Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
File: MLepUygLb5mPwRxHy-kbgmM2TrA.mft (raw, json)
Hash identifier: 0NBt4pmwdhOZUpCIPXuEj1KAoofcuR1VY5jujNKLdpY=
Subject key identifier: E6:C4:8D:6B:95:28:66:D1:FB:74:43:20:97:61:BE:07:45:D8:CF:61
Authority key identifier: 30:B7:A9:53:28:0B:6F:99:8F:C1:1C:47:CB:E9:1B:82:63:36:4E:B0
Certificate issuer: /CN=30b7a953280b6f998fc11c47cbe91b8263364eb0
Certificate serial: 019A725C7CA9AC6D60597010879445D2ECAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
Manifest number: 05FC
Signing time: Tue 11 Nov 2025 10:00:55 +0000
Manifest this update: Tue 11 Nov 2025 10:00:55 +0000
Manifest next update: Wed 12 Nov 2025 10:00:55 +0000
Files and hashes: 1: MLepUygLb5mPwRxHy-kbgmM2TrA.crl (hash: cTGxXIT5wnO0oLgjOWdhlum2WJkd5oPgEv23kabWhJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:7c:a9:ac:6d:60:59:70:10:87:94:45:d2:ec:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30b7a953280b6f998fc11c47cbe91b8263364eb0
Validity
Not Before: Nov 11 10:00:55 2025 GMT
Not After : Nov 12 10:00:55 2025 GMT
Subject: CN=e6c48d6b952866d1fb7443209761be0745d8cf61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:18:32:73:88:18:26:31:dc:9c:a2:1b:50:9c:
40:bc:ed:7a:10:e6:f3:92:d3:c0:f9:c6:b1:5e:cb:
da:5a:bd:64:32:37:1c:c4:4e:b5:01:31:7b:c7:fd:
8d:a5:f9:a5:d6:2b:a6:6d:fe:cb:f6:4e:72:c4:e3:
db:bc:c7:5f:bc:af:99:f6:1e:9b:a9:07:fb:2d:17:
cb:fe:89:d2:33:32:ee:f4:14:4f:04:d2:d2:63:b8:
aa:71:c3:ed:7e:44:a8:3c:b8:da:01:bf:50:9b:8b:
7a:e5:f1:69:80:25:31:96:e8:9f:2c:fd:f7:66:02:
79:a1:4c:f3:3b:07:ec:99:e6:26:60:e9:88:41:77:
e1:c4:c1:7f:39:08:85:d2:92:fb:ab:43:b2:fc:1b:
50:d4:92:e1:89:ff:2b:af:86:4b:94:2f:ca:49:4d:
3f:15:d3:f4:7b:c1:7a:46:23:57:48:29:26:6e:c7:
db:03:f4:87:8f:cd:f6:5c:a1:1b:f6:df:27:47:56:
93:97:39:1c:6f:68:38:04:80:da:e8:28:0f:28:55:
54:2e:2f:23:82:6e:bf:61:1b:fa:cd:b7:23:91:37:
60:ea:fa:b4:8e:e1:af:c4:1a:1b:21:c4:f5:de:00:
83:b8:18:42:ad:dd:c6:81:a8:a4:a3:54:66:3d:24:
6e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C4:8D:6B:95:28:66:D1:FB:74:43:20:97:61:BE:07:45:D8:CF:61
X509v3 Authority Key Identifier:
keyid:30:B7:A9:53:28:0B:6F:99:8F:C1:1C:47:CB:E9:1B:82:63:36:4E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MLepUygLb5mPwRxHy-kbgmM2TrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dfb3ff-be3c-4185-9e08-9c7169b7a2e4/1/MLepUygLb5mPwRxHy-kbgmM2TrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:90:35:8c:2d:19:98:89:64:db:1f:02:1d:17:dd:27:f0:c3:
48:72:a4:c2:d9:bc:d7:19:34:78:25:81:88:04:f0:51:58:74:
3c:1d:0e:1b:3c:ee:e7:63:74:fb:31:12:a8:bf:e4:90:f9:1b:
29:f1:99:56:b0:3b:b4:5e:e3:43:14:53:94:0b:77:65:cd:d1:
41:0b:b9:f5:59:a1:9e:42:a4:8d:b3:75:66:0d:cc:77:09:83:
1e:53:9a:ed:88:5b:cb:eb:00:61:2f:67:c6:31:73:1d:7f:cf:
bb:6d:e7:02:97:b8:77:55:a3:19:08:da:ae:5d:3a:9c:16:35:
51:8e:6c:63:13:10:bb:a3:4a:7e:3a:80:85:dd:be:45:c3:f1:
fa:7f:b5:8a:1d:cc:8c:4a:47:4a:df:31:ce:99:89:dd:1c:f4:
04:ce:c1:bb:a9:8e:bf:8b:32:62:ed:17:ae:3a:f1:db:e8:8e:
7e:83:08:6c:a2:00:b6:c3:35:8b:70:75:87:65:82:82:3d:4f:
30:57:e2:10:0a:a6:ee:31:5a:4d:1e:37:43:43:1c:f1:2c:31:
2a:47:31:f0:7e:3b:46:b2:9d:e5:7e:5f:65:29:fd:eb:1a:91:
61:4d:ed:3d:ee:8a:18:70:d0:31:c4:60:37:6b:21:96:de:a7:
e7:44:1b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:49 2025 by rpki-client