Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
File: mlCFOiSox2IjTokTpKWymFwzHa0.mft (raw, json)
Hash identifier: FOfXb433BV8GFs4C2hlevcJOUC/TVYmKVbeLjUdH74E=
Subject key identifier: 92:95:E2:4D:3E:B9:54:BB:51:25:A4:CA:E4:49:48:3F:77:37:FE:37
Authority key identifier: 9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD
Certificate issuer: /CN=9a50853a24a8c762234e8913a4a5b2985c331dad
Certificate serial: 0198D660F65591313A3B449DE3D3FDB4B0F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
Manifest number: 1409
Signing time: Sat 23 Aug 2025 10:02:15 +0000
Manifest this update: Sat 23 Aug 2025 10:02:15 +0000
Manifest next update: Sun 24 Aug 2025 10:02:15 +0000
Files and hashes: 1: mlCFOiSox2IjTokTpKWymFwzHa0.crl (hash: FGe2c+Oh3LASt63TzMRL5ZAbEkJsysHcrgFeCoi3K1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:f6:55:91:31:3a:3b:44:9d:e3:d3:fd:b4:b0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a50853a24a8c762234e8913a4a5b2985c331dad
Validity
Not Before: Aug 23 10:02:15 2025 GMT
Not After : Aug 24 10:02:15 2025 GMT
Subject: CN=9295e24d3eb954bb5125a4cae449483f7737fe37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:b3:9a:ec:d2:80:9b:84:92:b5:5c:8a:22:
2b:83:12:96:6c:d6:51:5d:c3:36:10:a4:6b:d7:03:
49:af:c2:69:ae:ce:35:6c:85:73:9f:2b:91:06:18:
57:a7:91:dd:28:9a:2c:58:e1:58:e2:10:15:e1:e0:
78:1e:ff:96:bc:76:6f:8f:ac:ca:46:e2:ca:ec:0c:
af:20:2e:29:39:34:60:5b:38:83:d1:06:7c:fd:c2:
b5:21:cf:5e:c8:34:67:8a:dc:12:f3:fd:1d:96:ce:
73:39:e8:05:dc:df:0b:57:86:0c:e4:f6:ea:b4:3a:
f8:76:f9:6e:8c:ea:cd:a4:98:31:3f:9d:45:c0:28:
a9:a5:ff:4e:46:f7:d1:73:84:ab:6d:f8:15:9c:9d:
37:56:bf:f5:b7:fe:1f:43:5b:3a:27:4e:f4:6f:ed:
07:22:73:48:75:fa:14:65:8b:8c:53:a4:53:ae:18:
b2:30:b7:ed:33:94:77:df:a2:73:b8:c7:54:5b:d3:
ab:b6:7e:54:9b:bf:fb:04:4c:44:56:a1:40:4d:b3:
d3:a9:37:c6:05:22:64:6b:32:a5:32:3b:b6:4f:24:
5f:5a:f4:16:94:25:a6:55:92:df:c3:94:f1:28:e5:
1f:31:8e:ce:f8:20:bd:ec:11:cf:83:c4:2b:1d:da:
51:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:95:E2:4D:3E:B9:54:BB:51:25:A4:CA:E4:49:48:3F:77:37:FE:37
X509v3 Authority Key Identifier:
keyid:9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:89:07:93:cc:40:02:61:c3:c8:f3:9b:20:53:7c:a4:88:89:
a0:71:a3:21:e1:c3:82:42:a9:36:24:57:7c:5d:45:6f:16:c2:
e2:94:57:a4:ec:86:ff:43:f4:b8:a5:b0:49:0d:09:e3:31:83:
25:ba:61:16:2f:5e:3a:30:e6:5d:60:95:c5:3f:48:ab:13:1e:
a3:ea:9c:d3:be:6b:17:fd:22:e9:97:0e:d2:1d:c1:d4:2f:17:
4a:03:60:5d:bd:e4:41:32:3d:89:39:60:b0:40:f8:9f:26:90:
ac:8d:9b:cd:e7:be:33:8d:0f:29:2c:d2:a1:5f:81:b6:94:5d:
2b:76:45:d8:a4:7a:ed:0a:0a:d2:33:d0:c4:5f:a8:90:40:6b:
5d:15:7f:ac:f6:dc:fa:5c:11:d8:f5:55:26:2f:fe:1c:f2:a4:
37:24:ee:47:39:9c:e6:90:5a:f8:b1:63:d6:3e:ff:49:e9:43:
05:02:3b:95:74:e6:36:da:be:f7:36:04:5f:75:fb:c3:b3:b2:
d6:3f:18:39:ba:08:e9:1c:6a:d5:d1:34:46:65:45:a3:c4:4b:
4d:3a:0d:f5:81:c3:21:ed:46:f3:8c:b6:e1:30:ce:91:fc:d8:
d0:68:70:2c:9c:8e:db:9d:be:86:d7:46:49:a6:96:d5:77:ad:
ab:eb:68:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:44:02 2025 by rpki-client