Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.mft
File: MklHwK7O_of525bltFvrEK65h6Y.mft (raw, json)
Hash identifier: WruB5FZpBTdYPRkbgZ8BSRNBLNot1zTrPj3yVuj0O8M=
Subject key identifier: C4:AB:08:21:3D:19:40:87:57:48:57:C7:FB:C4:FF:57:27:FB:07:94
Authority key identifier: 32:49:47:C0:AE:CE:FE:87:F9:DB:96:E5:B4:5B:EB:10:AE:B9:87:A6
Certificate issuer: /CN=324947c0aecefe87f9db96e5b45beb10aeb987a6
Certificate serial: 01977488F074AC4AFCF0ABE044BBBA7FA666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MklHwK7O_of525bltFvrEK65h6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.mft
Manifest number: 0AA7
Signing time: Sun 15 Jun 2025 17:00:20 +0000
Manifest this update: Sun 15 Jun 2025 17:00:20 +0000
Manifest next update: Mon 16 Jun 2025 17:00:20 +0000
Files and hashes: 1: MklHwK7O_of525bltFvrEK65h6Y.crl (hash: Z9XZ+1aOE6XBXz9DRwD4FYvhVv8iml2D75tczjuz3c0=)
2: TnUa9Ik5MIEZFyAPb51t3lEzTlw.roa (hash: VAA3uHujk9bmdBTaro78iFRxhf25M26lepAeKhwVT4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/MklHwK7O_of525bltFvrEK65h6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:88:f0:74:ac:4a:fc:f0:ab:e0:44:bb:ba:7f:a6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324947c0aecefe87f9db96e5b45beb10aeb987a6
Validity
Not Before: Jun 15 17:00:20 2025 GMT
Not After : Jun 16 17:00:20 2025 GMT
Subject: CN=c4ab08213d194087574857c7fbc4ff5727fb0794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e3:d4:bf:b2:f5:ea:b7:ec:dc:0e:72:0b:ed:
55:a9:ef:34:9d:3e:c2:bf:76:85:bc:2b:25:0b:36:
bf:52:cd:9f:c2:3b:08:ce:8b:59:f8:d2:05:74:7c:
cf:a5:d1:84:d8:f9:47:f6:71:52:29:b6:47:06:a4:
28:a0:7f:06:ec:24:4e:d4:3b:be:e6:f4:82:67:17:
09:3c:ca:41:12:0a:54:62:78:85:c4:1f:f9:45:f0:
c7:9d:51:5b:da:43:9e:75:e7:0d:8f:08:bf:c2:9e:
6f:a8:74:1b:90:87:d7:1d:36:dd:f6:06:9d:56:f4:
42:ec:42:f2:a9:4d:31:da:bd:10:d1:bd:a4:ca:ae:
e8:dc:9e:88:53:e0:8a:03:b0:2f:13:2a:f8:41:e8:
99:9e:db:93:04:99:fd:3b:d1:26:ee:81:0d:74:e6:
21:09:6f:8b:6d:b2:af:b1:11:0b:27:ec:d5:a4:47:
46:6c:be:30:e7:09:9a:e7:9a:87:10:4f:9d:11:47:
fd:47:0a:5f:f0:0a:3e:9f:a1:0f:d1:c6:08:73:b2:
26:aa:2b:e6:73:44:14:b7:6a:08:75:3b:0d:b1:2f:
5c:5f:01:4e:9e:91:48:d0:9a:a4:c6:e6:f2:d6:1b:
58:43:3c:79:db:e5:37:4e:17:d4:d0:b3:03:b4:c6:
d3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AB:08:21:3D:19:40:87:57:48:57:C7:FB:C4:FF:57:27:FB:07:94
X509v3 Authority Key Identifier:
keyid:32:49:47:C0:AE:CE:FE:87:F9:DB:96:E5:B4:5B:EB:10:AE:B9:87:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MklHwK7O_of525bltFvrEK65h6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:08:f0:6b:d8:30:58:c7:64:b2:f4:fb:0a:f1:d6:2a:df:eb:
b3:92:d6:35:a4:ca:00:e3:bc:1a:ec:6b:3e:d8:b8:55:61:f9:
a2:c5:69:a8:cf:b7:f4:81:ef:2c:51:15:1f:76:da:ec:92:a1:
3d:77:45:35:74:07:08:67:77:57:b2:5b:6f:6c:b8:ea:cd:d1:
35:ac:4f:a9:cb:24:b7:5e:4b:31:43:5f:50:e0:3a:d6:9d:f0:
2e:fe:b8:1e:7e:7c:d9:0f:11:e1:1b:a3:22:41:bf:59:30:ab:
6e:96:40:59:12:33:c6:39:37:a5:f2:74:3c:11:9c:f3:39:60:
0c:e0:80:42:fd:96:2b:1c:23:e1:64:1a:36:d6:b3:c6:2f:b3:
7c:ea:ca:a6:d2:48:85:af:c8:2a:33:87:73:79:96:a8:9c:d8:
8c:37:0c:6d:69:5e:d0:63:c3:bb:de:c6:ab:96:45:41:80:11:
c5:20:f2:7b:29:13:74:f5:60:df:fa:9e:9a:11:ca:5c:08:44:
09:dc:bd:cf:98:28:88:01:02:17:19:5f:a4:07:18:8e:06:de:
36:ef:48:46:ba:79:dc:ef:85:3c:1c:44:4c:12:a4:81:53:89:
ae:2e:72:0a:45:74:bd:b2:68:53:0f:16:8a:6d:25:ce:ba:6b:
70:65:1a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:46:19 2025 by rpki-client