Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
File: MlNiVLPnSQBnW8br1QroJYKLmnY.mft (raw, json)
Hash identifier: Qq91/18PHLqkyWRnY5Tzhr+YwfcGITOlUzOekkOQwNA=
Subject key identifier: 8A:64:60:9D:C0:A4:7F:1C:BE:4C:68:11:DF:2F:4C:2E:58:78:17:4A
Authority key identifier: 32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
Certificate issuer: /CN=32536254b3e74900675bc6ebd50ae825828b9a76
Certificate serial: 01988E7DD0C703FD04D76508EF829361AB0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
Manifest number: 1624
Signing time: Sat 09 Aug 2025 11:01:06 +0000
Manifest this update: Sat 09 Aug 2025 11:01:06 +0000
Manifest next update: Sun 10 Aug 2025 11:01:06 +0000
Files and hashes: 1: MlNiVLPnSQBnW8br1QroJYKLmnY.crl (hash: V57oP4LwV3GhbiG2mZsgEFFBhfoNHEIiQq/e0rJi6OM=)
2: eUynvlBI4OuUX1kGjVQZhKaUnMw.roa (hash: VKfdvSp0tX2NjmjbmhxKu4y9+1s59i+sIHADFu4rJzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:7d:d0:c7:03:fd:04:d7:65:08:ef:82:93:61:ab:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32536254b3e74900675bc6ebd50ae825828b9a76
Validity
Not Before: Aug 9 11:01:06 2025 GMT
Not After : Aug 10 11:01:06 2025 GMT
Subject: CN=8a64609dc0a47f1cbe4c6811df2f4c2e5878174a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:ae:37:97:51:09:4e:16:cc:39:73:9e:93:
d3:f9:08:4d:2e:5c:91:86:38:cb:19:5b:9a:cf:60:
b9:5a:b0:2a:eb:f0:a9:ed:a4:76:77:71:8d:87:75:
34:66:f7:c9:63:a0:b7:fe:cf:5a:4a:83:45:81:21:
b4:8d:36:85:7c:50:f2:bb:73:7b:37:0d:7d:aa:16:
b1:37:50:0b:04:1c:79:aa:a0:4a:ef:25:28:9e:28:
7c:8b:5b:21:54:78:83:35:68:0b:cc:45:18:49:2a:
11:e1:c2:86:2f:53:7e:c5:86:b9:19:ad:2b:55:ac:
b6:16:dc:9f:8d:d4:75:9e:b3:a9:91:73:4c:0b:63:
eb:61:85:8e:d6:d6:52:e0:d4:18:ce:f5:3f:9d:10:
18:fe:21:cd:be:84:d3:8d:08:87:96:b9:81:d3:8f:
75:ac:78:92:18:db:43:d4:f0:d1:a1:fc:d9:00:e2:
98:8e:4f:e3:c5:f1:8c:0a:ea:c9:ee:e2:ac:e5:9f:
79:25:e4:06:03:f8:d9:f3:f2:03:59:0d:cb:d3:ce:
9c:98:9b:f9:f8:d3:7f:36:5c:2a:0e:79:41:78:b6:
0c:e9:4c:03:1a:0b:00:f8:58:93:2e:2b:7b:cf:98:
87:25:2e:64:e9:bf:ff:4f:4b:21:d8:4a:c6:04:ed:
42:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:64:60:9D:C0:A4:7F:1C:BE:4C:68:11:DF:2F:4C:2E:58:78:17:4A
X509v3 Authority Key Identifier:
keyid:32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:89:fb:21:10:d9:0d:fb:46:bd:41:b1:62:66:4b:f1:2e:af:
3f:2f:77:75:83:9e:0f:58:13:e9:60:69:cb:5f:df:c8:7a:c8:
e9:7c:d0:31:db:3b:99:f3:90:62:98:85:cd:a9:1f:35:02:7e:
62:7d:34:bb:b1:10:28:c6:e9:11:35:53:95:51:25:06:bf:b0:
92:03:41:a4:64:f1:4d:12:6e:4a:93:75:1c:49:e8:0f:59:68:
1c:24:6f:03:41:eb:9e:9b:55:0f:64:67:49:b4:c6:f4:1d:b2:
00:93:c7:d2:42:9c:f3:d5:33:41:f1:55:1a:ff:5b:14:0c:f9:
3c:eb:08:92:92:34:d1:af:02:65:c1:e1:1f:1d:98:96:4f:cc:
c7:9f:fe:b3:6b:07:82:94:18:fd:fd:26:24:a3:f4:6e:7a:f5:
76:23:67:2a:3e:28:85:bd:3f:c3:42:e4:38:44:62:15:24:96:
11:d4:23:e9:93:dd:ad:15:ba:a9:7c:58:04:11:40:f0:f5:27:
ae:89:a4:53:3c:c2:26:16:a7:58:5e:bc:c1:0a:b9:01:29:f6:
c6:4b:0e:cb:a7:62:e7:8a:5c:88:cf:52:44:c3:3e:d6:87:e0:
69:e2:44:e1:25:82:6a:1d:e4:65:ea:62:9a:ae:18:90:41:34:
23:2b:7a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:34:27 2025 by rpki-client