Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
File: MlRXaPR8NXhe6616NDikscT43DA.mft (raw, json)
Hash identifier: TGlfidI3O4mrC2IGFQ6I9Arl4EnkUut1hiuOjrev30E=
Subject key identifier: A6:C9:92:13:43:6A:5B:2F:F5:83:5A:3D:A6:95:1B:2B:2A:2C:7A:07
Authority key identifier: 32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30
Certificate issuer: /CN=32545768f47c35785eebad7a3438a4b1c4f8dc30
Certificate serial: 0199FDD8E14495C14427C1DFD65BDE85C3AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
Manifest number: 0CA8
Signing time: Sun 19 Oct 2025 19:01:12 +0000
Manifest this update: Sun 19 Oct 2025 19:01:12 +0000
Manifest next update: Mon 20 Oct 2025 19:01:12 +0000
Files and hashes: 1: MlRXaPR8NXhe6616NDikscT43DA.crl (hash: g61DO6Ya9XvFRBo/L9gAZztNh0pxZ/B/+9FPmfmFqeg=)
2: UVHym_hND0UKS0TZahA67-xdRaw.roa (hash: pLZ+GW3vB+RehhXMdEErWzND6dd84/xMpKL3yEHLLYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:e1:44:95:c1:44:27:c1:df:d6:5b:de:85:c3:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32545768f47c35785eebad7a3438a4b1c4f8dc30
Validity
Not Before: Oct 19 19:01:12 2025 GMT
Not After : Oct 20 19:01:12 2025 GMT
Subject: CN=a6c99213436a5b2ff5835a3da6951b2b2a2c7a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:21:a2:bc:18:6d:68:de:0e:9b:97:9c:81:e5:
e0:2e:32:95:8b:bb:8f:8b:11:94:ca:29:a4:02:7c:
e1:26:92:c9:15:86:c5:4d:c7:b4:c8:06:fd:51:85:
29:6c:43:37:8b:72:4a:a7:8d:6e:86:a1:9e:cc:07:
fa:42:3e:72:c7:da:5f:a9:7e:f6:23:49:cf:04:db:
97:e5:f8:9e:dc:4a:10:6c:f5:25:9b:00:6b:f0:80:
d7:b5:9d:84:33:a0:f3:36:d2:98:94:05:28:52:58:
eb:72:c5:54:de:5a:4a:b8:7a:ff:b8:85:90:93:44:
d8:0a:39:2b:b3:d2:11:65:94:c2:aa:ff:43:1b:70:
a2:ac:75:0d:d6:38:5d:6e:ec:be:c8:2e:41:55:ea:
5f:d2:e1:53:bf:a8:e6:1f:10:d7:0a:01:68:78:1d:
32:16:12:6d:0e:37:3d:c6:22:ed:50:97:a6:72:91:
c7:7d:76:8d:d7:b9:4b:4e:be:2f:43:6b:c9:db:b0:
40:b8:92:9f:5b:a1:bb:25:c6:54:ec:41:6d:94:27:
2e:cd:46:5e:df:c0:f5:76:47:eb:45:9f:b9:7f:a5:
7d:e0:c5:40:94:1a:d6:22:a6:7d:b9:19:a0:d6:3b:
5e:59:8a:e7:f8:07:40:2a:e1:d2:4e:fa:a9:12:d2:
70:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C9:92:13:43:6A:5B:2F:F5:83:5A:3D:A6:95:1B:2B:2A:2C:7A:07
X509v3 Authority Key Identifier:
keyid:32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:1c:88:b3:7e:3c:2f:36:09:1d:7d:b9:d3:19:ad:90:eb:4a:
7c:e9:88:ed:c3:bf:19:18:fe:12:ef:39:19:11:30:33:37:8e:
2e:94:60:19:98:59:8b:26:e4:c1:b4:57:2b:89:ba:10:15:d5:
db:aa:23:0e:42:c6:0c:ea:21:e7:c8:ec:c0:b1:2c:fd:2f:5e:
5a:b1:5b:f8:26:76:6c:ce:23:62:0c:02:a1:61:ac:7d:ba:54:
3b:ad:5c:45:d8:0d:17:41:32:15:88:48:25:80:ce:47:22:a1:
a8:e9:c4:08:54:05:68:1d:2d:5d:38:d5:72:d8:56:bc:74:96:
ed:2e:88:02:42:00:a0:bb:0d:2c:fa:ea:3a:8d:74:32:59:a0:
19:4c:03:4c:6f:bd:37:d9:d2:eb:39:cf:fb:5c:14:2f:43:54:
3c:19:af:84:d2:62:6b:de:94:da:c3:46:ec:5c:9c:d3:70:a5:
8e:b1:a6:06:ff:75:d7:3c:bc:4c:e5:88:97:cb:5e:d9:6d:0d:
81:d3:2b:81:7a:86:91:3f:55:bd:cc:1a:2d:41:88:f6:20:30:
11:69:c2:55:5f:be:99:ad:19:ce:1f:24:73:49:4f:10:e6:66:
3d:57:6d:21:13:d3:ed:0c:5a:6b:f1:39:86:79:fd:cb:8c:4a:
25:ad:2e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:14 2025 by rpki-client