Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft
File: MlPNw--1IdnV5wqcxeRxsBWGA2o.mft (raw, json)
Hash identifier: 1g0vFp7PG/Eztx6+Cjp2rLbQIfPuIsClNDhv4UKc3ow=
Subject key identifier: B6:48:43:68:83:44:0B:0C:4F:71:7D:4F:E4:41:BC:49:D3:E2:85:36
Authority key identifier: 32:53:CD:C3:EF:B5:21:D9:D5:E7:0A:9C:C5:E4:71:B0:15:86:03:6A
Certificate issuer: /CN=3253cdc3efb521d9d5e70a9cc5e471b01586036a
Certificate serial: 0198D6606C6608CBAD0F409AC13BA7055F25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlPNw--1IdnV5wqcxeRxsBWGA2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft
Manifest number: 096E
Signing time: Sat 23 Aug 2025 10:01:39 +0000
Manifest this update: Sat 23 Aug 2025 10:01:39 +0000
Manifest next update: Sun 24 Aug 2025 10:01:39 +0000
Files and hashes: 1: MlPNw--1IdnV5wqcxeRxsBWGA2o.crl (hash: x0jlrkN98vr8vRVc4v+3/bEXGblghFIrzi+a9J4T4VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlPNw--1IdnV5wqcxeRxsBWGA2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:6c:66:08:cb:ad:0f:40:9a:c1:3b:a7:05:5f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3253cdc3efb521d9d5e70a9cc5e471b01586036a
Validity
Not Before: Aug 23 10:01:39 2025 GMT
Not After : Aug 24 10:01:39 2025 GMT
Subject: CN=b648436883440b0c4f717d4fe441bc49d3e28536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:11:f9:02:41:da:77:5a:03:2b:7d:7e:70:3a:
f6:54:84:26:e7:b7:6e:99:54:71:f1:23:3a:47:a4:
9e:50:12:c2:15:78:24:a9:20:0b:0e:d7:9f:e5:b5:
d7:ec:88:ad:0e:f2:20:3b:1c:3f:be:cf:f8:55:4d:
c5:60:d4:9d:81:39:8e:40:2b:ed:2d:0f:14:da:31:
38:45:cd:cf:44:03:55:15:da:95:30:9a:2b:da:b9:
ba:5a:d1:49:18:74:e2:c9:69:61:8b:2c:ce:a6:3a:
43:b1:86:68:77:7e:b4:5c:38:38:9e:df:ec:5d:c4:
10:7d:47:be:ae:15:d9:72:bc:bf:a9:65:a4:6f:41:
9e:81:40:1b:d6:59:62:e5:e4:84:7f:08:af:37:13:
5f:70:54:8c:28:bc:1e:65:f1:74:38:52:7e:10:9f:
4f:ea:a7:e7:41:41:97:e0:9e:e1:47:18:a0:56:49:
3f:f0:6e:19:8e:46:7e:4d:5c:90:81:5c:14:0f:13:
31:5e:d2:f6:4a:ef:50:02:95:2b:54:5b:b9:25:03:
0a:b3:6f:99:c6:e8:92:c0:96:c9:ae:d4:1a:6c:91:
e2:70:e7:80:31:53:fa:1c:f6:35:7f:b9:35:3a:49:
27:ba:0f:15:2c:ef:0f:c5:a0:ac:5e:4b:b6:d2:dc:
db:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:48:43:68:83:44:0B:0C:4F:71:7D:4F:E4:41:BC:49:D3:E2:85:36
X509v3 Authority Key Identifier:
keyid:32:53:CD:C3:EF:B5:21:D9:D5:E7:0A:9C:C5:E4:71:B0:15:86:03:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlPNw--1IdnV5wqcxeRxsBWGA2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:99:56:bb:8f:1b:6e:06:93:01:61:86:64:83:cf:7c:fe:7a:
65:17:e6:27:9b:bd:8d:d0:3f:94:2b:37:cb:6d:db:0e:27:be:
7c:17:56:ec:66:01:81:f1:f4:24:b1:5d:08:01:a6:be:b0:5e:
54:6e:12:0d:2f:96:40:31:88:86:69:b2:f9:bd:3f:37:e3:10:
08:05:45:da:8c:b3:3d:1d:15:c7:ac:21:87:d8:cd:b9:e8:d6:
5b:b3:4f:3c:b8:ff:66:eb:13:a9:38:c0:39:2f:73:3a:a6:1d:
8d:a5:df:8b:cb:c2:52:28:dd:f1:9b:c3:d8:06:2e:4f:65:ac:
47:88:1c:e7:64:0f:1c:a4:35:5a:28:d7:df:30:f3:c2:9d:b1:
52:a8:c9:e4:fa:79:1a:28:4a:0c:32:90:c0:22:bc:5f:af:10:
4c:4e:45:38:fa:b7:98:a7:d6:4a:07:84:6f:b2:2d:2c:f9:cf:
7e:26:7b:84:ad:f9:31:5e:8e:fe:c3:8d:dd:1b:ba:d1:a2:e1:
e2:6a:7d:e8:bf:64:31:39:01:e0:08:8d:80:91:23:ca:81:c1:
45:6d:52:a5:49:2b:76:f8:da:c5:85:c8:bd:36:63:1a:0a:43:
1b:67:16:73:d0:e8:b4:23:ab:20:1e:b8:e1:66:a6:ed:a1:fe:
38:00:48:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:30:16 2025 by rpki-client