Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a9a7d8-a9bf-49e2-b68a-a5b4f26fc976/1/MlWeB9Y4jdKvdTVl6SU9aC-T694.mft
File: MlWeB9Y4jdKvdTVl6SU9aC-T694.mft (raw, json)
Hash identifier: 0Vg9cdBNkkXg7qfPuv2bYalV9g1cbOe9qu0M6sDFaKA=
Subject key identifier: D9:AF:55:C6:A6:8B:69:14:E9:4B:99:A1:02:5E:74:75:7A:CA:F3:8E
Authority key identifier: 32:55:9E:07:D6:38:8D:D2:AF:75:35:65:E9:25:3D:68:2F:93:EB:DE
Certificate issuer: /CN=32559e07d6388dd2af753565e9253d682f93ebde
Certificate serial: 01976D06AB63ED7EDD5B3D3728617B23D0A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlWeB9Y4jdKvdTVl6SU9aC-T694.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/a9a7d8-a9bf-49e2-b68a-a5b4f26fc976/1/MlWeB9Y4jdKvdTVl6SU9aC-T694.mft
Manifest number: 0AE7
Signing time: Sat 14 Jun 2025 06:00:43 +0000
Manifest this update: Sat 14 Jun 2025 06:00:43 +0000
Manifest next update: Sun 15 Jun 2025 06:00:43 +0000
Files and hashes: 1: MlWeB9Y4jdKvdTVl6SU9aC-T694.crl (hash: jK45RGJSGmDyqFGBkFt/ug1EmpWnpAA80Q+xS1+Eyb0=)
2: T69lzJMivaoqkIjYcLrgOdTOnrA.roa (hash: 0Ssr+TPBD7HcausVt5jkHNvBIqeqcRP2h1WDFhHFN7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/a9a7d8-a9bf-49e2-b68a-a5b4f26fc976/1/MlWeB9Y4jdKvdTVl6SU9aC-T694.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/a9a7d8-a9bf-49e2-b68a-a5b4f26fc976/1/MlWeB9Y4jdKvdTVl6SU9aC-T694.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlWeB9Y4jdKvdTVl6SU9aC-T694.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:ab:63:ed:7e:dd:5b:3d:37:28:61:7b:23:d0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32559e07d6388dd2af753565e9253d682f93ebde
Validity
Not Before: Jun 14 06:00:43 2025 GMT
Not After : Jun 15 06:00:43 2025 GMT
Subject: CN=d9af55c6a68b6914e94b99a1025e74757acaf38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7a:14:ed:45:92:8b:a1:78:ea:a1:f8:d3:54:
76:55:09:d6:21:ba:93:a9:21:64:b6:4e:80:63:40:
d6:37:17:e1:80:74:10:e3:85:1e:a4:61:2d:c9:9f:
36:e6:52:85:41:eb:c5:a6:b5:05:ee:1d:2f:0e:8f:
34:e8:50:68:37:2a:d6:24:25:0a:33:d4:62:f2:2d:
86:1a:f8:58:b2:06:8d:f3:33:e5:40:05:a1:be:ba:
66:3a:09:00:6d:ab:42:37:aa:88:77:4c:af:e8:87:
15:0d:ce:10:26:0e:0f:bf:ea:cf:03:4a:59:4c:41:
8e:54:c8:8a:04:97:2a:d2:8d:a3:d0:29:d7:64:72:
a3:4e:37:a4:7b:1e:68:c5:d3:1b:2e:19:a0:03:b1:
a4:4b:5a:b4:74:58:92:ca:ea:f7:db:1b:dc:82:6e:
1b:de:f6:95:98:9d:0c:8f:bf:86:1c:39:d0:85:a3:
33:e2:e2:72:4d:0a:90:a5:9c:9a:26:60:a3:68:6b:
d1:66:02:b0:35:88:cf:fe:38:bf:62:ee:3d:4d:79:
6f:d1:a6:84:50:c8:08:e5:4b:5a:fc:08:c7:cc:84:
09:58:e4:0a:b6:59:67:4f:2c:0f:98:12:ab:81:74:
14:b1:79:fe:92:d9:b2:de:76:83:3e:07:b3:ff:1d:
2e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AF:55:C6:A6:8B:69:14:E9:4B:99:A1:02:5E:74:75:7A:CA:F3:8E
X509v3 Authority Key Identifier:
