Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
File: mlCFOiSox2IjTokTpKWymFwzHa0.mft (raw, json)
Hash identifier: iku7gBYvINYtHfW1HJ1x//U7ROziNjNTtwuNwg0yE7Q=
Subject key identifier: 2A:90:CA:A2:62:6A:36:9A:DC:29:49:BA:22:10:1D:04:76:FB:72:5E
Authority key identifier: 9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD
Certificate issuer: /CN=9a50853a24a8c762234e8913a4a5b2985c331dad
Certificate serial: 01976F2CDDB372FBE8DC5A3FCBC44DB3BF4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
Manifest number: 134F
Signing time: Sat 14 Jun 2025 16:01:40 +0000
Manifest this update: Sat 14 Jun 2025 16:01:40 +0000
Manifest next update: Sun 15 Jun 2025 16:01:40 +0000
Files and hashes: 1: mlCFOiSox2IjTokTpKWymFwzHa0.crl (hash: C/595kQZXXl8/mnQhVsUOva3+BZRmSHtWocrUDO1Eic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:dd:b3:72:fb:e8:dc:5a:3f:cb:c4:4d:b3:bf:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a50853a24a8c762234e8913a4a5b2985c331dad
Validity
Not Before: Jun 14 16:01:40 2025 GMT
Not After : Jun 15 16:01:40 2025 GMT
Subject: CN=2a90caa2626a369adc2949ba22101d0476fb725e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:74:df:02:d7:8d:7b:c5:20:a3:36:16:79:72:
3d:14:c9:96:2c:69:81:63:84:b4:c0:3b:54:4d:66:
51:a5:ea:71:b3:a3:6c:95:b8:12:90:79:e4:80:3f:
a0:07:4a:90:78:03:ca:23:ff:6f:e6:62:e6:9d:00:
99:65:c8:ad:13:21:98:9c:9a:17:6f:be:15:8b:a1:
06:28:90:a8:c8:4a:91:e3:68:98:2a:f7:37:6a:fc:
97:a7:d3:b6:03:ec:01:c0:b4:b4:7e:e0:82:d2:08:
30:8a:80:94:c6:3e:4e:dd:9c:bc:3a:53:e8:7d:f8:
a1:90:c1:33:11:e5:69:e3:ab:59:bb:6f:df:f9:83:
1c:15:40:05:b2:fd:3c:02:b8:f1:17:d1:f7:11:9e:
64:6b:7c:15:d9:79:b5:dd:97:e4:10:d3:b3:21:6d:
a7:3c:b8:fb:60:73:d4:6d:6b:4c:6d:93:83:a8:4a:
b5:61:3a:b3:31:0a:35:ec:19:99:f5:c4:81:94:f3:
16:3d:c6:d3:77:82:da:84:a8:41:7c:b9:2b:da:6e:
a4:e3:76:51:19:be:fe:29:48:93:16:50:5f:4b:c1:
59:22:2d:4a:00:59:48:04:6a:7a:53:96:06:47:31:
68:25:17:36:dd:2b:d2:20:c7:2e:59:5d:1d:17:59:
fc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:90:CA:A2:62:6A:36:9A:DC:29:49:BA:22:10:1D:04:76:FB:72:5E
X509v3 Authority Key Identifier:
keyid:9A:50:85:3A:24:A8:C7:62:23:4E:89:13:A4:A5:B2:98:5C:33:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlCFOiSox2IjTokTpKWymFwzHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0a429b-a454-428b-bb88-88b58d02b2a1/1/mlCFOiSox2IjTokTpKWymFwzHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:25:80:35:da:7b:a6:74:8a:4d:aa:31:57:47:bd:cb:a5:8a:
b9:cc:97:2e:73:d5:6d:cf:d4:46:6e:56:ff:5a:27:01:b6:d8:
e1:6d:b4:54:cc:a8:89:77:02:b9:cc:36:c2:7d:51:02:98:28:
c9:85:c8:22:a4:4a:0c:6b:0a:d3:3d:06:40:a2:4a:61:7d:a1:
3f:e5:16:8a:bb:96:53:a9:83:e3:96:3c:60:88:cf:c2:26:a8:
13:af:d9:c8:ee:bb:b0:b5:56:93:c4:61:ca:6a:ef:83:62:21:
cd:74:70:4e:79:0c:35:5d:5e:a9:1a:a6:0c:41:74:cf:53:5b:
27:00:34:8a:a2:84:03:f2:02:70:73:53:51:83:86:bd:c7:75:
df:ab:a2:d6:5b:ba:26:8b:14:21:5c:ea:a3:21:47:93:5b:e0:
f8:e8:ac:d8:e5:dc:6c:33:b1:e3:a6:c0:5e:2a:98:18:2c:cc:
35:4a:27:b2:fa:e2:e2:85:1c:9c:9d:d9:32:03:0c:d9:2a:a6:
7c:0b:e8:3f:12:c8:4d:db:d2:46:71:77:fb:e4:49:97:38:d0:
89:f7:73:47:71:d1:2b:a0:0c:3c:a2:cc:7d:ae:33:14:3b:b9:
f3:46:b2:44:d7:9d:6a:1f:2a:7f:28:26:dc:17:d7:27:aa:1c:
dd:48:bc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:46:04 2025 by rpki-client