Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
File: mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft (raw, json)
Hash identifier: LhAoIdQCNmMq9TF4HgpvUbxz13PUEYYwgTDrR28QjO0=
Subject key identifier: 9F:07:AB:A5:84:03:D2:CD:3D:5A:61:41:FF:1B:37:40:65:05:16:88
Authority key identifier: 98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
Certificate issuer: /CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Certificate serial: 019A71B8CA6D70A645D652F1FC9FD515497F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
Manifest number: 1100
Signing time: Tue 11 Nov 2025 07:02:07 +0000
Manifest this update: Tue 11 Nov 2025 07:02:07 +0000
Manifest next update: Wed 12 Nov 2025 07:02:07 +0000
Files and hashes: 1: mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl (hash: UNgK0aeB7Ln45ITTnqQv8OpupAFee/srXHWKxf7cOY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ca:6d:70:a6:45:d6:52:f1:fc:9f:d5:15:49:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Validity
Not Before: Nov 11 07:02:07 2025 GMT
Not After : Nov 12 07:02:07 2025 GMT
Subject: CN=9f07aba58403d2cd3d5a6141ff1b374065051688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f3:46:66:00:45:3e:33:3f:62:f3:66:29:8b:
fc:c9:b6:4b:e7:c1:a7:34:92:b6:5a:2d:fe:6e:79:
d0:b0:cc:5d:48:0b:d6:14:cb:a4:d3:0d:cb:ef:da:
07:1a:54:ee:73:19:c0:8b:af:ec:44:50:b4:6a:98:
dd:4e:64:76:ee:bf:6a:dc:6b:60:f5:c2:63:f9:b2:
c5:d8:52:ed:c6:f5:8e:5d:cb:da:e3:61:c3:2f:bf:
42:6d:9f:99:a2:87:d1:af:b6:ff:85:bb:82:bc:3a:
f4:c8:9a:cc:4f:ee:b3:c5:2d:0c:df:46:ef:74:df:
16:a6:f9:3a:d6:07:3a:8c:da:12:37:35:31:45:90:
d6:39:50:0b:f0:8e:7a:0c:4e:a3:5d:7e:66:c5:18:
fb:45:ed:91:92:67:54:b3:80:5e:f5:9b:ae:a3:37:
4d:89:27:a6:7f:62:d4:f4:46:b1:24:92:96:a5:26:
aa:17:bc:c8:71:b1:fe:a1:47:7a:ff:49:aa:0c:13:
9e:29:07:33:27:2e:47:84:33:01:94:b9:3c:d8:9e:
57:39:8e:3a:46:e2:e2:0f:42:51:90:35:43:9e:ba:
37:2e:d9:5d:7b:6d:6b:4d:08:d1:a7:a4:80:96:de:
8a:47:4c:2a:96:97:cf:64:2c:5e:50:79:9e:2e:b8:
de:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:07:AB:A5:84:03:D2:CD:3D:5A:61:41:FF:1B:37:40:65:05:16:88
X509v3 Authority Key Identifier:
keyid:98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e0:94:8f:3c:e7:2b:23:88:c9:4d:ab:46:50:ad:ff:19:2b:
e0:3c:36:83:df:e3:82:51:0a:61:1c:70:b6:8c:a5:d4:e2:40:
53:30:00:05:80:88:dc:54:ee:d1:6a:e6:59:ae:23:08:d0:0d:
03:54:28:30:d9:f7:d4:c5:f5:bd:c4:79:ca:12:da:d2:e0:cc:
95:5f:6c:ac:73:74:6c:cb:3d:85:95:68:67:fc:9d:a4:95:5f:
87:a1:54:a2:2d:3d:78:d9:d7:fa:4a:41:a3:cb:37:2d:44:44:
f0:d4:5b:39:99:98:8f:66:f7:ea:d4:41:4f:e8:86:d3:47:d4:
24:28:af:1a:f1:67:60:74:07:d8:47:52:3d:a1:87:2c:de:91:
d9:6d:64:df:b8:de:88:d6:7a:45:d2:47:c2:bb:08:92:b9:55:
d6:f3:3d:9e:e7:44:b5:ac:19:f0:ea:ab:79:05:42:19:89:09:
e2:b6:82:07:5b:25:3e:2b:4c:0d:b7:b7:e1:bd:44:27:26:1c:
7f:b7:9f:d1:21:a5:85:8b:07:53:05:06:45:e8:0e:bf:3b:1d:
0c:3d:f9:dc:9f:4d:3a:dc:cb:cf:a2:16:19:c4:0b:81:30:89:
ce:ed:55:d6:0f:25:80:9c:29:83:ed:e9:cc:92:5e:92:9e:ac:
22:11:34:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:19 2025 by rpki-client