keyid:32:55:9E:07:D6:38:8D:D2:AF:75:35:65:E9:25:3D:68:2F:93:EB:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlWeB9Y4jdKvdTVl6SU9aC-T694.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a9a7d8-a9bf-49e2-b68a-a5b4f26fc976/1/MlWeB9Y4jdKvdTVl6SU9aC-T694.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a9a7d8-a9bf-49e2-b68a-a5b4f26fc976/1/MlWeB9Y4jdKvdTVl6SU9aC-T694.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:3a:a9:a1:10:b3:40:3f:34:28:7f:30:27:fc:61:eb:7e:88:
9e:36:d9:14:ee:f9:7a:ab:85:79:34:66:33:e6:eb:9f:30:32:
49:46:f0:f5:80:f8:4a:ab:a8:23:ac:18:2e:54:37:15:b8:90:
a1:ca:ef:0b:73:94:d6:1c:12:47:37:95:6c:70:b7:75:7d:c9:
84:33:48:41:fd:d4:f2:e9:21:6c:05:1b:11:a7:e5:d1:2e:c5:
f0:3d:41:35:1d:42:00:bd:dc:06:2a:fc:a1:18:83:6c:2f:d3:
5c:2b:76:4c:8e:8d:10:8c:3c:4c:9f:74:b5:34:c8:3a:5f:bb:
25:96:a5:0f:76:2a:f9:af:ae:70:22:6d:23:ad:cd:f7:a6:e1:
0d:87:b2:62:b8:f2:9c:4c:16:e0:1b:a3:6e:d8:15:68:6b:9c:
5a:82:bb:d2:c0:f6:07:93:31:fd:84:4d:49:7d:01:8b:b5:9e:
09:48:ee:21:3e:f0:74:35:d5:91:56:37:81:64:ae:a7:0d:9b:
5b:fd:9c:48:74:ac:6d:59:70:eb:b5:15:28:9e:7c:c7:80:6b:
d9:7a:92:dc:3f:4f:d1:3c:0d:fb:c7:67:63:ba:7f:7a:a1:1d:
44:f8:e9:a2:7a:35:1c:9e:c8:b9:22:5f:e2:68:af:a9:e1:95:
76:f0:41:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtBqtj7X7dWz03KGF7I9CpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNTU5ZTA3ZDYzODhkZDJhZjc1MzU2NWU5MjUzZDY4MmY5
M2ViZGUwHhcNMjUwNjE0MDYwMDQzWhcNMjUwNjE1MDYwMDQzWjAzMTEwLwYDVQQD
EyhkOWFmNTVjNmE2OGI2OTE0ZTk0Yjk5YTEwMjVlNzQ3NTdhY2FmMzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinoU7UWSi6F46qH401R2VQnWIbqT
qSFktk6AY0DWNxfhgHQQ44UepGEtyZ825lKFQevFprUF7h0vDo806FBoNyrWJCUK
M9Ri8i2GGvhYsgaN8zPlQAWhvrpmOgkAbatCN6qId0yv6IcVDc4QJg4Pv+rPA0pZ
TEGOVMiKBJcq0o2j0CnXZHKjTjekex5oxdMbLhmgA7GkS1q0dFiSyur32xvcgm4b
3vaVmJ0Mj7+GHDnQhaMz4uJyTQqQpZyaJmCjaGvRZgKwNYjP/ji/Yu49TXlv0aaE
UMgI5Uta/AjHzIQJWOQKtllnTywPmBKrgXQUsXn+ktmy3naDPgez/x0ugQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmvVcami2kU6UuZoQJedHV6yvOOMB8GA1UdIwQY
MBaAFDJVngfWOI3Sr3U1ZeklPWgvk+veMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWxXZUI5WTRqZEt2ZFRWbDZTVTlhQy1UNjk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9hOWE3ZDgtYTliZi00OWUyLWI2OGEt
YTViNGYyNmZjOTc2LzEvTWxXZUI5WTRqZEt2ZFRWbDZTVTlhQy1UNjk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9hOWE3ZDgtYTliZi00OWUyLWI2OGEtYTViNGYyNmZjOTc2
LzEvTWxXZUI5WTRqZEt2ZFRWbDZTVTlhQy1UNjk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdzqpoRCz
QD80KH8wJ/xh636InjbZFO75equFeTRmM+brnzAySUbw9YD4SquoI6wYLlQ3FbiQ
ocrvC3OU1hwSRzeVbHC3dX3JhDNIQf3U8ukhbAUbEafl0S7F8D1BNR1CAL3cBir8
oRiDbC/TXCt2TI6NEIw8TJ90tTTIOl+7JZalD3Yq+a+ucCJtI63N96bhDYeyYrjy
nEwW4BujbtgVaGucWoK70sD2B5Mx/YRNSX0Bi7WeCUjuIT7wdDXVkVY3gWSupw2b
W/2cSHSsbVlw67UVKJ58x4Br2XqS3D9P0TwN+8dnY7p/eqEdRPjpono1HJ7IuSJf
4mivqeGVdvBBow==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:22:38 2025 by rpki-client