
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
File: mlJqc86Pn2LBShGi6pE-wnPVjEY.mft (raw, json)
Hash identifier: d60gWfWTc4+DCXm+YN4CGbW9me3oDPN7mOJz3iyv4as=
Subject key identifier: CF:E3:05:E0:79:72:A6:9B:02:26:98:83:1F:B9:7F:92:D1:32:7A:43
Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
Certificate issuer: /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Certificate serial: 019874F550F107B049C38E6EF05A7D0C488A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
Manifest number: 1623
Signing time: Mon 04 Aug 2025 12:01:30 +0000
Manifest this update: Mon 04 Aug 2025 12:01:30 +0000
Manifest next update: Tue 05 Aug 2025 12:01:30 +0000
Files and hashes: 1: 37xCCUhytigOkbo8skkNphl6CDo.roa (hash: EZZOllbO3rU0Aq71pT+LnxPWU1OR5RUdYC5xtbHlqV0=)
2: EzlaPz9ay6RZ4KUo_Zx1lcWyYyE.roa (hash: 8mVwmiELeQwOp0IzUJ7CNWnPRJxXboTOfv7waHdL35E=)
3: HmloYPhthfBI7_3S01XoeHMHM_0.roa (hash: zT7e2sKU35SC+6Uf05YzOC00VreFA+3zPNOd9kp3exg=)
4: aBb_QnqfCmFuIbPpQn9d7-oaQds.roa (hash: 9cT2/7QK1Jv3/LAJrIXNohZ9zwR8FjnbBcxZKBheYgE=)
5: bJE571Es9mWytmWy8Hm2hU0LvwQ.roa (hash: G4ykv8ElUqNocIC2Di9TU9f+tq6JYb2XSPQUlNwbQs8=)
6: jNEc9JKntfCRYR_UowBHCVGcgfU.roa (hash: wUVreTUUoleXZY0NQI3FxCnAa07OL9N5o1BFPoQRf+k=)
7: lPFksRdLJVDV0BeRSYCopl0nK1A.roa (hash: Z/l2sT/TM2PqTeCwRcYw3ZHE/PJvSKLQBMiM2PLHoBk=)
8: mJfyrmEjb3DG71ymZA5-l-jDpcg.roa (hash: Dn2G/Xb6l/Pv7RMD2oA+wvBpFexsKHJScGmbkOC6hjI=)
9: mlJqc86Pn2LBShGi6pE-wnPVjEY.crl (hash: kM1hqqmNgXgWDDRCjQfe9Hv8akwIUsoNMC2nAG328e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:50:f1:07:b0:49:c3:8e:6e:f0:5a:7d:0c:48:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46
Validity
Not Before: Aug 4 12:01:30 2025 GMT
Not After : Aug 5 12:01:30 2025 GMT
Subject: CN=cfe305e07972a69b022698831fb97f92d1327a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4e:bb:ba:13:d6:da:d7:fe:6f:ba:7c:20:7f:
f8:00:29:6a:e3:43:2f:28:ee:7f:88:77:3e:1f:43:
50:be:00:a0:6c:85:9d:5c:ff:b5:04:e6:b5:4c:29:
c3:10:fc:ad:4c:69:90:d8:13:e6:fe:cb:13:08:d9:
f7:cf:c3:32:9a:f3:b2:f3:6e:e4:c2:1b:71:58:22:
bd:a3:05:c2:55:4e:6f:6a:2a:c0:14:37:6a:0a:1e:
e5:59:82:66:22:39:21:f0:43:f4:7f:ff:87:b4:c1:
d6:45:96:64:58:82:d1:45:0e:69:ed:4c:ec:be:1d:
43:80:cb:47:d8:27:65:89:d1:01:24:a3:61:28:6a:
3d:cc:d2:61:d4:ee:b3:04:19:9d:90:5d:89:4b:64:
10:92:38:4b:1d:d7:44:96:ff:be:c3:17:44:73:ae:
c2:f7:66:01:48:a5:3a:2d:35:f5:e8:63:0b:61:67:
03:62:68:74:5e:f4:a8:87:d0:77:5f:a7:86:0b:24:
a7:58:46:1c:8a:23:c8:ba:e3:f5:67:e6:e2:ca:b5:
9f:61:c0:2a:a5:e3:18:1e:96:c8:bc:66:0b:42:97:
e4:28:73:99:21:f8:f6:5e:72:49:41:ab:71:f0:d3:
15:9e:1c:46:a8:95:5e:08:f8:ae:fa:65:ba:11:34:
80:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E3:05:E0:79:72:A6:9B:02:26:98:83:1F:B9:7F:92:D1:32:7A:43
X509v3 Authority Key Identifier:
keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:4e:88:5a:0d:bf:1d:ea:db:0d:36:07:de:75:8c:29:6a:18:
b8:8e:a5:5a:3b:9e:58:40:f0:2d:39:74:19:76:c2:ec:13:90:
6d:9c:37:22:30:5e:02:53:35:67:17:4d:02:13:0d:a1:11:c3:
1f:5b:c2:1d:fc:05:8f:48:72:6c:a3:1e:0e:f7:23:74:57:88:
85:69:7b:bf:a2:96:2e:4c:6a:df:57:0d:29:a8:a0:1e:46:f7:
17:d5:ec:77:fd:fd:1b:d8:f4:0f:06:be:e9:1c:63:b8:8e:95:
2b:d2:21:33:fa:dc:72:6e:b6:b0:0f:46:5f:f9:26:8b:5c:0a:
de:a5:86:f3:35:ac:aa:6b:10:1d:65:63:6b:19:2a:5e:06:19:
13:35:b9:90:e4:30:be:81:71:55:9e:30:ad:e2:d9:67:64:19:
5e:74:ed:2f:8c:31:af:62:3b:e0:18:5d:4b:9f:d9:3b:ed:ca:
b2:9d:77:89:e1:35:2c:51:ee:f7:6f:64:62:c7:75:ee:6b:cb:
49:50:49:61:ea:2e:f5:e0:5d:4a:13:f7:c9:b8:05:ba:a1:ad:
4b:97:83:da:29:8e:4b:68:ac:f4:c3:6c:3c:d6:f4:dd:cd:80:
6f:a3:14:51:8a:fa:1b:6c:bc:42:6c:4c:1d:4b:63:b9:79:af:
ab:4f:25:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:57:36 2025 by rpki-client