Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
File: MlRXaPR8NXhe6616NDikscT43DA.mft (raw, json)
Hash identifier: gHf9XRexjs+Us/ZIsomArfBAC3pOhqEFyUfi4wWYm1M=
Subject key identifier: 57:FC:B0:23:8E:FD:53:F2:71:72:13:DF:31:8C:B6:04:89:34:4A:D8
Authority key identifier: 32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30
Certificate issuer: /CN=32545768f47c35785eebad7a3438a4b1c4f8dc30
Certificate serial: 01974A7AE636041CAA2EF3A78D333D26A685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
Manifest number: 0B42
Signing time: Sat 07 Jun 2025 13:00:57 +0000
Manifest this update: Sat 07 Jun 2025 13:00:57 +0000
Manifest next update: Sun 08 Jun 2025 13:00:57 +0000
Files and hashes: 1: MlRXaPR8NXhe6616NDikscT43DA.crl (hash: 7oG6MglRbZpwmFjstVefILW+20qwkAdWGS1L2MDlC0Q=)
2: UVHym_hND0UKS0TZahA67-xdRaw.roa (hash: pLZ+GW3vB+RehhXMdEErWzND6dd84/xMpKL3yEHLLYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:e6:36:04:1c:aa:2e:f3:a7:8d:33:3d:26:a6:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32545768f47c35785eebad7a3438a4b1c4f8dc30
Validity
Not Before: Jun 7 13:00:57 2025 GMT
Not After : Jun 8 13:00:57 2025 GMT
Subject: CN=57fcb0238efd53f2717213df318cb60489344ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:88:79:ff:45:83:58:2e:10:b5:34:ad:ae:8c:
bd:6e:5b:c6:92:46:ea:e0:0e:f8:81:34:8f:7d:89:
e4:ba:d0:f5:2b:39:0a:e5:ab:10:fc:4c:b0:f1:49:
d5:b8:3e:de:9e:23:18:69:26:30:ff:6d:f8:14:6a:
8e:af:eb:a7:ab:bc:fa:e3:1a:11:21:2e:28:01:4b:
69:40:ed:37:bc:83:9f:60:63:5f:38:15:c3:31:1e:
71:80:c6:ea:cd:45:f1:27:f7:81:4e:7d:b4:7f:1a:
72:05:d8:8f:e2:f5:19:0b:75:85:60:b4:fb:f9:d6:
9b:8c:77:2a:ee:5c:08:dd:c0:c8:45:50:40:48:ab:
52:74:3e:54:b9:58:9f:19:82:8c:af:58:9c:df:99:
9e:42:25:19:e3:72:7b:8d:72:be:e3:cd:b9:c2:3b:
98:54:16:73:39:a5:a4:25:38:89:dd:eb:10:1d:26:
d8:b4:f3:71:db:d2:83:7f:27:0e:db:3c:aa:77:54:
da:36:c0:56:02:d3:36:bd:d9:88:0a:92:3c:87:03:
73:56:6c:70:4d:10:47:d9:60:d5:51:9b:77:d0:4b:
9a:87:18:c4:50:d7:74:0c:93:99:92:d7:42:71:07:
95:96:b2:fc:96:40:7c:97:37:1c:c6:f2:14:30:0c:
22:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FC:B0:23:8E:FD:53:F2:71:72:13:DF:31:8C:B6:04:89:34:4A:D8
X509v3 Authority Key Identifier:
keyid:32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a0:54:f5:5c:70:9d:1a:c4:de:39:c9:07:7b:28:e8:55:3c:
e3:4c:c3:22:e4:bf:e2:8f:1e:a7:d7:db:2f:52:c1:68:2b:49:
