Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
File: mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft (raw, json)
Hash identifier: osUoxf5wnG6GCVf0hFLksiCvdCrSOGzKymWxm5jTP+A=
Subject key identifier: F0:DA:95:B3:F2:54:66:9D:29:18:A6:28:1E:3C:33:94:8E:10:CF:62
Authority key identifier: 98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
Certificate issuer: /CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Certificate serial: 0199FDD8D429A83463908C32962CC2B79C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
Manifest number: 10C4
Signing time: Sun 19 Oct 2025 19:01:09 +0000
Manifest this update: Sun 19 Oct 2025 19:01:09 +0000
Manifest next update: Mon 20 Oct 2025 19:01:09 +0000
Files and hashes: 1: mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl (hash: NMLEMFKPGAomFBWPytNAZFjB6S+61lyHZWV201Sk49c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:d4:29:a8:34:63:90:8c:32:96:2c:c2:b7:9c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Validity
Not Before: Oct 19 19:01:09 2025 GMT
Not After : Oct 20 19:01:09 2025 GMT
Subject: CN=f0da95b3f254669d2918a6281e3c33948e10cf62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a3:6e:b1:5f:54:81:f4:90:15:c8:7d:fe:17:
8b:38:af:36:c4:82:0d:fa:b9:b9:6f:0c:3c:5b:1f:
ea:3d:66:55:03:97:fd:0f:00:45:69:bc:ed:6d:97:
dc:36:a4:66:05:3c:53:1e:b0:6e:79:ae:f1:dc:ac:
95:b5:bc:66:34:76:98:e2:08:31:4c:05:7d:18:eb:
57:35:0b:cf:09:9e:80:3f:9a:d5:66:2d:74:37:2a:
30:6b:4c:63:70:8f:63:83:cd:a5:cc:8e:49:3c:e7:
73:d2:02:42:6e:d9:00:35:61:96:3d:c2:87:85:c0:
36:23:f7:7f:4c:b3:26:be:03:39:b1:d5:c3:7c:d0:
45:70:aa:6f:2a:dd:3d:e5:43:2a:45:14:06:a3:e8:
56:7f:d8:dd:0c:37:48:02:13:b7:0f:76:d6:8e:b0:
4c:ef:54:e2:66:e3:bd:74:22:62:4e:44:b2:cb:cb:
b7:0a:44:64:27:4e:6e:b2:10:3d:3c:84:d1:c6:ed:
81:74:fb:a7:47:b9:ee:9c:bb:58:68:85:2e:0e:84:
18:21:7f:f7:4e:2b:53:21:a2:3e:e8:e6:66:b8:bc:
20:c9:53:36:9b:26:be:75:1f:2d:2a:8c:cb:94:30:
b2:2d:38:07:af:ed:0b:f7:98:84:93:e8:a2:f5:2b:
21:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DA:95:B3:F2:54:66:9D:29:18:A6:28:1E:3C:33:94:8E:10:CF:62
X509v3 Authority Key Identifier:
keyid:98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:95:69:f2:1f:e2:a7:cf:08:8f:f4:3a:d1:11:6a:c7:fd:85:
2a:e0:92:56:68:57:e4:8a:56:87:cc:89:bd:4d:79:7f:73:c9:
c5:48:fd:0c:96:23:dc:1c:02:b5:2b:f4:93:4c:7c:a0:a0:22:
b8:48:59:54:54:d7:1d:86:50:2f:60:49:03:f9:e9:ec:92:40:
c2:1f:30:7c:55:01:cc:78:a9:31:c7:1b:93:d2:89:58:67:96:
75:ad:ce:b7:80:45:fa:52:57:31:8d:55:94:3f:c6:b7:5d:a8:
04:ab:44:b4:ca:31:06:45:17:dc:bf:a9:06:78:68:68:0d:2c:
22:3f:02:04:51:0d:d0:68:9e:7c:95:dc:d4:ef:90:68:7d:2a:
3d:0d:41:0e:5c:56:a4:3b:3b:2f:c6:51:06:da:04:b2:c2:10:
d8:a3:e7:66:3e:01:90:fd:f6:4c:13:00:01:14:9b:f4:ef:43:
75:eb:d0:5f:c4:81:42:b2:3a:ab:3a:d4:cf:83:5f:7e:db:7e:
63:65:4d:97:90:77:eb:7b:9e:de:2a:6d:38:6f:8f:77:be:bd:
af:ff:ed:0e:9a:f8:11:24:7d:8d:c1:25:fe:b9:4b:b8:ab:c8:
c0:fc:49:c9:c3:ff:f1:e4:23:95:e5:39:3d:7a:f5:c4:f7:28:
78:2c:ce:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:31:25 2025 by rpki-client