Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
File: mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft (raw, json)
Hash identifier: ckd1A8nYUazWWNjxLla83mMmoq6mOU0zQttpwGage7U=
Subject key identifier: 6A:72:C6:19:02:58:A8:1E:91:75:F4:1C:4E:F4:57:B5:D6:89:1B:18
Authority key identifier: 98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
Certificate issuer: /CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Certificate serial: 01987D89BD6828D5A54292CD66E8E870DB8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
Manifest number: 0FFD
Signing time: Wed 06 Aug 2025 04:00:35 +0000
Manifest this update: Wed 06 Aug 2025 04:00:35 +0000
Manifest next update: Thu 07 Aug 2025 04:00:35 +0000
Files and hashes: 1: mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl (hash: IIUM8rt9RMD+8pL4Dlkiu2dvqX0X78g+f1Lm6godyJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:89:bd:68:28:d5:a5:42:92:cd:66:e8:e8:70:db:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Validity
Not Before: Aug 6 04:00:35 2025 GMT
Not After : Aug 7 04:00:35 2025 GMT
Subject: CN=6a72c6190258a81e9175f41c4ef457b5d6891b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f6:64:d6:0a:47:d8:09:53:e4:44:d9:11:dd:
07:89:15:74:8a:54:81:d1:c1:d6:0c:64:fa:bc:20:
ba:a2:05:36:62:36:8c:1e:ba:11:4c:b6:cc:1e:03:
97:45:c4:4a:61:64:1a:d3:fa:d1:0c:08:cc:74:c9:
16:27:a3:48:8a:c6:14:97:a3:7a:c9:28:14:9d:55:
e0:8c:f7:75:a8:8d:96:ec:ab:22:ba:e6:27:87:c8:
ac:32:dc:ba:32:10:51:72:58:e0:87:a1:9e:4c:b9:
9d:5d:45:33:13:6a:72:23:41:90:3f:ee:07:f1:88:
90:a3:f3:2b:a7:df:6a:19:dd:90:34:ff:df:ea:1e:
d0:56:4d:85:89:33:6e:8e:03:44:0b:64:e8:91:06:
33:d6:6e:03:83:cf:23:cc:c0:74:9f:ea:f2:34:c9:
6f:12:5a:41:fc:1a:38:fd:90:46:4a:df:3c:e5:62:
75:1c:3e:02:67:92:cb:56:cf:64:ab:51:42:89:16:
c7:fa:dd:4c:0f:4d:15:ed:d2:52:ee:49:bf:ab:13:
ba:6b:e5:e1:39:94:00:c7:d0:07:7c:f2:c5:35:a8:
9f:b8:00:03:5b:4a:f5:82:d4:48:52:c1:93:94:39:
19:a5:74:52:74:81:81:60:91:ba:f4:08:54:51:6c:
60:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:72:C6:19:02:58:A8:1E:91:75:F4:1C:4E:F4:57:B5:D6:89:1B:18
X509v3 Authority Key Identifier:
keyid:98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:04:00:e5:00:6f:a9:40:45:c2:46:0a:2a:2a:e8:fb:99:49:
55:40:53:5c:62:5d:81:4c:f7:cf:93:8c:98:05:45:c0:89:7a:
44:a6:b6:0e:fc:39:27:53:95:d1:31:ba:81:d8:0a:d7:f0:d6:
68:00:de:17:f1:91:2b:44:71:64:fe:12:07:0c:d7:91:26:a0:
ed:8b:fe:d2:61:d2:94:e3:98:e9:cb:63:60:43:ba:bf:80:a7:
8d:75:8f:29:b5:c2:ee:a8:50:c1:d1:1a:31:5f:cf:c0:9d:e5:
75:03:95:5c:e7:1e:25:fc:a1:d9:0c:9e:54:8f:bc:f7:4f:2a:
e9:ff:d1:46:7d:09:4f:87:a4:1a:48:16:cb:2e:13:16:70:a8:
0e:93:28:e5:c5:09:27:8f:f2:9a:19:21:5e:ed:21:6c:b8:ab:
69:a7:fe:cd:bf:88:2d:42:a3:a2:10:cf:a4:a4:33:d1:b3:bd:
f0:fb:14:70:25:2c:67:57:c1:00:87:c8:10:bc:9b:3a:19:6c:
ec:f5:76:e8:0e:29:d8:56:83:2a:fb:7c:0b:ee:1d:15:63:01:
dd:cf:1d:b0:9f:a1:1e:4b:8c:67:3e:9b:4f:fa:68:c8:ef:64:
3f:04:d2:42:6d:ab:9f:ba:93:67:ee:b5:db:ce:a0:27:ea:69:
11:ea:25:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9ib1oKNWlQpLNZujocNuKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YjVjYTcxOGYzYjlhOTM5YTUxMzY0MWJkODVjYzk0ZmE0
MDE5NTQwHhcNMjUwODA2MDQwMDM1WhcNMjUwODA3MDQwMDM1WjAzMTEwLwYDVQQD
Eyg2YTcyYzYxOTAyNThhODFlOTE3NWY0MWM0ZWY0NTdiNWQ2ODkxYjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPZk1gpH2AlT5ETZEd0HiRV0ilSB
0cHWDGT6vCC6ogU2YjaMHroRTLbMHgOXRcRKYWQa0/rRDAjMdMkWJ6NIisYUl6N6
ySgUnVXgjPd1qI2W7KsiuuYnh8isMty6MhBRcljgh6GeTLmdXUUzE2pyI0GQP+4H
8YiQo/Mrp99qGd2QNP/f6h7QVk2FiTNujgNEC2TokQYz1m4Dg88jzMB0n+ryNMlv
ElpB/Bo4/ZBGSt885WJ1HD4CZ5LLVs9kq1FCiRbH+t1MD00V7dJS7km/qxO6a+Xh
OZQAx9AHfPLFNaifuAADW0r1gtRIUsGTlDkZpXRSdIGBYJG69AhUUWxgNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpyxhkCWKgekXX0HE70V7XWiRsYMB8GA1UdIwQY
MBaAFJi1ynGPO5qTmlE2Qb2FzJT6QBlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUxYS2NZODdtcE9hVVRaQnZZWE1sUHBBR1ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS80ZDkzYjktMmM3OS00ZTUyLWJlNDEt
YzQyYWIwMTk4MzczLzEvbUxYS2NZODdtcE9hVVRaQnZZWE1sUHBBR1ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS80ZDkzYjktMmM3OS00ZTUyLWJlNDEtYzQyYWIwMTk4Mzcz
LzEvbUxYS2NZODdtcE9hVVRaQnZZWE1sUHBBR1ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQQQA5QBv
qUBFwkYKKiro+5lJVUBTXGJdgUz3z5OMmAVFwIl6RKa2Dvw5J1OV0TG6gdgK1/DW
aADeF/GRK0RxZP4SBwzXkSag7Yv+0mHSlOOY6ctjYEO6v4CnjXWPKbXC7qhQwdEa
MV/PwJ3ldQOVXOceJfyh2QyeVI+8908q6f/RRn0JT4ekGkgWyy4TFnCoDpMo5cUJ
J4/ymhkhXu0hbLiraaf+zb+ILUKjohDPpKQz0bO98PsUcCUsZ1fBAIfIELybOhls
7PV26A4p2FaDKvt8C+4dFWMB3c8dsJ+hHkuMZz6bT/poyO9kPwTSQm2rn7qTZ+61
286gJ+ppEeolgw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:37:14 2025 by rpki-client