Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
File: MlDVjXew-l3OxPQq6W80e8gNqj4.mft (raw, json)
Hash identifier: xGO9U7TOk0KK/BZclIHUibCxLXzAVEhOcilKwvTGQAw=
Subject key identifier: 68:78:CC:A0:C9:9D:17:DC:36:14:1E:25:FE:3D:05:90:75:58:21:54
Authority key identifier: 32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
Certificate issuer: /CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Certificate serial: 019881674103F352926A047A468E22CD3705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 22:01:24 +0000
Manifest this update: Wed 06 Aug 2025 22:01:24 +0000
Manifest next update: Thu 07 Aug 2025 22:01:24 +0000
Files and hashes: 1: MlDVjXew-l3OxPQq6W80e8gNqj4.crl (hash: ceTb/A/sNLzK6HrVn2cSlz1WARHGxvqXsR4s4U9V/wg=)
2: ndShIgCcbsHhUOk-1qX-uYRIuS0.roa (hash: czNtU+SX8QXrL7dVcdfeMOMIGpfeCslspqe7rpd0A8Q=)
3: xNxMZxSDyX7cldenO1Ro1zeTZuQ.roa (hash: EdeIoFQQfBBtul4Dl4kQ19MbiTrPJ3gXVWY5FjQfawo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:41:03:f3:52:92:6a:04:7a:46:8e:22:cd:37:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Validity
Not Before: Aug 6 22:01:24 2025 GMT
Not After : Aug 7 22:01:24 2025 GMT
Subject: CN=6878cca0c99d17dc36141e25fe3d059075582154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8d:18:33:c4:61:15:57:b8:7b:a3:4f:c5:c5:
e6:d0:42:33:0d:ad:b4:d2:ff:60:31:d2:a6:8e:51:
89:94:9c:68:ff:5b:94:f6:98:45:df:e4:b5:11:a3:
d2:47:40:7e:ac:fe:5f:25:4c:04:39:fe:f2:f8:23:
b3:c3:e7:9b:8d:60:70:cd:a5:f2:18:fd:d3:60:a6:
b8:04:f0:22:a9:f9:ca:63:3c:f4:fc:92:2f:9e:42:
ef:3a:70:4a:41:73:45:3e:86:61:aa:59:ff:bf:1e:
cc:1d:85:60:f7:40:4c:07:77:1d:4b:ea:97:ce:a4:
84:27:4d:22:38:eb:7e:81:bd:4d:50:4c:e3:42:b6:
8a:1f:84:36:5f:b3:c4:9d:08:b3:d7:8b:41:d4:09:
fa:a1:8c:40:c9:27:8f:73:0a:e8:9f:71:50:8e:cb:
cb:d2:4a:5b:df:74:45:a1:cf:3d:77:65:05:2f:61:
0e:c6:f4:24:64:b5:4b:1e:2c:1b:9e:56:4d:6f:10:
3f:7f:d7:b2:8b:c5:4b:3f:64:a4:02:bb:4c:8a:63:
91:70:16:5f:fd:18:56:00:95:4f:97:3b:0a:90:40:
3a:de:21:5d:ac:ce:b9:2f:f4:2e:05:45:5c:a6:3b:
d8:69:15:71:b9:05:b7:80:e6:56:1a:7b:9f:0e:9b:
a5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:78:CC:A0:C9:9D:17:DC:36:14:1E:25:FE:3D:05:90:75:58:21:54
X509v3 Authority Key Identifier:
keyid:32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8e:ea:b4:45:fa:bf:db:21:30:ce:9b:e5:3c:7a:65:d7:80:
2c:fd:52:fa:91:8c:1b:46:bc:18:ae:a7:31:93:d9:dc:72:04:
ca:b8:93:96:22:bb:8a:1f:bf:cc:13:53:92:6a:db:56:f5:29:
5a:3e:f1:7b:18:27:4b:7c:ce:cf:91:c3:43:62:22:f2:44:d3:
8a:bb:04:00:0b:88:55:4c:7d:a9:77:05:c0:b7:b8:93:c8:71:
91:e7:33:3c:b2:db:2c:7d:68:49:50:0c:0b:2d:e4:00:9e:23:
3c:b2:bf:67:1b:53:f8:b3:3d:ad:14:d0:b8:46:33:c3:05:36:
19:32:d1:62:bc:1a:0f:22:63:97:7e:d8:58:7c:bc:07:20:cd:
bd:b4:83:ea:63:97:00:80:24:c6:7c:f7:c9:4b:b6:85:ea:bd:
84:5f:40:21:f1:ff:80:e6:da:2c:c4:b2:25:df:ab:88:3e:6c:
73:76:90:5d:19:3f:d2:c1:ba:d0:24:e4:a7:4c:af:39:59:56:
1d:ba:c2:a6:37:09:b2:15:43:0a:45:bc:cd:44:8d:47:49:da:
5a:c7:f4:e0:67:0b:4a:0d:37:08:98:34:ab:b7:7c:84:65:e3:
00:ef:fb:57:8f:b3:44:58:8f:d9:ca:6a:14:37:c2:61:7f:98:
d1:bb:fb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:58 2025 by rpki-client