Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.mft
File: MklHwK7O_of525bltFvrEK65h6Y.mft (raw, json)
Hash identifier: LIKVdqBUHxmkE87UuylkEM/WTW/YaKQlFYd+9Qd6/b4=
Subject key identifier: 38:7A:EC:03:7A:54:61:4B:18:3E:F4:37:F8:32:7B:79:64:A5:34:A9
Authority key identifier: 32:49:47:C0:AE:CE:FE:87:F9:DB:96:E5:B4:5B:EB:10:AE:B9:87:A6
Certificate issuer: /CN=324947c0aecefe87f9db96e5b45beb10aeb987a6
Certificate serial: 019A50752B64A0F9C9C681594AC4ED5DCFAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MklHwK7O_of525bltFvrEK65h6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.mft
Manifest number: 0C22
Signing time: Tue 04 Nov 2025 20:00:47 +0000
Manifest this update: Tue 04 Nov 2025 20:00:47 +0000
Manifest next update: Wed 05 Nov 2025 20:00:47 +0000
Files and hashes: 1: MklHwK7O_of525bltFvrEK65h6Y.crl (hash: r/KbaHpK828MGtO4HkXeKh4tprUMucvI+lE5Q2Um2Qs=)
2: TnUa9Ik5MIEZFyAPb51t3lEzTlw.roa (hash: VAA3uHujk9bmdBTaro78iFRxhf25M26lepAeKhwVT4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/MklHwK7O_of525bltFvrEK65h6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:2b:64:a0:f9:c9:c6:81:59:4a:c4:ed:5d:cf:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324947c0aecefe87f9db96e5b45beb10aeb987a6
Validity
Not Before: Nov 4 20:00:47 2025 GMT
Not After : Nov 5 20:00:47 2025 GMT
Subject: CN=387aec037a54614b183ef437f8327b7964a534a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:af:4c:e7:eb:04:d8:cb:49:8b:11:d3:c4:8a:
9e:b1:85:b0:46:26:d8:01:f8:cd:66:4f:4f:f4:e1:
79:4a:7d:d3:b7:da:47:59:e3:82:5f:47:d0:5a:8c:
09:03:b3:30:96:6c:d9:d9:a3:dc:a8:49:d4:26:7b:
18:f4:2f:71:53:df:e4:1f:54:c0:4f:37:52:86:89:
68:34:80:86:48:36:dd:3e:30:8d:66:95:ad:7e:c7:
7a:bb:ef:21:31:a7:a5:11:68:e3:90:07:72:de:77:
03:50:d0:09:78:8e:4b:49:92:e6:b0:7e:51:72:8b:
8e:1c:d2:18:97:7f:79:dd:60:a6:a5:a1:08:ff:0e:
47:92:c1:ea:be:60:a7:4c:64:5d:28:8d:d7:44:42:
de:05:86:a2:59:50:a5:f3:41:41:de:6f:bc:d3:f2:
40:ae:51:70:87:b6:c4:2e:d7:07:db:e6:bb:f4:f6:
71:b6:ab:8b:fe:ef:8f:da:48:e0:00:09:03:9f:4c:
0f:db:e6:12:38:26:b7:a8:39:ac:e0:67:a8:da:bc:
16:94:71:81:64:67:d0:0d:c1:2d:c4:c1:45:5a:89:
78:ea:41:ce:ed:fa:dd:7f:92:b0:bf:75:7c:08:88:
6b:f6:ba:2e:7f:59:a2:16:b1:12:ec:25:d8:ee:8b:
16:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7A:EC:03:7A:54:61:4B:18:3E:F4:37:F8:32:7B:79:64:A5:34:A9
X509v3 Authority Key Identifier:
keyid:32:49:47:C0:AE:CE:FE:87:F9:DB:96:E5:B4:5B:EB:10:AE:B9:87:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MklHwK7O_of525bltFvrEK65h6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a8d38b-3176-4cc5-bb4f-c362d2a9e121/1/MklHwK7O_of525bltFvrEK65h6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:21:a2:50:54:ec:0d:de:4b:fd:12:17:82:fe:3c:26:b7:95:
35:58:a1:16:72:04:60:30:05:af:7a:cb:87:78:b9:85:4f:7a:
c5:6e:ab:3a:74:92:23:95:19:75:e1:ad:b4:da:85:2c:c9:89:
28:5b:b7:42:5f:5e:98:2a:5c:a0:df:70:fe:ab:2e:11:44:a5:
42:7c:8c:a0:35:f8:5b:66:bc:e4:70:3c:98:5e:f4:fb:ba:96:
06:12:21:c1:4f:4c:4d:de:5f:6f:af:45:f2:af:c6:b4:e2:72:
d1:c1:92:75:bc:2e:3e:a4:28:f3:a4:2e:54:77:83:ba:67:61:
fa:7e:2c:18:da:51:44:f0:07:77:58:89:ce:b8:71:27:49:ac:
f0:b5:3c:4d:8f:b7:09:f4:0a:ee:ea:04:58:64:ae:b2:ef:91:
ac:65:9d:67:43:2d:cb:02:23:73:ed:e6:92:38:c3:06:f2:23:
42:c5:30:6d:3d:a6:79:c5:6d:61:d6:37:c4:49:c5:cf:c4:05:
81:44:6d:ce:79:e5:cb:51:c2:d0:9e:97:07:b4:4c:74:58:52:
8e:89:22:5a:87:ef:01:3f:a2:31:62:e5:aa:b3:7b:9c:76:44:
7f:19:90:65:81:03:61:ca:87:10:1b:28:8a:4c:26:a8:c5:30:
bb:77:0e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:43:16 2025 by rpki-client