Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
File: MlRXaPR8NXhe6616NDikscT43DA.mft (raw, json)
Hash identifier: 3bZBeocoooswH4bfYC80Unp8eNDV1mfyCZWIOYVeWv4=
Subject key identifier: 93:1F:46:56:E1:AC:D2:A5:8E:8E:FD:68:E2:4E:D3:80:E4:68:2E:AE
Authority key identifier: 32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30
Certificate issuer: /CN=32545768f47c35785eebad7a3438a4b1c4f8dc30
Certificate serial: 019A4EF592DDD630CDEB73FF8A19961B65D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
Manifest number: 0CD2
Signing time: Tue 04 Nov 2025 13:01:47 +0000
Manifest this update: Tue 04 Nov 2025 13:01:47 +0000
Manifest next update: Wed 05 Nov 2025 13:01:47 +0000
Files and hashes: 1: MlRXaPR8NXhe6616NDikscT43DA.crl (hash: lyC3dg/9yKZSfwu5MawD7U71v2QCtn2efSqThaQlLuI=)
2: UVHym_hND0UKS0TZahA67-xdRaw.roa (hash: pLZ+GW3vB+RehhXMdEErWzND6dd84/xMpKL3yEHLLYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:92:dd:d6:30:cd:eb:73:ff:8a:19:96:1b:65:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32545768f47c35785eebad7a3438a4b1c4f8dc30
Validity
Not Before: Nov 4 13:01:47 2025 GMT
Not After : Nov 5 13:01:47 2025 GMT
Subject: CN=931f4656e1acd2a58e8efd68e24ed380e4682eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4a:85:41:f0:b3:eb:65:81:22:29:53:dd:74:
ea:0d:b0:7f:6c:b6:c5:2b:6e:80:54:b5:78:46:2d:
e0:b3:ab:07:bd:7b:29:6d:3a:d8:11:0d:07:9e:c2:
21:30:fd:0b:85:5f:a2:b9:fb:88:de:be:10:cb:bf:
38:07:b5:c6:ad:00:1f:ca:69:03:eb:d9:ec:97:2c:
9e:6a:ee:fa:01:75:9a:c0:4b:2e:1f:ac:69:6b:22:
b0:90:a9:7d:e8:3e:97:c0:d0:14:b1:a8:2a:6e:ae:
e3:ea:20:f3:dd:10:61:c6:e1:86:7b:b3:39:7b:bf:
55:76:4b:c7:c5:98:b4:04:f0:12:28:6d:05:70:cb:
c7:fa:c6:a0:06:dd:2f:a9:7b:1b:30:d2:f1:93:45:
db:32:0c:97:a5:b0:4c:e5:af:75:0f:ac:f8:e5:b8:
af:17:34:b4:34:d7:5b:29:11:ee:3e:33:a1:c4:c5:
61:e8:d4:6f:c9:92:45:47:2f:8b:47:ed:b1:8a:6e:
42:d6:c3:42:ec:7f:e0:9b:4b:42:57:db:fa:87:12:
a2:c5:59:55:31:f1:72:1d:e3:a0:7b:5a:88:25:d8:
4e:68:7f:0b:1f:18:64:52:f2:2f:6e:84:5b:c7:85:
18:64:66:3a:5a:93:68:35:80:88:8b:be:37:d0:aa:
1e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1F:46:56:E1:AC:D2:A5:8E:8E:FD:68:E2:4E:D3:80:E4:68:2E:AE
X509v3 Authority Key Identifier:
keyid:32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:52:5b:e2:2c:b4:1d:06:2d:b0:35:ae:e1:fd:89:c1:b4:4b:
e0:a8:dc:a9:8d:39:7b:d6:f0:15:c2:80:62:20:6d:4d:66:cd:
12:69:3f:19:26:26:1e:8c:02:be:d8:0a:7c:bf:69:2c:ce:9e:
24:7c:11:4a:13:64:2e:a9:6c:27:0c:6d:75:57:d1:37:b8:de:
9c:bd:b4:dc:89:d1:03:2b:68:31:0c:ea:e2:2f:02:1d:75:ef:
d2:c9:dc:32:7f:e2:c1:d2:45:57:d2:9b:56:d9:7c:a6:a3:d5:
19:b2:48:a8:29:82:86:46:6e:89:cb:03:6a:16:34:56:e4:dc:
86:5e:cf:0d:8f:f6:72:ea:d6:94:5e:1d:28:36:d4:82:a2:06:
f7:19:84:5a:09:e3:d8:31:12:55:b4:f7:bb:bb:68:a9:55:5e:
97:6e:ab:8a:32:06:7c:08:4c:f9:62:51:df:fb:9c:3b:1c:95:
84:6c:93:ad:15:89:96:4e:d4:cb:7d:e8:33:fa:79:f9:3b:a0:
89:02:3f:6e:63:03:bb:ff:6f:5d:f9:9c:e5:94:12:a1:48:86:
19:00:66:8b:2d:53:24:aa:c7:99:97:23:20:3a:d9:85:56:85:
47:79:bc:fd:64:3c:be:70:73:77:6f:03:3a:4a:ad:b1:99:e0:
02:6b:29:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:20 2025 by rpki-client