Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft
File: MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft (raw, json)
Hash identifier: dY6/vplfgQRU8FJ1jVYlXm02Kb+VrCdCPZrblJ/8U4Y=
Subject key identifier: 9B:94:7A:4A:44:4E:A2:0C:BB:FA:2E:24:D0:21:D1:48:B1:99:89:18
Authority key identifier: 31:B1:62:1C:E2:8C:BB:FE:F0:38:AB:D7:54:9F:C6:CB:50:E7:11:6B
Certificate issuer: /CN=31b1621ce28cbbfef038abd7549fc6cb50e7116b
Certificate serial: 019849D3374C51D1DA3957E1B743AE4803A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft
Manifest number: 08F2
Signing time: Sun 27 Jul 2025 03:00:35 +0000
Manifest this update: Sun 27 Jul 2025 03:00:35 +0000
Manifest next update: Mon 28 Jul 2025 03:00:35 +0000
Files and hashes: 1: MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.crl (hash: /+aiAOVKnrbiJbtdcageHxHJnQpusEIbYcylooT1tJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:37:4c:51:d1:da:39:57:e1:b7:43:ae:48:03:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b1621ce28cbbfef038abd7549fc6cb50e7116b
Validity
Not Before: Jul 27 03:00:35 2025 GMT
Not After : Jul 28 03:00:35 2025 GMT
Subject: CN=9b947a4a444ea20cbbfa2e24d021d148b1998918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9f:66:2b:3a:04:4b:da:ac:70:43:1b:19:95:
79:1e:61:52:bc:1f:10:c5:e2:a7:1b:e8:cc:7f:77:
0f:74:fe:20:36:66:96:c8:58:a8:0e:d7:cc:83:ed:
fb:07:1b:0f:cc:b0:44:49:91:f0:43:d6:10:cb:71:
82:e4:94:b5:2b:b1:55:a9:ac:66:76:63:c5:cf:e3:
f4:be:c0:17:53:da:65:2e:73:ed:a1:d1:45:f7:75:
77:46:cf:02:07:66:f2:44:5b:61:88:90:2e:76:99:
16:ae:2f:15:b6:1e:26:9c:9f:df:d0:73:ef:66:1d:
36:10:14:33:f4:43:2a:9c:b1:f1:cf:87:8a:8c:dd:
c2:68:79:36:10:4d:87:09:67:2f:d9:30:49:67:61:
03:91:5f:0e:29:63:65:f4:76:13:a4:41:cd:59:f7:
9d:27:c2:26:d2:c0:a9:f6:82:b9:73:03:d2:aa:2c:
7a:d0:77:38:78:24:9e:3f:52:15:5d:e8:23:5c:d4:
09:9d:e5:de:35:47:cd:86:38:b8:df:74:c4:e0:73:
fe:92:b2:9f:ac:ee:93:6f:cf:6c:26:c8:fb:d9:d6:
aa:b0:16:4a:8c:29:fc:46:01:da:20:a1:3f:40:c5:
f0:7c:3f:9b:ec:4c:c8:48:6d:70:62:21:8a:63:13:
5e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:94:7A:4A:44:4E:A2:0C:BB:FA:2E:24:D0:21:D1:48:B1:99:89:18
X509v3 Authority Key Identifier:
keyid:31:B1:62:1C:E2:8C:BB:FE:F0:38:AB:D7:54:9F:C6:CB:50:E7:11:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:0a:e2:8b:8d:f0:47:b1:91:00:d2:de:0a:bb:fa:c9:11:a5:
34:0e:56:fc:44:83:dc:69:19:21:92:00:e9:b7:5f:28:98:e8:
e5:29:d3:b9:65:54:52:20:31:76:30:3c:36:c8:6f:78:76:af:
24:60:c5:d0:f4:97:1b:98:8e:8a:df:1b:03:38:42:c0:e0:f4:
74:42:80:fa:d8:f4:f4:7b:39:b1:70:b8:4a:13:03:93:09:c7:
ca:c9:ff:fb:8b:5b:c5:09:b3:d7:b9:da:75:b2:80:b1:1f:0f:
f8:dd:c2:3b:73:39:4e:4d:ba:01:cc:73:fa:0c:f0:c2:af:fb:
46:94:a2:88:d8:5c:ce:04:6f:33:63:f1:0f:00:00:40:5c:84:
d6:1b:76:76:8e:90:3e:ea:ae:cb:89:f1:c3:42:6c:93:52:5e:
e9:e4:b9:b7:28:c5:1c:94:5a:be:57:06:46:02:43:1d:c9:28:
88:70:a0:3c:fd:b5:73:54:18:0c:25:3a:b3:b1:fe:60:2e:46:
47:7e:6d:46:4e:fb:de:ae:04:b3:bf:8f:ed:85:87:52:e8:27:
8f:29:e9:82:af:d8:ca:d9:88:ca:24:7d:ad:1b:a8:5a:14:08:
6b:29:80:9c:e2:36:40:b5:19:c1:d2:2d:74:7e:13:38:fa:ae:
33:12:7a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:42:19 2025 by rpki-client