Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
File: mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft (raw, json)
Hash identifier: 9b/mTxTSyEy58MCtBqP8WyoGfBNJC09NvVabwkQuIUQ=
Subject key identifier: 98:3E:A8:43:01:B6:E0:8B:B9:B3:09:C8:49:D9:B1:A6:1D:7C:84:27
Authority key identifier: 98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
Certificate issuer: /CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Certificate serial: 0198D47249F1B3553A0D0BDAE339589364FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
Manifest number: 102A
Signing time: Sat 23 Aug 2025 01:01:56 +0000
Manifest this update: Sat 23 Aug 2025 01:01:56 +0000
Manifest next update: Sun 24 Aug 2025 01:01:56 +0000
Files and hashes: 1: mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl (hash: RmEjqh5vPtJ2X4Wy3QFJE5oYffHXXICOcj4/3L0Mp7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:49:f1:b3:55:3a:0d:0b:da:e3:39:58:93:64:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Validity
Not Before: Aug 23 01:01:56 2025 GMT
Not After : Aug 24 01:01:56 2025 GMT
Subject: CN=983ea84301b6e08bb9b309c849d9b1a61d7c8427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:65:37:0a:c8:6e:b7:12:b2:86:1d:f5:89:84:
92:d6:4c:a9:c8:d6:b2:71:47:6f:3a:53:2f:df:36:
8b:ea:e1:30:06:79:00:98:0c:9a:5e:60:55:8b:0f:
4b:36:f9:0f:ab:d4:06:31:ec:38:47:a7:f3:ce:59:
76:80:f3:4d:a0:72:23:6b:47:c2:4e:bd:c5:4f:bf:
5d:6a:1a:73:57:61:85:ff:d8:78:00:71:6c:d0:82:
21:a6:c6:78:14:34:82:f6:66:8f:c8:bc:67:59:55:
cf:24:22:02:f4:88:09:3d:d2:b3:7b:88:dc:a8:7e:
e8:af:34:c5:a5:03:57:8e:02:9e:39:75:17:5c:e5:
98:31:4b:09:2e:08:2e:22:8c:6c:0a:96:7f:3e:c1:
8a:63:35:dd:f5:98:d3:21:f3:02:72:82:ac:69:4e:
75:b4:42:b1:55:60:ea:2a:70:e3:06:ac:ba:e7:9f:
07:c6:5c:ce:b8:2f:e0:e9:ab:89:bc:37:c2:ae:a5:
19:c1:b0:96:5b:8b:9e:e4:eb:89:be:e5:a0:b4:5a:
15:f7:0c:4e:21:1e:4d:6a:e3:f4:b5:c9:05:67:a8:
e7:33:b8:47:4d:76:57:21:3a:f1:ff:39:29:b9:fa:
bb:3a:a9:dc:96:ac:4f:8d:d9:de:f8:f5:de:56:bc:
51:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3E:A8:43:01:B6:E0:8B:B9:B3:09:C8:49:D9:B1:A6:1D:7C:84:27
X509v3 Authority Key Identifier:
keyid:98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ad:fe:52:ad:35:3b:8d:d7:0c:33:d0:47:69:6d:78:4d:24:
c5:92:94:b8:16:9b:99:06:78:cb:ba:9a:b7:d1:d2:9d:06:a5:
93:2e:21:c1:49:39:46:ce:36:eb:40:57:37:ea:67:dc:9f:55:
53:c9:50:44:a8:cc:6f:e6:f7:53:b8:97:fc:ac:ea:6a:75:14:
02:6a:4f:59:26:6b:6c:94:a5:e3:ac:28:9f:a2:c5:e2:2d:3a:
f6:fa:57:8a:8d:86:c0:28:19:b0:29:39:0c:ea:1b:07:b6:b9:
72:c1:1c:ce:32:f4:29:08:7e:5f:c3:af:9f:68:16:18:60:ac:
fb:f1:db:02:f3:d0:8b:d0:36:46:88:d0:63:79:a0:d6:f6:6d:
3e:64:73:2d:8c:2b:92:a2:f4:1f:eb:56:65:99:fc:fb:0c:04:
7e:ef:b7:7a:5e:04:28:d5:b0:44:29:96:b4:a4:bd:3b:07:5f:
e8:74:f1:ec:8c:fb:0f:49:55:1e:30:11:d8:4e:1a:72:88:28:
3f:f9:6c:52:f4:56:8a:86:a5:a6:4c:08:24:0e:f0:28:b8:93:
a8:5a:b3:99:ef:c1:73:bd:ad:5d:b5:47:f8:75:be:6d:fa:8c:
db:49:2a:bc:f7:33:5e:97:56:3e:39:a7:99:79:a0:9d:2e:5a:
89:b8:b6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:50 2025 by rpki-client