Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/7b6340-b261-4a8d-b5b7-d5d8142b2dea/1/rMLFlKR8h2Yif9mlEolO-Ko0tgc.mft
File: rMLFlKR8h2Yif9mlEolO-Ko0tgc.mft (raw, json)
Hash identifier: DUp0WDHyU8EMoVz/YpoJECukY4LXWd5trankZZUIelg=
Subject key identifier: 02:04:05:C4:2A:4D:FF:37:99:B6:EB:90:37:C2:F7:59:36:52:92:CF
Authority key identifier: AC:C2:C5:94:A4:7C:87:66:22:7F:D9:A5:12:89:4E:F8:AA:34:B6:07
Certificate issuer: /CN=acc2c594a47c8766227fd9a512894ef8aa34b607
Certificate serial: 019A71B8219A255DB147BA9724831709FE00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMLFlKR8h2Yif9mlEolO-Ko0tgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7b6340-b261-4a8d-b5b7-d5d8142b2dea/1/rMLFlKR8h2Yif9mlEolO-Ko0tgc.mft
Manifest number: 16
Signing time: Tue 11 Nov 2025 07:01:23 +0000
Manifest this update: Tue 11 Nov 2025 07:01:23 +0000
Manifest next update: Wed 12 Nov 2025 07:01:23 +0000
Files and hashes: 1: rMLFlKR8h2Yif9mlEolO-Ko0tgc.crl (hash: 7PNqT8SYVpRpy7xoaDsf/GNsmuozpEsqrvFnSA+XAZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/7b6340-b261-4a8d-b5b7-d5d8142b2dea/1/rMLFlKR8h2Yif9mlEolO-Ko0tgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/7b6340-b261-4a8d-b5b7-d5d8142b2dea/1/rMLFlKR8h2Yif9mlEolO-Ko0tgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMLFlKR8h2Yif9mlEolO-Ko0tgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:21:9a:25:5d:b1:47:ba:97:24:83:17:09:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc2c594a47c8766227fd9a512894ef8aa34b607
Validity
Not Before: Nov 11 07:01:23 2025 GMT
Not After : Nov 12 07:01:23 2025 GMT
Subject: CN=020405c42a4dff3799b6eb9037c2f759365292cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2d:58:37:67:80:1a:06:d5:c2:35:b5:58:f6:
35:ba:67:1b:ec:c0:f3:8e:30:e3:7b:30:8e:ed:b8:
fe:b1:23:85:af:d0:4e:28:7f:21:32:3f:89:66:bb:
2c:d6:15:14:7e:aa:3a:40:2e:20:34:40:24:86:d5:
22:37:25:79:9e:75:7b:1e:35:c9:8c:9a:e2:d5:82:
25:e0:bc:35:ad:f1:0a:6e:91:6d:dd:65:ea:7b:74:
85:43:d7:0e:a3:52:62:d7:49:db:ff:02:db:50:1f:
7d:5d:9f:fd:3a:97:be:5a:2a:a8:4a:c9:87:58:da:
2a:2e:cf:2a:05:f9:36:e6:13:6d:a3:3a:1d:66:39:
7f:fd:36:4b:1f:56:93:23:da:92:20:37:6b:9a:15:
58:94:34:d1:09:89:4d:68:12:41:0f:10:93:67:a7:
0f:d8:b1:e1:5b:93:6a:f0:dc:17:14:4c:06:a8:fb:
9d:73:83:19:09:c8:96:64:83:e4:73:0b:54:dd:cd:
f9:c3:e6:ea:2d:a1:99:92:44:4b:8a:38:56:4e:f3:
17:24:49:91:d8:cb:98:95:32:8b:5a:ab:38:63:14:
7b:35:b1:74:5e:c2:1e:41:e5:1f:a9:c5:46:89:54:
22:41:d0:91:23:d5:25:5b:22:de:87:55:69:00:b8:
f4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:04:05:C4:2A:4D:FF:37:99:B6:EB:90:37:C2:F7:59:36:52:92:CF
X509v3 Authority Key Identifier:
keyid:AC:C2:C5:94:A4:7C:87:66:22:7F:D9:A5:12:89:4E:F8:AA:34:B6:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMLFlKR8h2Yif9mlEolO-Ko0tgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7b6340-b261-4a8d-b5b7-d5d8142b2dea/1/rMLFlKR8h2Yif9mlEolO-Ko0tgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7b6340-b261-4a8d-b5b7-d5d8142b2dea/1/rMLFlKR8h2Yif9mlEolO-Ko0tgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:dd:42:94:d2:04:b5:a6:dd:e6:67:65:11:b0:30:32:4e:48:
ed:dc:47:f4:45:8b:44:3a:45:2b:b6:58:ac:b0:9e:37:67:2b:
73:f6:fc:3e:e8:d4:ed:e1:e1:fe:cc:a0:2f:6c:93:d4:99:41:
ae:f1:2f:a7:54:b4:31:eb:dd:7c:de:92:d7:9f:33:31:19:36:
c5:ea:4b:19:bf:fc:6a:ef:18:3f:a8:fe:16:df:77:ff:12:c0:
79:02:21:56:4b:2f:31:61:f6:e6:5a:a9:58:bd:1e:cc:ca:1f:
30:c9:b8:02:71:cc:64:74:46:d2:75:97:31:08:a6:f8:49:c8:
a5:ef:00:6a:15:e1:7c:40:5e:1d:99:cb:b3:0c:ec:b8:e2:90:
6a:44:21:f7:78:37:b2:dd:ed:47:8f:92:26:f3:e9:39:c0:73:
d7:a9:37:f1:0c:14:52:29:67:21:8f:c7:78:77:ee:de:aa:29:
c5:a4:c1:b6:7b:86:54:f4:d4:15:e4:c9:fb:ad:2f:9e:e3:06:
df:e2:78:53:3b:f4:3b:36:14:44:e6:15:80:c3:6b:c5:33:4a:
27:53:da:c9:1b:35:bf:40:b7:1c:1f:c1:e9:56:16:78:63:3d:
a2:b2:6b:fe:05:88:8f:4a:7a:11:af:14:0d:c6:d6:63:cc:95:
e0:33:63:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:40 2025 by rpki-client