Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
File: MlRXaPR8NXhe6616NDikscT43DA.mft (raw, json)
Hash identifier: Rx+XQ6uW7x9QTd5EeznUgLYU3NUBbcA2SF2G4fql3sw=
Subject key identifier: 32:5E:A3:2A:43:E9:82:61:0A:04:15:F4:B0:AC:D4:61:89:55:6D:46
Authority key identifier: 32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30
Certificate issuer: /CN=32545768f47c35785eebad7a3438a4b1c4f8dc30
Certificate serial: 019881689BD6C1B7C7EABC11EC7AE08B7445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
Manifest number: 0BE3
Signing time: Wed 06 Aug 2025 22:02:53 +0000
Manifest this update: Wed 06 Aug 2025 22:02:53 +0000
Manifest next update: Thu 07 Aug 2025 22:02:53 +0000
Files and hashes: 1: MlRXaPR8NXhe6616NDikscT43DA.crl (hash: pa52AhK52zTdB3dfLfagDEbpislGNjLCv7Z68u/EFCI=)
2: UVHym_hND0UKS0TZahA67-xdRaw.roa (hash: pLZ+GW3vB+RehhXMdEErWzND6dd84/xMpKL3yEHLLYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:9b:d6:c1:b7:c7:ea:bc:11:ec:7a:e0:8b:74:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32545768f47c35785eebad7a3438a4b1c4f8dc30
Validity
Not Before: Aug 6 22:02:53 2025 GMT
Not After : Aug 7 22:02:53 2025 GMT
Subject: CN=325ea32a43e982610a0415f4b0acd46189556d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b3:fd:2c:3d:6b:d7:b5:6b:6a:7a:e3:81:f9:
22:6c:6f:f5:15:ee:8e:51:2a:5f:9a:98:0c:89:b5:
ab:2d:df:e1:48:8d:df:d7:8d:fa:e6:5e:ff:28:68:
03:31:02:b6:11:74:28:cb:ce:8c:0a:83:a0:ca:30:
13:94:1b:c7:75:d2:20:5e:7b:8c:cc:06:74:47:70:
03:d5:c3:77:de:c4:85:88:0d:2e:ae:95:47:fc:11:
04:a3:5f:ba:55:62:da:f2:e2:c3:9f:12:71:3f:f5:
24:08:a0:0b:0c:02:b6:83:3a:63:02:36:f9:46:4b:
dc:b1:e1:44:18:cf:b6:88:85:6d:52:a0:9d:fa:af:
41:d6:38:10:95:ed:63:80:27:1c:98:c6:45:9a:d2:
3a:06:64:c1:c1:8f:5b:7c:d0:4f:27:0c:fd:8d:d4:
30:05:0a:d9:af:ee:ba:cc:37:06:f6:14:4a:f6:6c:
27:67:93:f0:70:14:6d:1f:c5:4e:c1:c0:86:ce:b1:
ad:29:35:db:f3:13:dd:cf:18:2d:ea:ef:bc:e5:db:
5d:1a:44:3e:7c:dd:eb:3e:d9:2f:07:7f:b1:16:84:
ae:31:1a:48:e1:53:c2:69:7b:c9:bd:63:37:56:57:
3c:0e:9b:81:25:96:8b:31:35:1b:d3:2a:f4:56:ad:
5e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5E:A3:2A:43:E9:82:61:0A:04:15:F4:B0:AC:D4:61:89:55:6D:46
X509v3 Authority Key Identifier:
keyid:32:54:57:68:F4:7C:35:78:5E:EB:AD:7A:34:38:A4:B1:C4:F8:DC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlRXaPR8NXhe6616NDikscT43DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47bc76-974e-4018-94fd-7f46c8c68e7e/1/MlRXaPR8NXhe6616NDikscT43DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:9b:9b:e0:0a:58:b2:53:40:be:41:6e:76:04:49:87:52:fb:
9a:86:97:be:7d:1a:80:1a:0a:58:4d:0f:2c:cd:2d:09:29:cb:
d4:d4:80:8b:16:9f:f2:5f:84:40:f3:36:79:6b:5c:32:d3:12:
f1:63:37:46:3f:fc:df:c2:e2:98:44:4b:ad:50:7a:cd:c1:fd:
14:f5:13:1f:11:8a:78:fe:bc:a3:e4:ee:6c:38:cd:05:8d:0e:
5a:18:40:18:7a:72:f0:76:a3:8d:95:fc:ae:65:dc:13:4e:97:
2f:30:cb:a2:0b:51:b4:64:15:41:ad:ce:b4:90:1d:ec:d2:3d:
ee:c6:21:58:d5:8a:0c:e5:79:12:92:29:52:39:f0:d5:67:77:
7d:f8:79:bd:a4:10:8a:14:85:20:d6:03:f9:fd:23:3a:60:2b:
74:fa:d0:7e:77:4e:d4:82:49:7a:f6:e3:60:7d:47:eb:23:d0:
4a:7a:f7:2b:0e:4f:0f:24:9b:b7:e9:f4:00:0a:cd:e5:b2:07:
78:82:ad:bc:26:e4:21:8e:45:c2:4f:f6:e5:df:96:5b:2a:4f:
c6:76:93:8e:c9:61:ac:c4:54:a2:2d:3a:12:4d:50:e2:84:a1:
10:95:25:0c:b6:46:b3:a7:d2:9f:af:b8:9a:fc:9d:14:33:c2:
66:03:86:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:15:29 2025 by rpki-client