Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft
File: MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft (raw, json)
Hash identifier: b42WTq/4slHnmEkvcIHLVbhhhCiVkLZxOZetO3wel9w=
Subject key identifier: AE:7D:CD:AA:04:66:26:F3:A2:D7:2D:D8:88:96:C6:EC:C0:B0:CC:CB
Authority key identifier: 32:50:52:B7:A6:78:FA:A0:97:DC:BE:65:47:17:0C:91:52:B4:6C:F1
Certificate issuer: /CN=325052b7a678faa097dcbe6547170c9152b46cf1
Certificate serial: 01974CD6A9924FF40127069838731FE37775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft
Manifest number: 150D
Signing time: Sun 08 Jun 2025 00:00:25 +0000
Manifest this update: Sun 08 Jun 2025 00:00:25 +0000
Manifest next update: Mon 09 Jun 2025 00:00:25 +0000
Files and hashes: 1: MlBSt6Z4-qCX3L5lRxcMkVK0bPE.crl (hash: L9er2WVMJf1iz7Ua5x64CfvDX4UrXaA8uAwIiRGTzZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:a9:92:4f:f4:01:27:06:98:38:73:1f:e3:77:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325052b7a678faa097dcbe6547170c9152b46cf1
Validity
Not Before: Jun 8 00:00:25 2025 GMT
Not After : Jun 9 00:00:25 2025 GMT
Subject: CN=ae7dcdaa046626f3a2d72dd88896c6ecc0b0cccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:08:e8:c3:9e:e0:2b:f5:75:61:87:6a:35:8c:
60:bf:eb:44:8c:60:4f:ed:96:a6:bd:d8:89:db:0a:
21:9f:43:19:90:31:78:56:22:ac:10:7a:f2:a9:ae:
b7:5a:ce:ec:ac:c6:8a:85:7f:f2:c4:67:cd:d0:44:
4b:e2:eb:b2:66:a0:6d:e6:b0:fd:8f:9e:f1:2b:40:
e7:f1:b2:15:c3:16:3f:2f:fd:6f:17:cc:83:6d:b5:
96:66:53:5b:d4:2c:4d:b4:52:75:29:a1:ba:ee:4d:
0f:bf:10:e2:4a:75:19:02:54:bd:0b:7a:9f:74:cd:
8d:52:cd:bd:9c:42:ce:b6:99:4f:23:9b:ef:b6:5d:
84:bd:16:ba:ba:b6:f9:89:95:bd:93:70:b8:86:86:
8b:1a:42:68:de:09:f0:62:2b:f3:49:e3:b3:b9:b6:
90:b2:39:fe:02:a9:8f:ea:af:54:67:a0:f8:bd:bb:
a4:04:1e:39:59:06:b4:68:32:c1:c1:c2:67:b4:5d:
52:86:2e:4b:67:fd:c2:e3:41:13:15:69:0c:ac:39:
99:0b:2b:f2:60:af:7a:a8:8a:34:de:dc:5d:ed:24:
c3:76:77:8a:26:bb:d4:fd:ff:88:f2:90:cf:fe:11:
23:d9:66:b6:f7:1a:ca:71:ae:68:8f:7a:d2:cb:61:
4c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7D:CD:AA:04:66:26:F3:A2:D7:2D:D8:88:96:C6:EC:C0:B0:CC:CB
X509v3 Authority Key Identifier:
keyid:32:50:52:B7:A6:78:FA:A0:97:DC:BE:65:47:17:0C:91:52:B4:6C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:2e:b3:9b:95:1d:af:d2:c1:7c:83:e7:f3:b7:ff:51:e1:c4:
c1:58:62:6a:21:00:ef:39:52:99:ed:13:50:c4:bf:a6:a1:ea:
eb:4b:0a:f9:bd:4c:b7:e0:9a:5f:f1:fb:6b:47:10:e1:28:f9:
5c:b1:18:43:9f:2e:10:6a:41:08:33:bd:c2:12:d7:dc:61:3e:
80:38:75:b7:03:9b:a5:f8:76:aa:11:09:c2:e1:b0:2f:ad:c4:
6e:29:b8:88:cc:c7:cf:07:f0:c2:f1:63:88:bb:7d:9c:2f:d9:
2d:72:8d:f5:c0:11:5a:83:ba:d8:ed:c9:b5:47:7d:66:da:51:
49:73:d6:5a:05:f7:49:4f:24:58:3b:ca:c4:0f:53:97:ca:ca:
2c:b5:4b:f3:d9:79:8a:cc:2c:02:77:29:5e:1d:da:61:f4:ed:
54:0c:5b:0c:49:b2:fc:2b:26:2a:a0:be:78:5b:ba:a4:44:26:
16:4f:1e:b4:56:0a:bd:cf:95:d2:1b:bd:82:f8:88:cd:88:62:
cd:e3:08:b6:ba:f6:5c:a9:2b:6f:3e:73:da:1b:5a:c6:27:a7:
d0:ac:a8:08:65:5a:b6:ab:e1:82:cc:7a:e4:fd:79:ab:eb:09:
38:3c:20:fd:81:7a:f1:91:30:70:07:2e:0c:37:b3:09:1a:c7:
5f:c8:26:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:32:12 2025 by rpki-client