Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
File: mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft (raw, json)
Hash identifier: Wx7/xr8IOnf1ZsCc8qlyfgP8i2PWIT7CwYDEPRYlkiA=
Subject key identifier: 18:18:43:05:73:CC:CD:6F:F9:1E:A2:2A:3A:81:91:1B:D3:A7:04:8D
Authority key identifier: 98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
Certificate issuer: /CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Certificate serial: 0197B6A0B2AD0014E7868E828890BB1ED670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
Manifest number: 0F96
Signing time: Sat 28 Jun 2025 13:01:14 +0000
Manifest this update: Sat 28 Jun 2025 13:01:14 +0000
Manifest next update: Sun 29 Jun 2025 13:01:14 +0000
Files and hashes: 1: mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl (hash: NXmQfpy2Vi445IJx2SJNNqSpD8pB7mxoSckxpgXVGqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:b2:ad:00:14:e7:86:8e:82:88:90:bb:1e:d6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Validity
Not Before: Jun 28 13:01:14 2025 GMT
Not After : Jun 29 13:01:14 2025 GMT
Subject: CN=1818430573cccd6ff91ea22a3a81911bd3a7048d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:33:d6:aa:0d:3c:c4:fb:9a:5d:ff:c7:c0:43:
7a:9f:ef:54:1f:3b:71:44:77:db:63:0d:54:01:dc:
28:28:26:8f:b3:4c:9e:f6:94:67:19:55:20:c6:ad:
ba:b2:99:d0:58:c7:1b:e0:c2:10:4b:a3:ba:12:2f:
e3:79:8a:09:aa:ee:b8:b3:ec:fa:cf:54:c5:e4:57:
ad:cc:d8:64:3e:9e:de:1c:38:8b:e4:65:8e:e8:03:
af:3a:06:30:15:14:51:ce:06:34:12:73:86:fa:2f:
0f:ee:f7:68:6e:94:35:c8:f9:c4:9a:d3:d8:3a:f5:
1a:95:d3:e3:1c:1a:00:63:5f:22:4a:f8:7a:17:08:
46:c2:df:9e:58:11:b4:8f:c1:b8:0e:d5:18:3d:72:
d0:28:a5:a0:0c:6e:8d:dc:2f:a7:39:63:aa:48:34:
32:d8:46:f5:d7:f7:f5:d0:16:1e:db:31:7b:77:b8:
05:b3:7f:55:69:71:7e:d6:f1:93:5b:ed:58:e2:b2:
a2:a8:37:58:c4:42:b3:1c:0f:27:5e:e2:7d:d0:0c:
d1:ad:cb:8d:2c:f7:9a:b0:34:bc:ea:89:30:d7:f3:
a7:3f:b7:d2:08:3c:de:55:6a:cd:6b:ee:e1:94:d4:
8e:23:51:4a:9e:e6:90:41:5e:7f:0e:a0:a8:f6:e0:
f0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:18:43:05:73:CC:CD:6F:F9:1E:A2:2A:3A:81:91:1B:D3:A7:04:8D
X509v3 Authority Key Identifier:
keyid:98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a2:9b:4d:99:92:81:b1:28:be:45:7d:82:ac:ee:ca:8f:8d:
45:10:b4:1b:1d:29:1f:5e:de:53:94:b5:d1:a9:94:f3:b6:c0:
08:4f:e9:9d:9f:f6:a0:a4:e2:71:bb:d8:ad:ca:d6:37:0a:55:
83:69:01:30:39:ae:88:ef:3f:31:73:f6:e0:49:b3:4d:f6:7e:
55:43:08:16:cb:b9:a0:b3:32:94:d8:81:e3:d9:a4:e3:4c:d4:
df:88:b4:ee:53:47:f2:24:8d:e6:84:24:d0:b0:27:5f:30:d0:
61:7d:e7:b2:62:d3:53:ee:ef:85:08:64:bb:08:80:e6:9a:7d:
cd:82:bd:67:20:11:db:24:1e:38:d9:3d:cd:10:1b:0e:d0:76:
cd:ae:61:33:d6:6e:55:22:39:af:81:f7:e8:8a:9e:38:f1:f7:
87:57:b2:10:e0:3d:c4:49:f4:64:76:2b:ce:da:08:99:55:40:
3d:99:05:5c:50:b1:2a:20:fa:35:43:d6:5c:a3:70:05:9f:d5:
5d:c6:1b:78:d9:d1:58:49:8c:5f:b1:0e:75:93:c7:78:18:b0:
21:c3:94:fc:e9:2f:62:da:21:62:e6:8c:b1:95:36:55:b8:b4:
cb:ba:6f:3a:43:a1:7f:dc:bc:96:be:6e:91:f1:ec:ac:bd:3a:
64:67:5f:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oLKtABTnho6CiJC7HtZwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YjVjYTcxOGYzYjlhOTM5YTUxMzY0MWJkODVjYzk0ZmE0
MDE5NTQwHhcNMjUwNjI4MTMwMTE0WhcNMjUwNjI5MTMwMTE0WjAzMTEwLwYDVQQD
EygxODE4NDMwNTczY2NjZDZmZjkxZWEyMmEzYTgxOTExYmQzYTcwNDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDPWqg08xPuaXf/HwEN6n+9UHztx
RHfbYw1UAdwoKCaPs0ye9pRnGVUgxq26spnQWMcb4MIQS6O6Ei/jeYoJqu64s+z6
z1TF5FetzNhkPp7eHDiL5GWO6AOvOgYwFRRRzgY0EnOG+i8P7vdobpQ1yPnEmtPY
OvUaldPjHBoAY18iSvh6FwhGwt+eWBG0j8G4DtUYPXLQKKWgDG6N3C+nOWOqSDQy
2Eb11/f10BYe2zF7d7gFs39VaXF+1vGTW+1Y4rKiqDdYxEKzHA8nXuJ90AzRrcuN
LPeasDS86okw1/OnP7fSCDzeVWrNa+7hlNSOI1FKnuaQQV5/DqCo9uDwqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgYQwVzzM1v+R6iKjqBkRvTpwSNMB8GA1UdIwQY
MBaAFJi1ynGPO5qTmlE2Qb2FzJT6QBlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUxYS2NZODdtcE9hVVRaQnZZWE1sUHBBR1ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS80ZDkzYjktMmM3OS00ZTUyLWJlNDEt
YzQyYWIwMTk4MzczLzEvbUxYS2NZODdtcE9hVVRaQnZZWE1sUHBBR1ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS80ZDkzYjktMmM3OS00ZTUyLWJlNDEtYzQyYWIwMTk4Mzcz
LzEvbUxYS2NZODdtcE9hVVRaQnZZWE1sUHBBR1ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMaKbTZmS
gbEovkV9gqzuyo+NRRC0Gx0pH17eU5S10amU87bACE/pnZ/2oKTicbvYrcrWNwpV
g2kBMDmuiO8/MXP24EmzTfZ+VUMIFsu5oLMylNiB49mk40zU34i07lNH8iSN5oQk
0LAnXzDQYX3nsmLTU+7vhQhkuwiA5pp9zYK9ZyAR2yQeONk9zRAbDtB2za5hM9Zu
VSI5r4H36IqeOPH3h1eyEOA9xEn0ZHYrztoImVVAPZkFXFCxKiD6NUPWXKNwBZ/V
XcYbeNnRWEmMX7EOdZPHeBiwIcOU/OkvYtohYuaMsZU2Vbi0y7pvOkOhf9y8lr5u
kfHsrL06ZGdfDQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:53 2025 by rpki-client