Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/22454c-48bd-4dab-95a0-56ac96596d0b/1/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.mft
File: Mlpdv7OJlbWnn8HQ7jFEySeSTqU.mft (raw, json)
Hash identifier: NWn0r1e4Qw+310SpTTv93Q0ANrgR/ZLTvQQDVgE6Gxg=
Subject key identifier: 65:31:29:E3:CA:DF:9D:41:73:A2:BF:53:7C:33:B4:74:D1:0E:73:16
Authority key identifier: 32:5A:5D:BF:B3:89:95:B5:A7:9F:C1:D0:EE:31:44:C9:27:92:4E:A5
Certificate issuer: /CN=325a5dbfb38995b5a79fc1d0ee3144c927924ea5
Certificate serial: 019A7225D3AEE7876AFA87298422E4867222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/22454c-48bd-4dab-95a0-56ac96596d0b/1/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 09:01:12 +0000
Manifest this update: Tue 11 Nov 2025 09:01:12 +0000
Manifest next update: Wed 12 Nov 2025 09:01:12 +0000
Files and hashes: 1: Mlpdv7OJlbWnn8HQ7jFEySeSTqU.crl (hash: pr345U0W+RFbhq71k0nriGHwl+Ev5VvoiVl1ltHnTlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/22454c-48bd-4dab-95a0-56ac96596d0b/1/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/22454c-48bd-4dab-95a0-56ac96596d0b/1/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:d3:ae:e7:87:6a:fa:87:29:84:22:e4:86:72:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325a5dbfb38995b5a79fc1d0ee3144c927924ea5
Validity
Not Before: Nov 11 09:01:12 2025 GMT
Not After : Nov 12 09:01:12 2025 GMT
Subject: CN=653129e3cadf9d4173a2bf537c33b474d10e7316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6f:82:8f:83:80:1d:5c:3a:94:29:1f:c0:00:
be:c7:50:77:35:1d:00:f7:98:30:ad:57:7b:24:66:
f6:89:b8:b8:cc:77:df:4c:34:0f:e0:81:4f:ae:6d:
79:de:75:9e:d2:3b:6f:81:1e:46:de:cb:cd:cd:ac:
ef:97:43:a2:6e:e4:03:a5:f6:a7:a0:da:c4:32:3e:
9a:dc:80:c8:dd:54:4e:61:ec:4b:ab:88:bb:c1:1b:
d1:31:b0:e0:86:1a:8b:6a:08:c8:7b:b7:6d:8e:92:
a3:37:42:ed:e4:8e:67:44:2a:e5:5a:0c:7f:a8:74:
01:a1:6a:e5:2e:46:5c:e7:59:55:7f:01:5f:af:67:
58:6e:fc:22:8b:ca:05:6b:f0:6f:06:d4:6d:57:16:
2c:9e:99:4e:a4:1a:bd:d4:6f:ba:10:6b:2f:ac:e9:
4f:23:f2:7e:6d:07:e0:49:fe:e4:7d:aa:eb:90:4f:
26:94:06:0a:63:3a:6d:22:f8:09:f6:0f:60:82:6f:
93:6f:27:2a:a9:60:8d:48:3d:61:6c:24:8a:05:45:
61:98:33:29:49:7f:4c:70:17:9e:a3:62:bb:2a:fb:
36:b6:8f:4a:ab:d7:04:50:7d:61:f4:39:d3:ca:98:
c5:39:60:3e:c2:08:5e:09:85:cb:ba:33:e1:ed:09:
dc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:31:29:E3:CA:DF:9D:41:73:A2:BF:53:7C:33:B4:74:D1:0E:73:16
X509v3 Authority Key Identifier:
keyid:32:5A:5D:BF:B3:89:95:B5:A7:9F:C1:D0:EE:31:44:C9:27:92:4E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22454c-48bd-4dab-95a0-56ac96596d0b/1/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/22454c-48bd-4dab-95a0-56ac96596d0b/1/Mlpdv7OJlbWnn8HQ7jFEySeSTqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:54:ac:e6:c5:a1:fa:d5:01:1d:50:fb:04:51:9d:3b:6d:81:
db:06:cd:b2:b2:75:ed:f1:ef:31:12:ac:72:30:39:11:aa:eb:
a8:e6:08:a5:05:45:95:ff:b4:f8:70:f1:22:88:6a:92:6e:dc:
b9:de:74:f3:46:c5:64:db:e3:75:08:b2:7b:32:8b:7d:c7:ed:
5d:07:8c:53:07:63:e4:5b:15:e7:2e:2c:18:17:b2:3a:d7:ac:
f9:8c:f3:09:10:43:13:0b:7c:3b:02:b8:b0:44:ca:f9:32:06:
aa:77:ee:3d:48:b6:69:5b:84:48:5e:bb:3e:b7:93:38:a0:98:
dc:bc:12:69:6f:0d:07:52:bc:d6:5e:df:89:eb:df:39:b9:25:
49:c5:52:5a:5d:99:0f:cf:1a:7f:b0:30:6f:b4:4b:b2:84:2a:
97:9c:e2:d7:78:3b:c8:a2:86:e3:be:a5:85:44:fe:05:dd:c8:
a4:07:0f:84:90:6c:07:ae:b9:63:9c:5d:d7:72:55:fe:49:da:
d9:25:0e:62:a1:0f:61:ba:b8:cb:d6:00:69:2b:3d:c7:1a:0d:
b8:06:c9:82:fd:64:d7:8f:85:1b:24:4b:4c:c3:10:13:71:a5:
03:b0:0a:26:10:d2:5c:e7:33:55:af:dd:32:73:48:fb:63:79:
00:51:61:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:36 2025 by rpki-client