Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
File: MlRXaPR8NXhe6616NDikscT43DA.mft (raw, json)
Hash identifier: WSKq7sE5p5gt7pywC6oGTC6WIa4qmcDgtC41gRkWqMg=
Subject key identifier: C6:41:23:52:F6:E0:0A:4E:24:CD:88:2E:DB:A6:B0:8D:EA:48:21:FA
Authority key identifier: 32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30
Certificate issuer: /CN=32545768f47c35785eebad7a3438a4b1c4f8dc30
Certificate serial: 019923A0145527989646903B82D47D4B40C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
Manifest number: 0C37
Signing time: Sun 07 Sep 2025 10:01:57 +0000
Manifest this update: Sun 07 Sep 2025 10:01:57 +0000
Manifest next update: Mon 08 Sep 2025 10:01:57 +0000
Files and hashes: 1: MlRXaPR8NXhe6616NDikscT43DA.crl (hash: L7986AACzA9wUdNRcD/HCv4bf6aa3CKaJMB6cMOqbtg=)
2: UVHym_hND0UKS0TZahA67-xdRaw.roa (hash: pLZ+GW3vB+RehhXMdEErWzND6dd84/xMpKL3yEHLLYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:14:55:27:98:96:46:90:3b:82:d4:7d:4b:40:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32545768f47c35785eebad7a3438a4b1c4f8dc30
Validity
Not Before: Sep 7 10:01:57 2025 GMT
Not After : Sep 8 10:01:57 2025 GMT
Subject: CN=c6412352f6e00a4e24cd882edba6b08dea4821fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5a:f1:96:99:73:3a:5c:1c:b7:6d:f7:33:b4:
b7:59:39:4d:72:a3:cb:22:65:63:47:d7:01:ba:d2:
7f:0b:e9:91:5f:22:96:d4:47:fc:a2:19:6b:b2:5e:
d2:72:de:ce:c9:14:fa:bd:d2:07:35:a7:5e:3f:8c:
69:fd:1d:ef:2b:82:f1:25:51:e3:c0:70:7f:a4:31:
af:6a:06:55:c5:25:88:87:67:a6:87:ad:a5:8f:1c:
43:47:ab:ff:70:d6:54:5a:62:38:d1:08:7d:b8:95:
7a:65:6c:81:59:91:4f:82:6c:b6:c4:92:6c:94:2d:
8c:95:31:24:e6:02:5c:3b:c6:64:c6:0d:3b:36:8b:
34:4d:4e:4b:ec:37:14:80:2d:ec:34:cb:39:95:05:
26:02:5c:f8:60:aa:c8:71:b2:56:0c:45:ff:4e:e2:
16:49:39:39:3c:02:5f:d7:19:67:3e:7e:9b:66:aa:
01:7d:21:09:38:ff:6c:d4:d1:27:c1:8c:c6:11:b5:
0a:9f:7d:84:b7:db:5c:af:18:4f:36:a1:9d:e0:38:
98:ee:4f:af:cf:bd:af:89:2f:3e:ab:b8:6a:e8:c3:
51:77:e8:69:a4:24:28:a8:e1:84:bc:11:c6:14:a6:
05:06:0a:f6:77:eb:f2:94:29:ec:f3:0d:65:35:4e:
b6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:41:23:52:F6:E0:0A:4E:24:CD:88:2E:DB:A6:B0:8D:EA:48:21:FA
X509v3 Authority Key Identifier:
keyid:32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b2:eb:35:05:fb:c4:76:24:0a:de:2f:34:9f:3b:28:56:c9:
3d:7f:3a:a4:00:16:be:26:0a:95:59:68:d9:45:4d:55:da:f0:
84:a6:f5:90:b3:5a:4f:cd:ff:05:54:68:8e:47:7c:b9:c4:2b:
6c:8d:eb:9b:05:1d:27:4e:fb:d7:f6:37:8c:5b:34:08:7b:b5:
d6:47:3d:4a:0e:d8:2c:43:9e:a5:d2:38:f9:9e:4c:3e:7c:36:
65:a7:fe:72:fb:54:0e:09:38:3c:b8:fc:98:bd:c8:ae:c2:b2:
bb:47:fe:2b:2c:e3:bd:5d:ae:d6:0d:0b:89:bd:52:4c:7b:ca:
c7:87:8e:37:16:e0:04:8e:0b:fd:68:3e:6a:6c:41:a0:3c:cd:
84:1a:73:22:55:5c:66:fe:82:4e:b8:a5:0e:1e:0a:df:4c:61:
e0:80:29:f0:3b:a1:ac:9f:27:4a:91:35:41:2d:90:62:2b:83:
ce:dd:8b:87:b4:9e:29:1f:6d:3f:22:51:ed:38:58:cc:c8:ac:
4f:1c:52:50:5b:fe:ef:2d:b8:a3:4e:19:ab:cb:fc:b9:b0:2b:
1d:8b:b7:18:1c:6a:af:74:8b:67:0d:80:55:0b:60:57:ae:77:
61:e2:24:e7:72:2d:8f:8b:54:27:ec:3f:bf:6d:49:e5:cc:15:
30:19:4c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:34:40 2025 by rpki-client