Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
File: mL_nROPS3UIxYU5-S61E1FUvCRs.mft (raw, json)
Hash identifier: lZJxUzYiQjhboNhTqPiP38QBOOYA+J2ii80BUjT3S3c=
Subject key identifier: 43:34:9D:08:FB:0E:D6:50:9E:15:08:04:91:86:EC:4F:0D:25:C6:B5
Authority key identifier: 98:BF:E7:44:E3:D2:DD:42:31:61:4E:7E:4B:AD:44:D4:55:2F:09:1B
Certificate issuer: /CN=98bfe744e3d2dd4231614e7e4bad44d4552f091b
Certificate serial: 019A4F2B98A9DD391661B17696612E9A5564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
Manifest number: 05E1
Signing time: Tue 04 Nov 2025 14:00:48 +0000
Manifest this update: Tue 04 Nov 2025 14:00:48 +0000
Manifest next update: Wed 05 Nov 2025 14:00:48 +0000
Files and hashes: 1: mL_nROPS3UIxYU5-S61E1FUvCRs.crl (hash: HzPwOhbnk39dZ+RCWqJSSUiFGqsbO4/VerfAlhI+PQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:98:a9:dd:39:16:61:b1:76:96:61:2e:9a:55:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98bfe744e3d2dd4231614e7e4bad44d4552f091b
Validity
Not Before: Nov 4 14:00:48 2025 GMT
Not After : Nov 5 14:00:48 2025 GMT
Subject: CN=43349d08fb0ed6509e1508049186ec4f0d25c6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:18:f5:1d:94:45:44:5c:35:db:3b:c8:fa:ee:
8a:be:29:d3:e2:1a:2c:70:ec:4b:30:11:75:1d:78:
09:23:46:38:b4:be:54:83:5d:f4:22:81:b5:57:94:
b0:44:69:78:cb:fd:cd:20:ca:80:e1:11:3f:fe:f2:
d8:3d:ec:a7:65:49:cc:1e:4c:ce:48:3e:43:33:f7:
35:d9:27:8b:db:45:0b:73:a2:27:d7:12:17:d0:1d:
ea:b8:51:1c:71:48:5c:21:2c:53:b0:36:69:a7:9f:
c1:07:68:37:3a:bf:d1:bc:30:ac:b3:9a:06:c9:ae:
0c:95:00:37:d9:54:02:ce:52:4c:82:b4:35:64:19:
dc:93:11:e1:32:46:d7:44:27:67:81:d9:80:90:86:
4d:a2:bd:a3:78:34:ee:03:47:21:85:41:6f:75:52:
4b:d2:c2:57:d0:8d:5f:a8:9e:2a:71:0e:6a:b2:2e:
47:b4:8a:89:53:34:de:42:45:64:e8:21:47:b5:b0:
ff:02:1b:6c:dc:fb:c3:dd:03:e7:75:d2:b3:c4:0f:
45:39:0f:60:40:26:02:ba:65:3d:ab:0c:0a:54:2b:
30:83:71:ff:83:bf:f9:86:db:a2:4c:a1:9e:72:1c:
d0:b8:31:b8:1c:f2:11:3e:9e:2a:19:6e:b5:e1:43:
ba:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:34:9D:08:FB:0E:D6:50:9E:15:08:04:91:86:EC:4F:0D:25:C6:B5
X509v3 Authority Key Identifier:
keyid:98:BF:E7:44:E3:D2:DD:42:31:61:4E:7E:4B:AD:44:D4:55:2F:09:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b1:88:49:32:fe:79:87:b0:d9:0b:f8:69:4f:1b:30:a5:aa:
01:76:bf:09:6f:c9:e8:4b:4a:50:29:90:19:a7:2d:52:2d:46:
f0:6b:5b:3a:47:bc:bb:52:57:ca:75:e3:7c:cb:de:65:1c:68:
f1:71:e9:d9:3b:ca:a6:08:f9:76:19:82:9a:a9:d3:8a:48:c9:
b3:11:a3:77:25:46:b1:0d:de:a3:e0:2f:ed:d7:13:a3:46:8c:
48:bf:d2:d5:d5:70:ed:bf:99:6f:b4:21:bd:3a:a2:c1:9c:04:
e1:04:32:f7:40:7f:87:02:8a:b2:6d:7f:51:5f:13:b2:06:4a:
9a:dd:ec:d2:e4:91:3c:27:d9:60:ac:f5:79:da:7a:d2:a1:bd:
20:cf:c2:af:c5:9b:1b:02:e2:05:df:10:33:a0:14:c8:90:87:
ae:e7:15:b5:bd:55:a4:04:22:77:ab:e7:ec:06:45:f3:71:0d:
95:6b:dc:50:57:58:69:e6:8d:f5:ba:58:2e:6b:80:fb:16:52:
71:b1:0a:bd:87:95:13:6e:62:5f:ef:09:c7:2e:fd:e3:34:63:
43:b3:6e:da:2a:8d:d1:f9:0b:b4:3d:33:b2:e6:ec:58:ca:db:
44:82:2a:fc:bb:3e:dc:4f:e5:33:a1:56:ba:ed:ae:45:8a:a1:
63:d3:e9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:40:49 2025 by rpki-client