Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
File: MLepUygLb5mPwRxHy-kbgmM2TrA.mft (raw, json)
Hash identifier: zW91QjFvBfrPSX5OrnVXtF9u3uv9Qndsk2BfFUnp9CE=
Subject key identifier: 94:39:01:FC:04:77:DC:AF:9A:2F:91:E7:23:D7:FA:3D:CB:B1:4E:CE
Authority key identifier: 30:B7:A9:53:28:0B:6F:99:8F:C1:1C:47:CB:E9:1B:82:63:36:4E:B0
Certificate issuer: /CN=30b7a953280b6f998fc11c47cbe91b8263364eb0
Certificate serial: 0199FC8F337EC725389ED7FDC03B67C31FAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
Manifest number: 05BF
Signing time: Sun 19 Oct 2025 13:01:07 +0000
Manifest this update: Sun 19 Oct 2025 13:01:07 +0000
Manifest next update: Mon 20 Oct 2025 13:01:07 +0000
Files and hashes: 1: MLepUygLb5mPwRxHy-kbgmM2TrA.crl (hash: rANWR0ehQvLK77JPjrX+AXfmMNO5YkwNm998eu3uHvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:33:7e:c7:25:38:9e:d7:fd:c0:3b:67:c3:1f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30b7a953280b6f998fc11c47cbe91b8263364eb0
Validity
Not Before: Oct 19 13:01:07 2025 GMT
Not After : Oct 20 13:01:07 2025 GMT
Subject: CN=943901fc0477dcaf9a2f91e723d7fa3dcbb14ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:66:df:34:b6:bb:e9:d6:78:ec:b3:41:94:d8:
31:1f:ce:b0:08:94:ed:c4:11:1d:66:6f:cc:9c:c5:
77:12:30:86:9f:ed:3f:dd:14:70:47:b0:8c:02:0f:
e2:58:e2:05:2c:80:85:a7:a7:f9:f9:4b:67:19:e9:
bd:b9:57:cc:77:f6:96:25:5e:13:c1:3e:c2:a8:c5:
32:ad:bf:2b:e8:04:53:54:72:88:76:7e:da:31:e7:
31:02:9e:93:fb:88:d7:77:f0:a0:5e:0d:12:44:37:
f5:f8:1b:25:6a:85:4f:27:b9:dc:17:16:db:a8:ff:
f6:20:3f:98:c7:68:eb:c4:c8:86:87:15:72:6f:3c:
82:60:f3:78:40:9d:2d:78:6a:ac:4d:7c:1d:21:f9:
b6:7f:8f:46:5f:5c:c2:8d:ec:ac:15:82:a9:dc:f0:
c1:8e:bc:3c:fd:f5:cb:01:a6:eb:19:7d:0f:cc:7c:
f0:c4:06:f8:65:e9:31:df:ce:9c:a3:42:4e:7a:e6:
e4:cd:06:e5:0d:a4:61:68:cb:45:77:da:33:e9:1c:
ee:a1:85:70:27:39:ed:88:14:c5:c6:3d:bb:ef:4a:
33:36:01:fe:83:60:45:6b:c4:ad:08:d2:a1:a8:0e:
f6:6d:d6:41:01:16:af:62:1e:fe:4a:83:8b:95:14:
56:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:39:01:FC:04:77:DC:AF:9A:2F:91:E7:23:D7:FA:3D:CB:B1:4E:CE
X509v3 Authority Key Identifier:
keyid:30:B7:A9:53:28:0B:6F:99:8F:C1:1C:47:CB:E9:1B:82:63:36:4E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:29:67:89:d2:07:6f:11:c9:59:ff:43:13:fc:ac:a0:0a:ea:
58:01:85:bd:55:4c:8a:7c:6c:56:bc:c3:6a:60:32:e1:44:db:
f2:0e:9f:18:ac:98:21:3c:21:57:c7:16:2d:b9:f5:50:80:83:
db:cc:53:12:1b:5e:47:23:ba:63:4e:1a:08:00:90:94:f7:61:
1c:96:b6:7c:b8:9b:81:0d:9b:41:5c:29:83:2b:e9:5c:3d:98:
5a:b5:f2:5e:c4:c4:aa:3f:1a:d4:0f:dd:01:b3:20:eb:e8:58:
12:6a:38:d2:36:a4:2a:30:d9:30:72:6e:30:23:91:68:24:f1:
57:05:a3:bb:d6:dd:43:71:9c:c3:05:bc:2c:a0:75:a0:6d:24:
4f:36:bd:2d:e1:c9:57:16:75:af:b3:b7:ab:e7:b6:a2:8c:96:
59:89:97:d7:ca:82:c8:b5:c9:c3:38:d4:a6:86:66:11:1e:04:
69:76:ec:68:3a:41:b3:9d:47:cf:5d:1f:d4:61:36:9f:3f:31:
b7:50:f7:b6:4d:b6:2f:a0:34:9f:31:ed:b0:b5:b1:14:ea:c5:
dc:d3:62:cc:c5:a6:b8:bb:78:d1:46:c8:45:a3:0e:01:54:05:
f5:32:5f:fe:63:1f:99:1c:23:c7:b6:ba:75:13:9d:db:c8:f5:
d5:28:6a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:54:12 2025 by rpki-client