49:07:75:f6:db:66:ee:bb:7a:d6:d1:bc:12:37:
6d:01:d3:a2:84:66:14:5a:c4:c8:ab:75:35:b4:af:36:17:79:
09:46:33:cb:78:b0:5e:ef:af:12:05:55:18:82:17:2d:43:ec:
2f:79:62:4a:b2:f4:f6:22:bf:b9:63:fe:ec:7b:34:0b:c9:b2:
5b:eb:f1:c6:4d:dd:d6:02:20:fa:a8:60:fd:cf:ad:73:ec:ae:
27:98:59:fa:65:c7:f1:d5:21:85:81:88:f4:9c:ad:8e:0b:f4:
e5:93:a1:eb:7d:a0:da:77:47:04:92:fc:44:a8:20:1a:b2:af:
d7:92:d4:9e:f0:ad:d4:34:30:8f:c2:aa:4c:2b:c1:87:a8:6e:
37:4f:00:b3:f5:79:26:41:0a:c0:94:2e:86:80:77:54:69:e9:
d9:46:9d:18:da:37:00:f4:df:0a:12:ee:fd:40:36:28:f3:51:
90:44:cf:a5:51:a0:92:43:88:01:96:92:f0:e6:21:5b:35:0c:
0d:1c:42:7c:a4:43:03:80:17:75:2a:c6:f1:a0:08:8b:41:f0:
56:8f:56:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:39:51 2025 by rpki-client