Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
File: ml8NkStedHrlaNgIoEAptOvGbkc.mft (raw, json)
Hash identifier: z/i+++TEB6+t00RnvHG/oIg8jS549Rj7AMf2PmP/0PQ=
Subject key identifier: B1:9E:F7:89:29:54:0F:77:65:24:17:11:2F:72:1F:49:3E:55:E1:8C
Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Certificate serial: 0199FE101C8D48EE37E45DD8CBC404497172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
Manifest number: 0E0C
Signing time: Sun 19 Oct 2025 20:01:32 +0000
Manifest this update: Sun 19 Oct 2025 20:01:32 +0000
Manifest next update: Mon 20 Oct 2025 20:01:32 +0000
Files and hashes: 1: 0qMVRghLmSWdSNAhWBOt8uMlDGs.roa (hash: kOLfFL2EFwiaYaCo8C+GmQcPeyIeF+5TOTsfcPc2OmI=)
2: CoddMQm6LTCSZZwVDyRLAqAXOLQ.roa (hash: wya/ieDlwU5gulg2lLSwRO1xnpgtUhKNOqwGEK2Nmn0=)
3: ml8NkStedHrlaNgIoEAptOvGbkc.crl (hash: 8WZ7gNVzFLdwMI/oFDytu5sQmVUD/jU++iRahbYS070=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:1c:8d:48:ee:37:e4:5d:d8:cb:c4:04:49:71:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47
Validity
Not Before: Oct 19 20:01:32 2025 GMT
Not After : Oct 20 20:01:32 2025 GMT
Subject: CN=b19ef78929540f77652417112f721f493e55e18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:b0:87:e2:7d:44:e0:0d:7e:29:cd:23:e1:
fd:b8:67:91:3e:b6:6e:5f:e5:20:ed:d0:1d:b7:5b:
af:98:ad:89:83:06:0a:54:ff:44:f8:53:ab:d8:c7:
94:d6:c0:6b:fc:fd:b8:17:4d:70:bf:64:a1:f6:59:
68:e0:b4:91:f1:02:a5:79:53:f0:53:37:14:4a:15:
6a:c9:98:e9:8c:b8:53:a8:d7:90:ce:c7:89:7b:2e:
71:62:6d:57:50:f8:33:76:8d:dc:0a:bc:17:3e:79:
2b:ba:bf:75:2d:39:95:46:4b:0f:3f:a6:c8:d7:ce:
43:56:e3:96:7b:e4:98:4d:af:f4:ea:15:48:0b:54:
00:50:bc:75:fc:c3:56:99:5b:69:70:cb:a1:d0:c3:
de:23:f9:b2:08:a1:37:73:eb:21:0a:ca:fc:92:b1:
c7:93:8e:9f:50:0e:d7:63:15:3a:98:22:4f:2e:ed:
8a:f6:43:ef:92:c4:de:92:3d:d1:80:6a:9c:41:d9:
07:ed:8b:ce:fd:ad:91:28:00:e8:33:d8:1b:58:10:
94:c0:0b:fd:27:ed:75:98:f2:d3:a5:b3:a4:6e:70:
16:a2:d4:36:df:d5:6c:d4:10:5b:9f:be:23:76:a5:
9d:11:31:20:be:6f:ee:90:35:a7:ca:1a:cc:36:41:
3b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9E:F7:89:29:54:0F:77:65:24:17:11:2F:72:1F:49:3E:55:E1:8C
X509v3 Authority Key Identifier:
keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:24:6d:2e:bb:0c:1c:e5:7e:0a:4c:a8:e8:d8:8e:52:6f:d9:
02:56:d9:35:a5:92:7b:23:94:f2:c2:82:ca:67:0f:08:01:73:
f6:40:3b:a7:96:60:c2:23:07:fb:df:95:e7:94:b8:fc:f8:2c:
65:3a:f4:a9:a3:4b:d3:e8:5a:82:f6:ad:5e:d7:ea:70:48:ce:
95:27:a1:8d:d9:58:13:a1:ad:f1:b8:a1:1e:53:a3:25:7b:46:
6f:ea:bb:f6:96:a0:91:7b:bc:72:e3:f1:18:ae:fa:ca:85:93:
d6:f7:64:4b:83:e2:10:68:e8:af:92:d7:4b:f8:c8:16:7a:d9:
7d:26:77:31:61:56:34:4c:58:12:c4:f3:f0:d2:f7:67:7a:6b:
18:f2:c0:b9:a5:07:24:28:76:47:40:be:4f:67:ff:10:0f:bc:
e9:20:97:ac:18:8c:c4:c4:0c:7e:5d:1e:c3:ad:c9:e7:0b:5a:
02:f3:e5:be:7e:f5:4a:a6:45:23:17:d8:78:8d:17:6f:87:b5:
f7:39:be:2b:aa:c2:ca:75:9f:7d:95:52:a8:52:1b:99:20:27:
de:c4:98:c1:5e:93:25:f8:5c:35:88:d7:11:06:57:e7:87:ce:
2c:38:73:1e:ae:58:22:bc:1d:dc:df:3c:92:c0:ae:86:97:ac:
8e:60:87:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:12:10 2025 by rpki-client