Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
File: ml8NkStedHrlaNgIoEAptOvGbkc.mft (raw, json)
Hash identifier: mk8VRGEpmue7dhiJW64OGaiVkGq+OwAySRZpvo6lCq4=
Subject key identifier: 9C:54:CE:DA:0E:48:13:EF:95:0A:AB:63:8B:C4:19:55:1A:DB:FD:6A
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial: 0198D4E091B15184D23AA439D6B1D4E6CB49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
Manifest number: 0D72
Signing time: Sat 23 Aug 2025 03:02:23 +0000
Manifest this update: Sat 23 Aug 2025 03:02:23 +0000
Manifest next update: Sun 24 Aug 2025 03:02:23 +0000
Files and hashes: 1: 0qMVRghLmSWdSNAhWBOt8uMlDGs.roa (hash: kOLfFL2EFwiaYaCo8C+GmQcPeyIeF+5TOTsfcPc2OmI=)
2: CoddMQm6LTCSZZwVDyRLAqAXOLQ.roa (hash: wya/ieDlwU5gulg2lLSwRO1xnpgtUhKNOqwGEK2Nmn0=)
3: ml8NkStedHrlaNgIoEAptOvGbkc.crl (hash: ymtJlOyoymTfHxXosLGW3kgdqQKgFTRxCob+4tmgSPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:91:b1:51:84:d2:3a:a4:39:d6:b1:d4:e6:cb:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Validity
Not Before: Aug 23 03:02:23 2025 GMT
Not After : Aug 24 03:02:23 2025 GMT
Subject: CN=9c54ceda0e4813ef950aab638bc419551adbfd6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a6:d5:cf:d7:97:98:1a:c3:dd:83:ec:26:a3:
04:ed:22:ee:09:75:9d:65:ab:69:13:88:47:41:d3:
ee:be:52:25:57:92:15:be:13:47:80:0f:2e:b7:23:
49:dc:9b:85:b8:fb:28:ca:ab:6f:9d:f4:83:c3:ba:
53:12:80:a1:46:6a:4c:2f:fa:00:fa:76:b4:7f:09:
91:2e:b0:2c:5a:3a:10:5c:6c:c6:e4:b7:cd:5a:a6:
99:d5:f4:1e:09:a7:da:38:1f:b0:13:35:10:74:c9:
50:8f:79:f9:30:2b:c3:0c:c2:79:cd:65:60:e5:f3:
eb:48:42:97:a4:f2:56:23:a7:28:24:81:d9:fd:d7:
13:51:45:2c:45:49:97:12:86:f4:5f:ff:1a:58:93:
b5:0a:5a:4f:d2:37:55:df:c7:22:ab:33:0d:e3:89:
17:1a:f2:13:2b:f1:77:95:ca:03:56:71:a5:cd:ae:
b3:f5:a0:de:10:25:87:93:6c:5d:25:64:72:b9:57:
03:9f:f1:36:b4:02:ef:c4:33:9f:3e:dd:af:d1:be:
35:e4:96:8c:10:0e:09:45:16:48:3b:23:c4:62:f0:
ee:74:46:a4:48:56:e7:40:78:f1:26:48:71:3d:b1:
8e:c9:d7:13:24:0d:e2:90:59:27:ca:21:b2:4f:cf:
d8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:54:CE:DA:0E:48:13:EF:95:0A:AB:63:8B:C4:19:55:1A:DB:FD:6A
X509v3 Authority Key Identifier:
keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:aa:3e:6a:1c:31:ae:ce:5e:96:d8:71:00:e4:96:a7:20:5b:
