Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft
File: ML2W-0iWciqJyEZRjLXmbLVMhU8.mft (raw, json)
Hash identifier: ikUM+ZYkYvR/SwqGx7+Fi9s/4GJ1kUcp1JInRUYcWdw=
Subject key identifier: DB:88:E6:B9:77:95:DA:EE:5C:F2:05:2B:16:EA:02:2F:BC:26:7B:A0
Authority key identifier: 30:BD:96:FB:48:96:72:2A:89:C8:46:51:8C:B5:E6:6C:B5:4C:85:4F
Certificate issuer: /CN=30bd96fb4896722a89c846518cb5e66cb54c854f
Certificate serial: 0198D54DEEDE5853D36BC2A67A1B11E107C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ML2W-0iWciqJyEZRjLXmbLVMhU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 05:01:51 +0000
Manifest this update: Sat 23 Aug 2025 05:01:51 +0000
Manifest next update: Sun 24 Aug 2025 05:01:51 +0000
Files and hashes: 1: ML2W-0iWciqJyEZRjLXmbLVMhU8.crl (hash: i3yieXY5lMe8ei3r86YysYRcBLoKdIHj3fY3zlnHZS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ML2W-0iWciqJyEZRjLXmbLVMhU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:ee:de:58:53:d3:6b:c2:a6:7a:1b:11:e1:07:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30bd96fb4896722a89c846518cb5e66cb54c854f
Validity
Not Before: Aug 23 05:01:51 2025 GMT
Not After : Aug 24 05:01:51 2025 GMT
Subject: CN=db88e6b97795daee5cf2052b16ea022fbc267ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a1:37:9e:4f:7f:e7:8b:38:40:00:14:87:14:
a8:e9:90:64:e7:d5:60:86:1e:5c:6e:ba:6d:84:ba:
86:f5:65:fe:58:27:04:11:ec:31:47:86:e9:27:36:
6f:8f:e7:13:40:d2:fd:71:f0:6d:59:66:0d:f5:f3:
9a:69:3f:86:b8:ce:d5:c8:72:78:39:b6:99:21:df:
fe:df:89:32:c3:31:fb:d0:8f:3a:31:34:57:82:96:
be:dd:4d:7b:92:9d:0b:f1:cf:c5:21:33:7d:39:ee:
6f:de:ca:4f:67:5f:02:e3:e4:31:dc:cb:d9:7d:f8:
aa:bb:12:d0:ef:ff:8a:6b:a1:d1:53:e4:a6:0c:9a:
aa:42:61:53:49:b9:07:ed:7e:38:5f:ca:c8:db:29:
58:be:ac:d1:80:96:95:56:98:c3:72:da:a9:45:d5:
65:de:d4:29:84:8f:9c:7e:44:7e:be:1a:09:1f:bd:
f3:f5:ae:15:86:7d:27:fe:bf:db:c3:7e:be:9a:f7:
28:71:d6:e4:25:8c:04:4f:42:e9:4a:32:fe:c5:1c:
d5:e4:aa:f3:18:d3:5d:10:34:21:9b:6a:37:37:51:
e5:98:a6:ec:8e:76:4c:cf:ae:68:71:3c:96:af:d8:
b5:8a:b7:0e:c6:07:ae:28:a3:b2:1e:3b:76:da:32:
93:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:88:E6:B9:77:95:DA:EE:5C:F2:05:2B:16:EA:02:2F:BC:26:7B:A0
X509v3 Authority Key Identifier:
keyid:30:BD:96:FB:48:96:72:2A:89:C8:46:51:8C:B5:E6:6C:B5:4C:85:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ML2W-0iWciqJyEZRjLXmbLVMhU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:cb:40:8b:44:12:b1:88:a3:2f:f9:1b:ce:d9:14:fa:3a:ce:
40:29:f1:c1:92:9c:ee:89:57:0e:95:2f:ec:5c:12:09:f8:6e:
00:25:60:12:7e:4d:6d:e3:d4:3d:24:4d:8a:3c:49:60:13:f6:
4a:10:12:c0:1c:04:2f:b4:c1:3d:1c:e1:ef:0a:92:78:6a:b2:
80:2a:4a:e5:18:1a:83:ca:93:32:7c:69:db:3b:82:6d:be:2e:
4e:34:24:12:23:3d:41:44:db:1a:32:25:4e:48:04:67:ce:55:
88:9a:c3:7c:e4:e8:7d:50:df:a4:ce:a5:ac:e6:ff:c0:2a:89:
96:de:ad:ca:12:2d:c5:7f:e7:d0:61:0d:8e:bd:52:99:5f:78:
a1:07:6d:76:e5:2b:90:fe:16:28:d9:11:b0:70:b8:2a:dc:e0:
15:0c:6e:96:34:a2:27:0c:3d:79:8a:5b:cb:44:c1:98:f9:0b:
95:c2:e5:1b:07:cd:6f:ae:3f:08:58:b1:67:6b:c0:da:5e:4a:
80:c4:e9:18:83:7d:ff:7c:0d:a1:66:39:c1:d6:00:5a:2e:27:
0d:79:1f:17:e8:1c:d6:db:6a:d9:e6:39:a5:cb:a4:cd:f8:8d:
91:6c:6a:78:be:14:ab:52:6f:65:c9:2a:41:b1:76:23:cb:bd:
b9:92:19:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:46 2025 by rpki-client