Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft
File: MlPNw--1IdnV5wqcxeRxsBWGA2o.mft (raw, json)
Hash identifier: Ool7a+algGO3srCkqtOEHT7HkzdOTzv+IjH4q2MbYqY=
Subject key identifier: E7:5E:D0:7C:57:38:92:73:01:94:6B:FF:7E:3B:5F:F2:4C:F2:EC:53
Authority key identifier: 32:53:CD:C3:EF:B5:21:D9:D5:E7:0A:9C:C5:E4:71:B0:15:86:03:6A
Certificate issuer: /CN=3253cdc3efb521d9d5e70a9cc5e471b01586036a
Certificate serial: 0199FBEB062AC9D571D1DFBF9E3A585273FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlPNw--1IdnV5wqcxeRxsBWGA2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft
Manifest number: 0A06
Signing time: Sun 19 Oct 2025 10:01:47 +0000
Manifest this update: Sun 19 Oct 2025 10:01:47 +0000
Manifest next update: Mon 20 Oct 2025 10:01:47 +0000
Files and hashes: 1: MlPNw--1IdnV5wqcxeRxsBWGA2o.crl (hash: RxX/wb0eacbRwNnq5DMReMOc0co6Sz95/vvI/2J3i3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlPNw--1IdnV5wqcxeRxsBWGA2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:06:2a:c9:d5:71:d1:df:bf:9e:3a:58:52:73:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3253cdc3efb521d9d5e70a9cc5e471b01586036a
Validity
Not Before: Oct 19 10:01:47 2025 GMT
Not After : Oct 20 10:01:47 2025 GMT
Subject: CN=e75ed07c5738927301946bff7e3b5ff24cf2ec53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:e7:09:4d:a9:36:3a:53:78:22:c8:37:b1:
09:3a:e0:36:4b:f8:10:8c:d3:7c:dd:58:bd:fe:ab:
a7:09:0c:ee:80:eb:a0:c1:e3:d1:18:a9:1a:1c:86:
c9:31:a8:83:30:33:a2:db:5d:3c:1a:c2:2e:62:7d:
d6:01:e8:9d:2a:f0:b9:3d:90:93:9c:36:8b:1f:4b:
77:ce:a9:7d:b6:27:bf:0b:7d:68:54:c9:95:49:88:
95:8c:1f:a3:7d:98:58:60:28:3a:ba:e9:e1:45:5c:
b7:14:a3:9e:2d:49:ed:8f:2c:cc:ed:1c:ea:0a:59:
6f:77:07:ba:07:b9:92:c3:56:c1:97:0f:15:e6:ab:
3d:d4:06:77:80:46:a8:66:d5:3e:49:a3:d5:d3:fc:
d6:4b:04:41:b3:29:61:33:40:6b:07:25:cb:87:f9:
5e:0d:00:90:dc:66:ef:95:96:5e:ae:01:6e:03:01:
a9:38:42:45:05:cd:0d:a7:30:a4:f6:02:6c:65:04:
c1:78:f0:9c:95:11:9d:ad:ff:b8:cf:e4:aa:fd:73:
f5:de:30:c4:3c:6d:e3:9a:ab:4e:81:d5:44:50:e1:
94:05:7a:a5:71:58:2e:f9:a4:3c:d7:d3:62:a2:68:
74:5e:86:95:07:b8:79:bd:b9:b9:94:08:61:eb:59:
c5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5E:D0:7C:57:38:92:73:01:94:6B:FF:7E:3B:5F:F2:4C:F2:EC:53
X509v3 Authority Key Identifier:
keyid:32:53:CD:C3:EF:B5:21:D9:D5:E7:0A:9C:C5:E4:71:B0:15:86:03:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlPNw--1IdnV5wqcxeRxsBWGA2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:08:fe:76:2b:3f:60:67:67:b1:f5:be:5e:9e:5d:53:34:62:
fc:65:5a:85:56:07:79:91:0f:3b:42:61:83:25:a2:e1:0b:c3:
4a:82:8b:05:a7:26:ec:22:d0:14:c9:d1:e9:61:f5:03:6a:8c:
10:1f:1f:dd:d8:6f:1d:9c:88:9f:f6:f6:12:e8:91:c6:e5:51:
7f:01:93:df:72:e7:2e:0c:26:c8:cd:42:45:2b:4f:ff:59:65:
b2:75:ee:4b:2d:f0:53:fd:46:cc:51:63:11:c2:d2:4b:f1:4c:
5c:2f:fc:ac:83:a2:bc:7d:ec:e2:52:af:04:41:df:9d:bf:26:
2e:2f:a4:dd:a0:25:6e:2d:68:62:18:54:c0:22:5b:d8:92:7a:
58:f7:e9:55:fd:d9:c9:7e:31:64:b1:3c:b8:a4:4e:55:59:14:
02:cb:2e:0d:eb:47:f5:75:21:3f:89:98:96:08:0f:09:a5:17:
9c:19:9d:51:f6:9a:f7:ba:9f:5a:6d:29:b5:c9:13:92:cf:0f:
d6:51:ca:03:cd:87:d6:26:19:13:96:63:f9:dc:cc:aa:72:eb:
b3:6b:96:7f:8d:85:3a:a0:a2:7b:8d:ea:18:3f:2a:30:a8:de:
d4:00:38:ba:12:ad:e0:55:7c:4a:3c:1d:6f:5f:7c:51:34:37:
ca:2f:65:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:42 2025 by rpki-client