Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
File: MlRXaPR8NXhe6616NDikscT43DA.mft (raw, json)
Hash identifier: hfYSFY21vyLMVu3lAtfjXdba4YktUG3nyD3VKDNMSgs=
Subject key identifier: 34:96:C3:83:80:40:6E:83:65:B1:FD:F9:AC:56:DB:51:76:7B:0C:0D
Authority key identifier: 32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30
Certificate issuer: /CN=32545768f47c35785eebad7a3438a4b1c4f8dc30
Certificate serial: 0197B6A0F75A7CFBE2F1A111F4547EF518B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
Manifest number: 0B7A
Signing time: Sat 28 Jun 2025 13:01:31 +0000
Manifest this update: Sat 28 Jun 2025 13:01:31 +0000
Manifest next update: Sun 29 Jun 2025 13:01:31 +0000
Files and hashes: 1: MlRXaPR8NXhe6616NDikscT43DA.crl (hash: D3zkewoLHW7KysMkKGmkcV1o5NyYKakRsHDQSiiIZ4g=)
2: UVHym_hND0UKS0TZahA67-xdRaw.roa (hash: pLZ+GW3vB+RehhXMdEErWzND6dd84/xMpKL3yEHLLYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:f7:5a:7c:fb:e2:f1:a1:11:f4:54:7e:f5:18:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32545768f47c35785eebad7a3438a4b1c4f8dc30
Validity
Not Before: Jun 28 13:01:31 2025 GMT
Not After : Jun 29 13:01:31 2025 GMT
Subject: CN=3496c38380406e8365b1fdf9ac56db51767b0c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3b:e7:9b:24:46:91:0b:32:28:eb:c2:29:b0:
b6:75:03:ef:5a:85:9b:d3:0c:0e:56:5d:fb:c6:c7:
5d:a6:fd:0b:63:f0:f3:b6:9d:47:44:6d:1d:4a:4c:
0b:86:21:a5:2e:b7:0a:4d:a6:50:fc:fb:69:fd:7f:
fe:37:7d:eb:5b:e1:b0:55:2d:f2:16:cd:63:37:7e:
03:79:b4:cb:2c:5e:a4:c3:3e:00:43:25:d1:77:9e:
47:88:77:3a:16:44:fa:8d:a7:96:a8:4c:79:6a:59:
6e:68:aa:39:6c:4b:6d:24:8d:50:ae:ae:6d:8d:f7:
c4:c2:95:42:3c:fd:02:22:c6:23:cf:74:16:0e:5a:
17:c3:52:83:4e:ef:02:43:e7:56:e9:e0:59:52:35:
62:50:c7:06:b3:5c:14:16:92:c3:cc:a9:76:83:01:
5c:ae:46:c9:a1:a6:3a:49:f8:5e:a4:11:34:90:4b:
3a:1f:84:a6:48:a0:7c:42:e8:fe:84:51:7e:0e:0d:
72:27:b5:3e:25:47:34:8d:10:30:44:29:33:cb:d6:
c4:aa:3d:d0:3e:33:a9:b5:1b:e7:c9:07:cd:fb:8c:
74:5c:86:71:f0:8e:82:9a:98:71:01:df:c1:98:26:
f1:a1:e9:80:be:b0:86:8e:74:06:dc:84:3d:91:e3:
f5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:96:C3:83:80:40:6E:83:65:B1:FD:F9:AC:56:DB:51:76:7B:0C:0D
X509v3 Authority Key Identifier:
keyid:32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:14:0a:13:3c:61:cf:de:59:18:3d:00:22:f0:3d:27:7d:78:
3f:d5:3b:94:0b:53:95:17:48:ae:5f:75:87:d3:b3:25:e4:af:
fc:81:57:a3:85:f7:b6:cc:4d:18:d7:f1:fe:aa:7f:90:49:2b:
6c:68:6a:40:7d:38:e3:34:85:59:63:0a:39:a6:7f:d7:8d:e2:
e1:58:ab:68:0e:6d:1e:a7:4e:66:74:95:12:4d:01:53:8c:8d:
84:d6:78:09:d0:15:b3:71:97:a1:0f:d6:29:53:37:bc:36:9c:
bf:c7:cb:cc:ba:a2:64:9d:8f:f4:71:f8:3b:28:63:1a:2b:90:
10:9c:2d:2c:12:94:9b:8b:03:20:5c:2c:e1:d4:2b:42:0a:ae:
30:95:d5:41:c7:fe:2c:5c:f1:19:f2:7c:eb:3e:f6:88:7f:72:
13:9a:b1:6b:46:42:43:9e:3d:cc:4a:0e:f5:44:36:a1:5d:63:
83:6f:b7:d8:c8:74:9e:88:ea:d3:fc:29:30:87:76:9e:05:8e:
ed:96:db:97:32:ac:09:01:81:98:ac:9c:00:27:e1:22:98:4e:
a6:02:3b:21:72:9d:25:16:77:1f:ff:94:e5:60:f0:dc:27:f0:
88:5a:75:f9:8d:57:42:c1:3b:c1:88:69:ea:1f:bd:0a:fa:0e:
0b:4d:d8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:45:12 2025 by rpki-client