Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
File: mlCFOiSox2IjTokTpKWymFwzHa0.mft (raw, json)
Hash identifier: gK7s+vMyjE/w08P80oYbz5F3gxbiLj9o3LAj8XYSzuA=
Subject key identifier: AA:63:52:90:E6:BA:A6:CD:65:90:28:1C:9D:B1:1C:CF:F5:20:E5:6B
Authority key identifier: 9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD
Certificate issuer: /CN=9a50853a24a8c762234e8913a4a5b2985c331dad
Certificate serial: 019A4EF49A2072BA3AB94D16AA07F98498AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
Manifest number: 14CD
Signing time: Tue 04 Nov 2025 13:00:44 +0000
Manifest this update: Tue 04 Nov 2025 13:00:44 +0000
Manifest next update: Wed 05 Nov 2025 13:00:44 +0000
Files and hashes: 1: mlCFOiSox2IjTokTpKWymFwzHa0.crl (hash: lpotV7tIw+FltpOD/pf83WfM8tUtOX6Z3snL4DYgSOE=)
2: wrVdtsFJg-xxcwL89uUP6qnVtLk.roa (hash: Y5fuW3nl7fba2JKNfboUC/pVBV59jurhYdqhnS+frGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:9a:20:72:ba:3a:b9:4d:16:aa:07:f9:84:98:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a50853a24a8c762234e8913a4a5b2985c331dad
Validity
Not Before: Nov 4 13:00:44 2025 GMT
Not After : Nov 5 13:00:44 2025 GMT
Subject: CN=aa635290e6baa6cd6590281c9db11ccff520e56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0a:c5:8c:6a:17:38:ba:56:d0:d0:4b:0a:e9:
07:76:55:83:94:53:8b:9a:57:ae:83:14:dd:e4:4b:
36:df:a6:82:e7:9c:d0:bb:70:e3:e4:63:79:a2:78:
a3:9f:24:22:d3:ac:1d:f2:c3:0a:5b:8e:19:40:c0:
8c:61:1a:aa:c6:38:94:a0:99:d6:04:e2:2b:c7:cb:
d8:ff:ad:fa:8e:e3:76:aa:24:2a:0f:ea:53:78:24:
d7:b9:a0:4f:72:aa:ea:71:85:f7:f0:37:ae:ca:56:
8f:0c:ae:30:48:3f:49:d4:b2:a4:9c:97:4c:a8:39:
43:ec:5d:ff:1a:38:a6:1d:da:ff:58:2a:1e:30:d1:
4e:fd:f1:a6:a3:1b:da:13:7b:c0:b2:2c:96:10:b6:
46:01:57:42:75:dc:e7:f5:e5:86:68:d2:2b:25:d0:
ef:7f:a2:13:f1:ab:61:01:03:20:1c:48:6b:f8:a7:
09:d8:67:b2:35:3b:7f:d0:36:6a:d0:3c:6f:1b:87:
31:9c:2f:85:7e:89:37:a7:3a:e0:31:8b:d9:ac:dc:
ec:e5:66:aa:ba:27:76:70:a6:1d:04:05:61:71:04:
49:f5:01:a3:df:7e:c9:4f:91:ea:8e:1a:0b:59:ff:
9c:32:58:b5:47:4a:6b:2e:7c:8a:f6:a4:99:3a:d2:
75:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:63:52:90:E6:BA:A6:CD:65:90:28:1C:9D:B1:1C:CF:F5:20:E5:6B
X509v3 Authority Key Identifier:
keyid:9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3f:cf:9f:6f:8c:13:3e:cd:fa:f7:eb:43:20:d6:1f:e9:57:
a9:3c:b3:13:e5:4a:82:6a:19:5e:45:85:7e:b7:6f:6e:15:d2:
00:e5:ff:52:96:2f:af:fb:d6:98:6f:a5:d2:75:7a:7d:e5:24:
a4:43:52:08:2d:64:c5:e6:89:62:d3:32:e2:c5:d1:3e:9a:d9:
a0:e2:a1:b8:e9:78:44:60:b8:56:49:aa:74:0d:4c:b4:d9:3e:
2a:21:d5:35:53:60:57:5d:a6:a7:7f:4d:0c:bc:65:b6:c3:21:
7f:bd:7e:a1:6d:45:e4:09:71:02:20:a0:35:14:4e:3e:ff:8e:
18:37:2e:c6:68:fd:0d:04:53:74:52:ed:c1:4d:53:31:67:d8:
3b:f8:81:cc:a5:80:81:03:18:08:98:22:8d:b1:de:9c:08:0c:
64:11:11:50:f0:09:f8:5e:49:ef:86:99:ec:b3:c5:7b:9c:0b:
fa:97:75:75:e3:55:ba:43:6a:ce:7a:e5:b4:46:ce:4f:67:0b:
73:3c:8b:63:05:a6:12:2d:1e:e2:56:cc:53:b3:34:97:65:ff:
ef:19:db:c9:01:53:30:7f:a0:af:b3:e7:51:08:db:26:55:b0:
d1:5c:3a:a5:0f:cc:8a:94:bf:75:07:8f:16:db:b0:4d:cb:90:
06:4a:ca:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:28 2025 by rpki-client