Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
File: mlCFOiSox2IjTokTpKWymFwzHa0.mft (raw, json)
Hash identifier: aFBkNrF73180gvva7e/TLWRTfwHgggrcKFMdSh4M/9s=
Subject key identifier: A0:C0:50:67:B5:42:CD:0E:6F:34:CC:37:54:9E:8B:5A:95:B6:4E:25
Authority key identifier: 9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD
Certificate issuer: /CN=9a50853a24a8c762234e8913a4a5b2985c331dad
Certificate serial: 0199FFC81433AC48EE626D5129074AC8B060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
Manifest number: 14A4
Signing time: Mon 20 Oct 2025 04:02:06 +0000
Manifest this update: Mon 20 Oct 2025 04:02:06 +0000
Manifest next update: Tue 21 Oct 2025 04:02:06 +0000
Files and hashes: 1: mlCFOiSox2IjTokTpKWymFwzHa0.crl (hash: k+LyDDxHC+5MmfK1b7izodJ5wIPJ4jECthaHGVRXHas=)
2: wrVdtsFJg-xxcwL89uUP6qnVtLk.roa (hash: Y5fuW3nl7fba2JKNfboUC/pVBV59jurhYdqhnS+frGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:14:33:ac:48:ee:62:6d:51:29:07:4a:c8:b0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a50853a24a8c762234e8913a4a5b2985c331dad
Validity
Not Before: Oct 20 04:02:06 2025 GMT
Not After : Oct 21 04:02:06 2025 GMT
Subject: CN=a0c05067b542cd0e6f34cc37549e8b5a95b64e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:40:89:95:ef:55:ed:ae:3b:1b:0a:fc:c9:48:
c2:ba:a6:b8:3e:ea:eb:44:df:23:a5:7b:3e:31:09:
f7:88:7f:c2:e0:b9:8e:ec:28:a1:30:83:82:05:20:
e5:b4:e8:b7:f2:4b:9f:d7:b8:27:da:0c:d6:51:bb:
90:9b:01:9f:ee:f8:92:1a:d0:bc:37:b4:12:ae:91:
8b:1b:17:db:71:ce:e4:c2:fa:00:b2:f3:71:93:c9:
60:31:2c:d5:f0:2d:ab:d7:f7:8b:5d:c2:4b:d1:c3:
58:92:b1:f4:11:4b:80:43:ae:70:93:17:ad:62:1b:
5d:6b:d6:2b:94:71:63:da:c0:52:d2:91:df:e5:ee:
69:33:53:fb:9e:0f:17:9d:5a:02:a9:e3:ae:e1:80:
71:c6:1b:28:46:2d:e1:64:d1:d5:dd:27:8d:28:e0:
11:a7:37:40:4b:a1:91:8b:fa:e0:d2:e6:27:36:f9:
8e:ee:c3:ef:c9:87:8c:fd:66:d2:bb:6a:33:d2:80:
fc:22:79:85:e4:a7:48:a7:53:c9:ca:89:e3:b1:b8:
bd:84:0b:6f:23:ca:76:cb:46:38:86:f6:e6:e3:ec:
2d:c5:c4:47:19:92:e8:b2:2c:a8:2a:39:ff:71:44:
2d:76:f0:56:f7:c0:4a:d3:e6:78:38:7a:b0:30:c4:
3e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C0:50:67:B5:42:CD:0E:6F:34:CC:37:54:9E:8B:5A:95:B6:4E:25
X509v3 Authority Key Identifier:
keyid:9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:42:97:38:f0:30:10:2d:e8:77:6a:38:9e:39:4f:62:6e:22:
d5:27:4b:e2:55:ac:ec:bb:c4:8f:69:b3:96:73:e6:a0:e1:cb:
8b:c1:f1:30:1c:d7:d7:95:30:01:d3:f2:1d:d0:34:70:85:49:
8f:c1:07:42:57:f9:7a:01:6c:c0:ac:56:b0:be:5c:a9:6c:d5:
0c:0d:3d:13:bb:45:d9:fe:2f:cc:fb:83:0c:44:77:02:08:88:
99:2b:17:91:d9:8e:8c:60:1a:60:2a:91:c1:71:2d:9e:0d:f3:
06:31:d4:26:86:69:27:42:13:c2:1f:49:fe:fd:99:01:53:73:
e1:d4:05:48:65:30:47:df:f9:a5:a7:46:7d:26:ff:98:c0:d7:
bb:e1:49:34:ca:9d:e2:3c:a9:6f:bf:11:ec:7b:e9:a1:e0:a8:
a6:3e:3b:6e:b6:78:a4:a3:d9:de:b1:68:79:89:5a:36:09:ad:
96:66:f5:04:86:8e:d0:98:2a:5c:e4:95:84:c4:c2:cd:8a:38:
d3:5b:07:25:c3:56:ab:54:2b:c3:90:c9:f2:06:f7:16:fc:22:
05:ef:2a:66:e2:62:6c:b6:0c:ff:4e:2c:d1:f4:55:c0:b8:e9:
22:76:c6:34:10:6e:a5:33:20:04:92:d4:d8:4c:64:52:20:d9:
87:f3:2f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:27:39 2025 by rpki-client