Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
File: MlRXaPR8NXhe6616NDikscT43DA.mft (raw, json)
Hash identifier: BBnR9Qqh6x3cREjf7LGRjJj3K38w5cLXZljzVqkuS/k=
Subject key identifier: 94:A6:52:9B:00:AF:E9:B9:51:19:EF:DC:74:2C:0F:A3:0A:80:D9:1C
Authority key identifier: 32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30
Certificate issuer: /CN=32545768f47c35785eebad7a3438a4b1c4f8dc30
Certificate serial: 0198D473827A929AAD285FFD7B16031C48B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
Manifest number: 0C0E
Signing time: Sat 23 Aug 2025 01:03:16 +0000
Manifest this update: Sat 23 Aug 2025 01:03:16 +0000
Manifest next update: Sun 24 Aug 2025 01:03:16 +0000
Files and hashes: 1: MlRXaPR8NXhe6616NDikscT43DA.crl (hash: iFKkqTgwikS699n2rPYYayWJhvrdJXmShAWoE8B5JVA=)
2: UVHym_hND0UKS0TZahA67-xdRaw.roa (hash: pLZ+GW3vB+RehhXMdEErWzND6dd84/xMpKL3yEHLLYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:82:7a:92:9a:ad:28:5f:fd:7b:16:03:1c:48:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32545768f47c35785eebad7a3438a4b1c4f8dc30
Validity
Not Before: Aug 23 01:03:16 2025 GMT
Not After : Aug 24 01:03:16 2025 GMT
Subject: CN=94a6529b00afe9b95119efdc742c0fa30a80d91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8a:a8:d4:64:ce:95:f4:e2:38:dc:a1:81:48:
36:12:6f:8e:c4:9b:8f:11:53:b5:cc:54:05:20:34:
33:54:e7:67:70:66:e4:f7:4c:36:35:b1:5f:b8:25:
9c:5e:49:ee:58:fb:7c:ed:fc:d1:1f:71:c0:a9:84:
93:b6:c5:f9:8f:34:79:ab:c2:98:5c:91:3d:44:a4:
b9:34:ae:d2:ab:b9:af:7d:22:36:86:89:55:08:af:
2c:ac:58:eb:67:37:61:2c:8e:e1:2f:1e:5c:32:19:
b1:f5:2b:fa:2d:7f:6b:f0:3d:47:20:c3:6d:c0:0d:
8f:02:27:e5:ae:b8:ec:d5:58:9d:86:fd:1c:89:61:
36:da:f3:87:cb:b3:30:4e:35:06:f4:08:bd:89:59:
62:9e:63:f1:92:e3:24:6c:e8:52:84:00:ec:33:43:
af:fc:68:b9:9a:b4:3c:d7:35:63:20:03:f2:68:06:
6f:9d:43:d2:10:22:e2:68:b1:fc:39:0c:50:a5:b5:
1a:98:bb:d4:0c:50:66:dd:9e:73:40:7a:1b:99:d4:
08:10:7e:72:5a:6b:9f:b2:a4:7c:c5:08:42:4a:de:
2d:be:8c:55:51:fe:d4:28:45:9b:72:53:ff:0a:ee:
27:d3:fb:ab:75:3d:81:36:ab:18:e8:32:3f:be:88:
a2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A6:52:9B:00:AF:E9:B9:51:19:EF:DC:74:2C:0F:A3:0A:80:D9:1C
X509v3 Authority Key Identifier:
keyid:32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:5c:80:3a:5b:d8:2b:5c:fb:76:2c:47:dc:97:6b:7c:da:8d:
45:95:b6:f9:21:2f:52:ba:7e:4a:f9:3c:0d:19:72:07:0f:0a:
e8:28:1b:e8:5e:5b:35:17:aa:3e:6f:d0:30:43:45:48:98:3e:
ee:b4:a1:65:e4:4d:39:ee:02:02:5a:26:c2:3e:4a:ae:16:a3:
da:4e:96:35:94:51:3f:d3:93:1b:df:4c:18:94:8a:1d:70:bb:
92:cc:d7:d9:77:51:a6:48:36:30:b2:17:0e:bc:5b:19:9c:b2:
3d:2c:b7:f7:4b:cf:47:98:10:da:de:f7:b5:a2:fe:8f:26:c2:
7f:86:14:fd:f5:92:27:9f:a3:54:03:96:2c:36:39:83:92:cb:
ea:cb:f7:f1:a6:17:f3:0f:53:23:94:aa:d2:6a:d3:28:f2:4d:
17:28:ec:60:ee:64:0e:1f:c7:0f:04:84:4b:fc:23:42:51:56:
df:9d:c9:dd:bd:41:dd:04:71:5f:70:c6:cb:fd:de:25:6b:f5:
42:d0:31:cd:1b:05:ed:29:7e:49:3f:ee:be:85:26:cb:d3:d5:
bb:bb:3e:6e:bd:d5:5e:ab:26:96:5c:6d:99:ac:e8:31:72:70:
ea:33:93:9e:3c:5b:9a:4f:b3:c0:7c:8b:56:27:3f:1a:6a:ac:
2c:45:c3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:14 2025 by rpki-client