Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft
File: MlPNw--1IdnV5wqcxeRxsBWGA2o.mft (raw, json)
Hash identifier: 7l1Utn6m+oCrLRm9jXp0dnpadCsKZhSIAOAn6lpQ1Ec=
Subject key identifier: 79:F9:C9:54:1A:6B:34:43:CD:C8:D7:F5:4A:BF:64:B8:68:EC:6C:16
Authority key identifier: 32:53:CD:C3:EF:B5:21:D9:D5:E7:0A:9C:C5:E4:71:B0:15:86:03:6A
Certificate issuer: /CN=3253cdc3efb521d9d5e70a9cc5e471b01586036a
Certificate serial: 0198A04E12B9F8AF0FAD7BE85CE1E0D7C64E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlPNw--1IdnV5wqcxeRxsBWGA2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft
Manifest number: 0952
Signing time: Tue 12 Aug 2025 22:02:07 +0000
Manifest this update: Tue 12 Aug 2025 22:02:07 +0000
Manifest next update: Wed 13 Aug 2025 22:02:07 +0000
Files and hashes: 1: MlPNw--1IdnV5wqcxeRxsBWGA2o.crl (hash: oqXHULPrQ/zXVG4xomjJFEt2H98qGTmlvg6+x9Koyyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlPNw--1IdnV5wqcxeRxsBWGA2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:12:b9:f8:af:0f:ad:7b:e8:5c:e1:e0:d7:c6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3253cdc3efb521d9d5e70a9cc5e471b01586036a
Validity
Not Before: Aug 12 22:02:07 2025 GMT
Not After : Aug 13 22:02:07 2025 GMT
Subject: CN=79f9c9541a6b3443cdc8d7f54abf64b868ec6c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7d:74:3b:ae:c8:c1:22:37:0e:b4:ba:ce:a8:
52:db:be:a2:0c:5b:b8:9a:73:20:09:02:50:b0:bf:
36:57:32:7d:90:cb:a4:e2:9b:f7:89:f8:ad:5b:7a:
c7:5a:21:c1:30:f3:bf:cb:0f:fe:de:52:02:5b:a3:
47:c1:bb:10:82:01:91:c8:81:78:48:9a:00:b5:67:
6d:57:86:01:c4:88:68:77:3b:09:3b:02:a9:41:1b:
85:89:60:48:97:f1:0a:b2:bb:21:51:73:f3:14:06:
a2:34:ac:7a:62:65:fc:e6:64:2e:ea:3d:b8:e1:42:
09:08:3b:10:ed:a7:c0:02:05:7f:7f:c8:26:45:5f:
ce:6d:92:cf:9d:d8:2b:e2:0d:62:ad:cc:93:de:ee:
67:f3:4c:2f:59:64:18:48:f6:0f:65:ac:05:51:20:
ce:d7:bd:d7:48:e2:e2:70:ea:ca:27:ba:48:b0:0b:
f5:6f:d8:17:2a:75:40:e7:68:77:5f:f3:95:87:63:
c7:db:37:23:39:17:9a:f9:d1:0e:85:5d:30:44:d2:
30:df:12:f6:23:cd:cd:ec:a6:25:fe:9c:c7:98:eb:
e0:9d:f9:8e:7d:b7:34:6f:cc:23:ac:2f:13:8d:dd:
5c:22:6e:1f:ed:fc:f9:4a:c2:a1:4a:1c:27:ea:17:
09:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F9:C9:54:1A:6B:34:43:CD:C8:D7:F5:4A:BF:64:B8:68:EC:6C:16
X509v3 Authority Key Identifier:
keyid:32:53:CD:C3:EF:B5:21:D9:D5:E7:0A:9C:C5:E4:71:B0:15:86:03:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlPNw--1IdnV5wqcxeRxsBWGA2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:72:08:dc:6d:7a:8b:25:56:50:a1:fa:d8:ae:4c:cd:91:1c:
f5:e9:16:dd:65:54:83:90:98:be:af:86:d6:65:2f:4b:8e:08:
eb:64:22:0e:eb:c3:6d:55:2b:f7:cf:f6:78:b1:03:b3:7e:2b:
3b:3c:5a:a0:e6:ff:b5:d0:33:1a:1e:80:a5:d8:26:f2:bb:f6:
69:68:de:e6:0f:70:27:28:9e:1c:ee:f5:7e:01:98:8c:03:49:
07:7c:08:41:16:13:ae:6a:06:81:f8:0e:07:a0:81:cd:b1:f8:
07:26:23:a9:d7:85:71:54:74:00:e3:e0:99:f4:a9:ac:18:59:
65:b2:5d:2c:a9:3c:60:9f:14:19:c1:41:5c:6d:83:07:2b:4c:
81:b8:b0:6f:84:30:bf:76:5d:dc:74:72:12:45:ad:42:bb:53:
b1:33:f1:92:ba:93:fc:1d:1b:83:b8:28:78:6b:2a:ca:aa:f3:
a9:f0:22:aa:ea:6c:ae:f5:45:64:3e:2d:0d:91:8f:ab:45:bb:
bf:bc:7e:7d:6e:5f:32:6e:db:c2:3e:70:c7:aa:4a:83:6e:ed:
74:69:05:39:9f:29:7a:a2:93:f8:92:c8:eb:55:20:e8:25:ba:
a3:bc:f4:46:f6:1f:72:7e:ba:fc:4b:bc:84:46:f6:64:f5:db:
f9:59:cd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:57:44 2025 by rpki-client