Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
File: MlRXaPR8NXhe6616NDikscT43DA.mft (raw, json)
Hash identifier: MiBfKni1Ol5iKjhKZsmttYYy63Rpuh1Oqz8SgaTD7wU=
Subject key identifier: C3:07:92:BC:16:68:CC:24:2D:27:CF:3A:A3:7E:DF:85:10:DD:8F:6A
Authority key identifier: 32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30
Certificate issuer: /CN=32545768f47c35785eebad7a3438a4b1c4f8dc30
Certificate serial: 019A71B8C16A5BB0EC6F4D28134DAFF8947D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
Manifest number: 0CE4
Signing time: Tue 11 Nov 2025 07:02:04 +0000
Manifest this update: Tue 11 Nov 2025 07:02:04 +0000
Manifest next update: Wed 12 Nov 2025 07:02:04 +0000
Files and hashes: 1: MlRXaPR8NXhe6616NDikscT43DA.crl (hash: A2qBos1xxXRej4RYveaHHCzJh/WZOJcdR4wDdH+hw8M=)
2: UVHym_hND0UKS0TZahA67-xdRaw.roa (hash: pLZ+GW3vB+RehhXMdEErWzND6dd84/xMpKL3yEHLLYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:c1:6a:5b:b0:ec:6f:4d:28:13:4d:af:f8:94:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32545768f47c35785eebad7a3438a4b1c4f8dc30
Validity
Not Before: Nov 11 07:02:04 2025 GMT
Not After : Nov 12 07:02:04 2025 GMT
Subject: CN=c30792bc1668cc242d27cf3aa37edf8510dd8f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:81:dc:9e:22:ca:37:d1:7e:d2:d7:8c:28:b2:
6e:32:56:7b:20:d4:d5:c8:e9:97:1c:27:55:6a:81:
38:76:32:23:86:ba:83:8e:39:c0:ac:01:d0:bb:ea:
fb:15:83:ee:58:f4:d8:f9:f4:60:9f:dc:b9:ce:f9:
1d:be:60:b9:fa:1e:d1:b5:f2:e5:5f:09:8f:eb:75:
9c:67:48:8b:dd:9f:30:37:2e:8e:90:62:bc:15:6c:
38:5a:2c:7b:9a:08:31:85:94:22:36:61:25:4a:90:
a8:12:5c:ef:d9:47:5d:45:b9:3d:38:86:f3:b2:23:
69:d1:48:db:06:d1:ed:ad:86:8d:55:63:7f:72:95:
ad:86:dd:cf:b5:ac:32:f8:e1:54:09:f9:83:bf:0c:
66:53:91:6d:cb:1d:f8:c8:97:17:b2:17:1a:2a:45:
f7:72:6b:f9:6b:37:7a:6b:20:64:f2:94:1f:dc:84:
0b:ab:a5:73:99:74:17:89:fc:d6:8a:65:45:7e:4e:
eb:28:2c:de:8b:17:2c:73:ab:12:71:7e:47:ee:48:
ce:dc:67:f7:86:91:72:83:83:6a:b3:b8:c8:2e:ac:
ee:69:72:19:53:01:84:a5:25:21:bd:4e:91:50:29:
dd:16:8c:58:ca:6e:f7:04:8e:ce:fc:b1:64:37:77:
28:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:07:92:BC:16:68:CC:24:2D:27:CF:3A:A3:7E:DF:85:10:DD:8F:6A
X509v3 Authority Key Identifier:
keyid:32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7c:bb:4e:23:d3:7e:25:7a:50:c5:a2:a1:99:85:8c:08:e4:
30:92:11:8a:ea:93:5f:71:e0:a7:8a:93:58:43:95:f3:a3:ee:
a1:c4:a8:cd:25:ad:e0:21:52:9e:1c:1a:a8:1a:7d:ce:4a:e1:
4c:aa:04:30:c4:46:d7:9f:88:fb:2d:8e:3e:9e:01:10:18:0d:
d8:8d:87:d1:bf:14:71:37:a5:60:e2:d7:d0:77:a6:3c:af:1a:
5d:ce:dd:26:6e:48:94:3d:ed:05:5a:1e:88:f3:91:fb:6a:e5:
c3:bc:44:cf:e0:c1:c2:78:39:4f:63:bb:cb:4e:f9:da:83:fe:
f3:d0:80:fa:92:3f:fc:43:6e:d2:99:48:e1:0f:5d:53:80:88:
c9:cb:29:e4:19:d7:e6:e4:9a:fa:48:1f:40:a5:9a:bf:d9:04:
f8:09:71:dc:38:79:1c:82:78:cb:12:2a:73:9a:4a:44:22:6f:
67:93:b0:2e:d8:f0:39:e4:c4:2c:82:50:e3:1f:32:27:e1:74:
82:ac:14:49:f2:eb:02:d2:55:39:bb:87:85:b4:73:b5:c8:66:
3c:a5:58:3b:bb:84:3e:cb:9e:59:09:64:cf:fb:21:03:06:62:
c0:c8:6a:43:ae:53:da:56:35:72:cb:0a:89:ec:95:a8:a2:cb:
ed:6c:d0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:40:53 2025 by rpki-client