2c:ee:02:61:db:70:da:3e:c9:5d:48:e8:2d:9e:4f:7e:a6:94:
87:90:57:8d:3e:25:12:bb:47:b0:9c:2b:29:2c:66:8c:dc:f8:
32:af:c7:7b:ac:1c:6f:cd:47:e3:5d:e8:87:ae:4f:69:14:63:
57:3b:ee:be:f5:ac:83:84:a0:42:b4:3a:5c:87:c4:f1:cb:bd:
da:42:20:0c:98:30:9b:07:61:36:59:c8:69:74:71:f2:60:ec:
f8:28:34:56:a0:4b:c3:5f:8b:ec:8f:ff:97:c3:99:3d:66:ac:
8e:0c:5d:19:3c:9b:c1:02:ed:d5:76:e4:b6:6b:57:b9:e9:03:
c4:bc:a3:0c:2a:42:92:32:15:c2:67:db:40:ae:60:c7:ea:c9:
d7:40:82:fb:32:4c:b2:70:4d:bb:c7:7a:d5:52:90:11:d8:fe:
bf:f5:81:cc:18:3e:70:ad:64:98:b8:a6:e3:28:0e:4d:63:fe:
da:2e:7f:5b:ca:df:c9:ab:ad:35:d4:61:ca:66:ef:03:ae:93:
26:2d:ac:d3:a3:58:4e:64:ba:58:41:26:fc:b4:16:9e:6b:a3:
7a:73:fc:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKeuY2BByqLvOnjTM9JqaFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNTQ1NzY4ZjQ3YzM1Nzg1ZWViYWQ3YTM0MzhhNGIxYzRm
OGRjMzAwHhcNMjUwNjA3MTMwMDU3WhcNMjUwNjA4MTMwMDU3WjAzMTEwLwYDVQQD
Eyg1N2ZjYjAyMzhlZmQ1M2YyNzE3MjEzZGYzMThjYjYwNDg5MzQ0YWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIh5/0WDWC4QtTStroy9blvGkkbq
4A74gTSPfYnkutD1KzkK5asQ/Eyw8UnVuD7eniMYaSYw/234FGqOr+unq7z64xoR
IS4oAUtpQO03vIOfYGNfOBXDMR5xgMbqzUXxJ/eBTn20fxpyBdiP4vUZC3WFYLT7
+dabjHcq7lwI3cDIRVBASKtSdD5UuVifGYKMr1ic35meQiUZ43J7jXK+4825wjuY
VBZzOaWkJTiJ3esQHSbYtPNx29KDfycO2zyqd1TaNsBWAtM2vdmICpI8hwNzVmxw
TRBH2WDVUZt30EuahxjEUNd0DJOZktdCcQeVlrL8lkB8lzccxvIUMAwiYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFf8sCOO/VPycXIT3zGMtgSJNErYMB8GA1UdIwQY
MBaAFDJUV2j0fDV4XuutejQ4pLHE+NwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWxSWGFQUjhOWGhlNjYxNk5EaWtzY1Q0M0RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80N2JjNzYtOTc0ZS00MDE4LTk0ZmQt
N2Y0NmM4YzY4ZTdlLzEvTWxSWGFQUjhOWGhlNjYxNk5EaWtzY1Q0M0RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi80N2JjNzYtOTc0ZS00MDE4LTk0ZmQtN2Y0NmM4YzY4ZTdl
LzEvTWxSWGFQUjhOWGhlNjYxNk5EaWtzY1Q0M0RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANqBU9Vxw
nRrE3jnJB3so6FU840zDIuS/4o8ep9fbL1LBaCtJLO4CYdtw2j7JXUjoLZ5PfqaU
h5BXjT4lErtHsJwrKSxmjNz4Mq/He6wcb81H413oh65PaRRjVzvuvvWsg4SgQrQ6
XIfE8cu92kIgDJgwmwdhNlnIaXRx8mDs+Cg0VqBLw1+L7I//l8OZPWasjgxdGTyb
wQLt1XbktmtXuekDxLyjDCpCkjIVwmfbQK5gx+rJ10CC+zJMsnBNu8d61VKQEdj+
v/WBzBg+cK1kmLim4ygOTWP+2i5/W8rfyautNdRhymbvA66TJi2s06NYTmS6WEEm
/LQWnmujenP8UA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:45:37 2025 by rpki-client