2f:ff:c1:28:eb:48:1b:74:2c:99:dd:fc:25:de:5b:44:e2:4e:
c1:ff:25:c1:36:7c:07:58:1e:48:54:6b:76:bc:97:d8:3e:e6:
7a:74:0c:18:7d:be:5c:dc:99:62:f8:45:e3:3c:15:fd:d4:bb:
54:fb:ee:51:9e:cb:24:70:71:c6:17:29:c9:64:b2:39:12:c9:
0d:46:5c:02:75:69:fb:0e:54:6f:dc:ef:a6:7c:44:6e:21:8f:
f7:23:2f:63:fd:a6:5a:8b:d7:04:26:a0:7a:55:b0:a4:b7:ae:
d5:de:29:3d:04:bd:29:47:e7:ed:8f:59:1e:74:92:4c:b2:26:
de:4b:5d:65:35:cf:cc:04:15:f8:41:ac:f7:97:03:ba:e3:b3:
05:56:ec:03:c3:b6:3d:41:6d:dc:38:df:37:9b:46:a8:51:92:
7c:6c:12:30:22:0d:4c:f7:09:ba:f5:8c:8b:ed:c3:22:6b:80:
32:36:b7:66:38:76:4c:c5:48:b4:9b:d0:02:20:47:06:f7:4e:
a3:82:f2:ac:55:ee:2a:c9:51:21:c4:8d:bb:33:a8:12:1c:26:
23:ea:b8:c5:bf:39:3f:99:be:b1:90:a7:ca:25:a1:2a:2a:66:
95:98:1c:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4JGxUYTSOqQ51rHU5stJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNWYwZDkxMmI1ZTc0N2FlNTY4ZDgwOGEwNDAyOWI0ZWJj
NjZlNDcwHhcNMjUwODIzMDMwMjIzWhcNMjUwODI0MDMwMjIzWjAzMTEwLwYDVQQD
Eyg5YzU0Y2VkYTBlNDgxM2VmOTUwYWFiNjM4YmM0MTk1NTFhZGJmZDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qbVz9eXmBrD3YPsJqME7SLuCXWd
ZatpE4hHQdPuvlIlV5IVvhNHgA8utyNJ3JuFuPsoyqtvnfSDw7pTEoChRmpML/oA
+na0fwmRLrAsWjoQXGzG5LfNWqaZ1fQeCafaOB+wEzUQdMlQj3n5MCvDDMJ5zWVg
5fPrSEKXpPJWI6coJIHZ/dcTUUUsRUmXEob0X/8aWJO1ClpP0jdV38ciqzMN44kX
GvITK/F3lcoDVnGlza6z9aDeECWHk2xdJWRyuVcDn/E2tALvxDOfPt2v0b415JaM
EA4JRRZIOyPEYvDudEakSFbnQHjxJkhxPbGOydcTJA3ikFknyiGyT8/YfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxUztoOSBPvlQqrY4vEGVUa2/1qMB8GA1UdIwQY
MBaAFJpfDZErXnR65WjYCKBAKbTrxm5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jNTMzYjItYWU5ZC00NDcwLWI5ODIt
ZjU0MDQzOWE0YWUyLzEvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9jNTMzYjItYWU5ZC00NDcwLWI5ODItZjU0MDQzOWE0YWUy
LzEvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIao+ahwx
rs5elthxAOSWpyBbL//BKOtIG3Qsmd38Jd5bROJOwf8lwTZ8B1geSFRrdryX2D7m
enQMGH2+XNyZYvhF4zwV/dS7VPvuUZ7LJHBxxhcpyWSyORLJDUZcAnVp+w5Ub9zv
pnxEbiGP9yMvY/2mWovXBCagelWwpLeu1d4pPQS9KUfn7Y9ZHnSSTLIm3ktdZTXP
zAQV+EGs95cDuuOzBVbsA8O2PUFt3DjfN5tGqFGSfGwSMCINTPcJuvWMi+3DImuA
Mja3Zjh2TMVItJvQAiBHBvdOo4LyrFXuKslRIcSNuzOoEhwmI+q4xb85P5m+sZCn
yiWhKipmlZgcCA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:11 2025 by rpki-client