Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft
File: MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft (raw, json)
Hash identifier: OuN5moG9S7fFZ0lhXHI9zZAcoUgk9239liMjNHWibuc=
Subject key identifier: 7C:BC:28:ED:86:5B:1B:B9:BC:15:67:D5:ED:59:7E:4E:97:6A:49:B2
Authority key identifier: 32:50:52:B7:A6:78:FA:A0:97:DC:BE:65:47:17:0C:91:52:B4:6C:F1
Certificate issuer: /CN=325052b7a678faa097dcbe6547170c9152b46cf1
Certificate serial: 019A722617E9C5D4A8790598737AAA494BCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft
Manifest number: 16AE
Signing time: Tue 11 Nov 2025 09:01:30 +0000
Manifest this update: Tue 11 Nov 2025 09:01:30 +0000
Manifest next update: Wed 12 Nov 2025 09:01:30 +0000
Files and hashes: 1: MlBSt6Z4-qCX3L5lRxcMkVK0bPE.crl (hash: MehBqDLe+rnaUKmmNafnVZY9hF17z569hrmbQjA5GnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:17:e9:c5:d4:a8:79:05:98:73:7a:aa:49:4b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325052b7a678faa097dcbe6547170c9152b46cf1
Validity
Not Before: Nov 11 09:01:30 2025 GMT
Not After : Nov 12 09:01:30 2025 GMT
Subject: CN=7cbc28ed865b1bb9bc1567d5ed597e4e976a49b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b9:86:37:cd:22:3e:28:19:57:04:c0:1c:d3:
37:66:ec:52:be:0c:06:d1:ae:be:b1:f5:14:e5:9c:
ed:c9:7a:3f:27:ba:b9:60:08:62:06:f4:66:3c:a8:
63:3b:19:72:ee:04:ba:99:e3:cd:64:d9:50:71:d6:
af:06:80:e0:32:f3:14:be:73:31:4b:9b:70:9a:b6:
2a:9d:00:a6:11:e3:19:ce:e1:d8:f6:fe:ef:8e:9a:
0b:c5:64:7f:03:4d:cb:73:d2:0d:b8:d5:72:06:d2:
7b:1f:30:14:b8:68:84:ff:4c:fd:4a:39:3a:77:2e:
4c:14:a5:bd:e4:71:16:c7:5b:8e:97:f4:e8:20:29:
1f:ac:bf:b8:56:1f:9a:50:c0:c5:5a:91:b7:95:ef:
93:e8:3a:db:7d:8b:fb:2c:63:7b:73:d1:01:e2:9c:
a4:75:53:dc:83:ea:68:46:88:3a:7c:b2:f9:e1:7e:
cc:48:f6:99:f6:18:5e:05:ce:57:fb:95:23:b6:be:
ea:6d:15:82:b7:59:64:f6:fb:35:fe:cf:39:08:6c:
29:9c:ea:41:b4:4e:62:e7:1b:94:a5:3c:da:f9:3f:
11:12:9e:e9:3e:ed:45:b3:31:e6:24:80:54:34:61:
d9:c4:b6:0a:a9:96:e6:33:77:6a:58:9f:df:e2:f3:
0a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BC:28:ED:86:5B:1B:B9:BC:15:67:D5:ED:59:7E:4E:97:6A:49:B2
X509v3 Authority Key Identifier:
keyid:32:50:52:B7:A6:78:FA:A0:97:DC:BE:65:47:17:0C:91:52:B4:6C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:bd:58:b3:52:9f:c9:b6:d6:47:ed:fa:7b:ac:8a:7d:e7:1f:
b5:c8:60:23:88:70:5a:e5:1f:98:78:ce:ba:70:02:18:00:b0:
27:65:86:c3:16:22:98:77:55:85:ef:6e:64:c4:ed:43:50:a4:
50:0e:c1:2b:d2:f3:bd:9b:9f:06:04:be:68:2f:bd:b8:d6:e7:
03:53:86:de:cd:de:c1:3a:ef:16:05:20:b1:cb:3e:ff:88:61:
c3:f5:f7:0e:a5:5b:43:55:a7:4d:59:4f:30:f0:fb:4c:f3:cb:
7a:48:c5:3e:83:b7:0b:5b:c4:78:2e:46:3f:0f:98:39:91:50:
bd:8e:3b:eb:4d:c0:e2:7f:d2:fa:da:3f:e5:4c:c1:b3:71:f8:
67:32:a7:a5:86:dc:e3:09:b3:55:48:82:f8:47:36:3c:c1:96:
75:66:9b:52:d5:7f:cc:85:bc:b1:d5:f7:ba:15:f0:58:66:bf:
fd:31:03:bc:48:4c:17:6b:78:a3:22:ca:0d:2c:da:a4:c5:25:
bc:81:3e:88:4b:a2:4f:57:18:27:df:b8:01:61:b2:46:9b:13:
8c:5e:86:0e:76:28:74:54:d2:f8:2d:cc:ab:77:d9:30:2a:5c:
0d:74:c5:4b:bd:f1:5c:f5:35:df:04:ab:f3:4b:72:8e:6a:f8:
92:f1:9e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:05 2025 by rpki-client