Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
File: MlRXaPR8NXhe6616NDikscT43DA.mft (raw, json)
Hash identifier: 8HVaw/9KFlIBEDj3vVHq3IZ5NqbGaogYpG7XVAX+020=
Subject key identifier: 6E:24:18:1D:F9:A1:5C:83:71:66:6E:38:2C:2B:C4:54:82:4C:E0:FE
Authority key identifier: 32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30
Certificate issuer: /CN=32545768f47c35785eebad7a3438a4b1c4f8dc30
Certificate serial: 01976961463C992487D144AC785D9CD935CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
Manifest number: 0B52
Signing time: Fri 13 Jun 2025 13:01:11 +0000
Manifest this update: Fri 13 Jun 2025 13:01:11 +0000
Manifest next update: Sat 14 Jun 2025 13:01:11 +0000
Files and hashes: 1: MlRXaPR8NXhe6616NDikscT43DA.crl (hash: SPcpBrXhv/bp78IARqxREWIgUUXju4l6NZ4jiiQzP+c=)
2: UVHym_hND0UKS0TZahA67-xdRaw.roa (hash: pLZ+GW3vB+RehhXMdEErWzND6dd84/xMpKL3yEHLLYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:46:3c:99:24:87:d1:44:ac:78:5d:9c:d9:35:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32545768f47c35785eebad7a3438a4b1c4f8dc30
Validity
Not Before: Jun 13 13:01:11 2025 GMT
Not After : Jun 14 13:01:11 2025 GMT
Subject: CN=6e24181df9a15c8371666e382c2bc454824ce0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ed:fb:af:40:d4:07:17:ab:b8:e5:ca:ad:9b:
a8:f0:da:4b:23:d2:25:cd:f9:f3:08:31:e8:df:90:
f1:f8:19:c1:fc:99:1f:84:9f:eb:cd:37:67:8b:c8:
6d:6e:78:8c:7e:1b:9a:ba:b3:d5:65:dd:2b:53:7f:
ef:65:f5:a2:a0:ff:8f:c0:36:e7:08:13:7f:32:9d:
a8:a3:71:7d:ea:83:e6:35:3a:47:c1:e0:48:ff:73:
67:b0:f2:97:dd:8d:68:8b:79:8d:5a:8d:14:9d:ba:
bf:d5:b4:9f:25:7c:a9:b5:af:83:74:ce:6c:60:fa:
e9:03:0f:8c:db:4c:b1:ae:df:19:3f:a9:b7:fd:e9:
c5:a1:20:3d:15:dc:14:3e:5b:8c:ff:a9:95:c6:63:
55:3f:b4:71:21:ac:1a:f6:e7:08:c1:61:26:ca:24:
dd:7e:58:fb:27:ba:c6:12:a7:31:57:96:5d:81:6f:
e2:a3:97:40:e3:f7:21:25:4f:37:75:89:44:3e:d0:
d3:95:ca:87:1b:41:4c:63:5c:91:27:17:ef:e3:92:
fd:04:7d:77:c4:34:08:df:45:20:8f:bb:d0:f4:c7:
d6:0a:59:82:07:40:be:a3:f3:9b:bb:2f:1e:77:c4:
88:86:88:33:cf:6d:a8:db:f7:c2:96:67:fe:38:5f:
e8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:24:18:1D:F9:A1:5C:83:71:66:6E:38:2C:2B:C4:54:82:4C:E0:FE
X509v3 Authority Key Identifier:
keyid:32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:95:48:8c:ca:6b:4b:00:86:55:eb:29:49:9d:c9:d8:aa:6e:
a1:12:2c:2e:dc:b5:71:0f:da:49:c4:7d:45:ed:01:5f:ee:82:
90:9e:08:4d:cb:fd:03:df:40:1a:0c:cd:3c:06:53:bd:bd:2a:
51:79:d7:02:1a:cd:6c:c8:15:99:e9:8f:cb:3b:6c:f6:a6:d7:
c9:42:66:33:19:ce:a6:64:27:1c:6f:43:c3:af:bc:07:8f:bc:
5f:fd:3d:5a:a4:60:c4:d4:0a:6e:08:75:f3:f7:bf:b0:20:ce:
9e:4d:a1:17:c9:d8:56:03:62:fc:02:8d:80:2f:32:c8:32:81:
03:fb:f3:95:51:d2:d2:51:61:96:55:cc:0d:78:b3:69:8a:d1:
8b:3b:e1:08:5b:0f:30:c0:9e:13:26:e0:8e:a3:ad:d5:5e:dd:
7a:38:1f:61:79:e8:06:cc:22:6f:d5:aa:2e:b6:50:78:39:38:
79:3c:b2:02:4a:18:ac:8f:18:64:94:ad:d3:63:69:75:c8:16:
ac:ff:90:6e:fa:f8:5a:5e:af:c7:37:e8:f6:ff:63:45:6e:91:
8a:ec:3b:23:56:02:9c:81:d4:48:c8:2d:45:8f:04:d4:1e:d8:
73:7a:4f:d6:74:f5:2c:c7:69:87:9a:af:40:ec:8d:09:a7:20:
c4:b5:ad:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:11:23 2025 by rpki-client