Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
File: mL_nROPS3UIxYU5-S61E1FUvCRs.mft (raw, json)
Hash identifier: 9oXst89cQAmJtQ2wcHPMWloThbtWZsr6skYM5Hcdp+o=
Subject key identifier: 20:5B:60:CC:70:E4:BE:F7:8A:09:91:67:DD:6A:1E:2B:62:DE:51:0E
Authority key identifier: 98:BF:E7:44:E3:D2:DD:42:31:61:4E:7E:4B:AD:44:D4:55:2F:09:1B
Certificate issuer: /CN=98bfe744e3d2dd4231614e7e4bad44d4552f091b
Certificate serial: 019A71EEB17CB81E119155E0F0CC005775BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
Manifest number: 05F3
Signing time: Tue 11 Nov 2025 08:00:59 +0000
Manifest this update: Tue 11 Nov 2025 08:00:59 +0000
Manifest next update: Wed 12 Nov 2025 08:00:59 +0000
Files and hashes: 1: mL_nROPS3UIxYU5-S61E1FUvCRs.crl (hash: k9JDS1Zc9aaq2d3It5PpqsG9SYG5NieYBVc9gjNnkyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b1:7c:b8:1e:11:91:55:e0:f0:cc:00:57:75:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98bfe744e3d2dd4231614e7e4bad44d4552f091b
Validity
Not Before: Nov 11 08:00:59 2025 GMT
Not After : Nov 12 08:00:59 2025 GMT
Subject: CN=205b60cc70e4bef78a099167dd6a1e2b62de510e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:31:54:7a:91:30:74:32:f3:ce:ca:c0:9c:75:
53:3c:2f:00:b4:4d:83:6c:0a:94:f4:76:7d:20:05:
b6:bd:ac:57:b0:9e:4d:39:83:ea:a3:77:fc:25:bf:
66:26:34:b2:8a:ca:64:38:f9:fd:48:83:19:87:e6:
aa:7b:dc:fe:54:ca:8f:54:6c:23:98:3e:bd:8b:ce:
45:51:9a:3e:0e:7f:58:46:42:3e:7c:3f:6e:81:eb:
85:1a:62:15:37:51:c3:23:4e:88:d3:54:02:25:bd:
4f:ff:7a:79:84:19:55:ee:8b:17:eb:b5:e8:46:c4:
6f:18:79:36:c3:bc:82:d4:80:78:92:28:fe:d5:df:
32:0b:80:da:79:0c:54:e4:e2:ec:8b:75:60:2a:3e:
ed:51:b6:bc:5f:2e:6a:df:18:9c:c6:8d:ee:ac:43:
68:36:49:fe:47:3b:6a:7d:ec:84:04:b5:9d:f5:ba:
1f:fc:2b:5c:33:6c:9d:94:98:bf:97:04:96:6f:51:
b7:78:c0:1d:13:a7:5b:52:0c:bb:40:39:28:8c:2d:
c9:53:3e:3d:b5:3d:56:a8:a1:42:6b:86:84:ea:c8:
fa:b8:6b:b4:ad:de:ed:f3:31:50:1f:a0:04:27:8c:
7c:57:43:42:c1:61:99:8b:e1:f3:96:77:39:8e:11:
97:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5B:60:CC:70:E4:BE:F7:8A:09:91:67:DD:6A:1E:2B:62:DE:51:0E
X509v3 Authority Key Identifier:
keyid:98:BF:E7:44:E3:D2:DD:42:31:61:4E:7E:4B:AD:44:D4:55:2F:09:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:08:5c:42:42:7e:77:38:6d:27:d9:90:2d:fe:83:15:26:6f:
6b:4b:30:01:1b:63:03:c8:a4:4c:dd:d9:91:1a:0e:ea:f6:96:
a2:0f:b9:1e:24:00:92:af:38:7c:d3:67:17:0f:4f:3d:dc:cc:
3a:bc:cb:06:8b:0d:9f:b1:89:ea:a4:e6:e4:ef:c6:72:2c:6d:
f6:f0:e3:a7:5a:0a:e6:0b:e6:cf:5d:62:8d:11:fc:de:c4:61:
99:ad:fa:45:14:b7:1d:e0:52:31:6d:56:e8:2a:7d:e9:46:b1:
eb:51:2f:53:94:ac:95:40:bf:57:db:f8:e2:a5:56:42:b4:2d:
ed:28:e5:ca:8e:3a:df:6e:71:74:30:28:bd:b0:00:4b:48:e0:
7d:8e:b5:b8:df:ab:3e:76:ae:9a:fe:7c:47:20:1d:fb:86:ac:
1a:f8:1b:98:04:c0:4e:4b:17:b5:85:8d:34:6b:59:70:9e:c8:
37:a8:db:e9:cd:f3:14:bc:c4:3d:e7:f9:78:06:bb:f1:27:73:
22:d1:97:8b:f9:1f:c8:e0:bf:83:99:00:2f:7d:d8:3d:f6:f0:
cc:36:30:7a:c7:d6:94:41:18:39:c2:7e:b1:f3:ae:e9:0c:fe:
e8:d0:72:70:b7:4f:0d:40:4e:24:30:ea:e6:c8:a5:06:d0:36:
18:fc:af:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:18 2025 by rpki-client