
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.mft
File: MFKpUR4ZpULAuyN4td6PT7RSHb4.mft (raw, json)
Hash identifier: HAVyEFpMMqi+DnB/WD/qvqVWjIIzrHDvvudeV5JnkJk=
Subject key identifier: 1F:77:86:E9:73:C1:4B:1B:B0:4A:B0:0C:AE:19:E3:7C:2C:77:D8:9C
Authority key identifier: 30:52:A9:51:1E:19:A5:42:C0:BB:23:78:B5:DE:8F:4F:B4:52:1D:BE
Certificate issuer: /CN=3052a9511e19a542c0bb2378b5de8f4fb4521dbe
Certificate serial: 019921B13D8D07FCFCBC43A73CF85CCF11CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFKpUR4ZpULAuyN4td6PT7RSHb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.mft
Manifest number: 1600
Signing time: Sun 07 Sep 2025 01:01:27 +0000
Manifest this update: Sun 07 Sep 2025 01:01:27 +0000
Manifest next update: Mon 08 Sep 2025 01:01:27 +0000
Files and hashes: 1: MFKpUR4ZpULAuyN4td6PT7RSHb4.crl (hash: F+U4bFoByWL8qtst7dkGEXEzffUV9aQtjXWuUMDVH3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MFKpUR4ZpULAuyN4td6PT7RSHb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:3d:8d:07:fc:fc:bc:43:a7:3c:f8:5c:cf:11:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3052a9511e19a542c0bb2378b5de8f4fb4521dbe
Validity
Not Before: Sep 7 01:01:27 2025 GMT
Not After : Sep 8 01:01:27 2025 GMT
Subject: CN=1f7786e973c14b1bb04ab00cae19e37c2c77d89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3e:ec:88:3e:db:4f:ee:45:c2:b1:d6:d4:8a:
d0:27:e2:6e:5c:21:fb:6b:da:fd:92:f0:a0:2d:07:
aa:d7:ab:00:63:5e:e3:1b:11:95:2d:70:2a:97:35:
86:0e:5c:89:3a:e2:59:92:a1:88:52:81:e5:8a:95:
7c:12:9d:4c:30:13:f9:d2:e6:a8:8e:6a:f0:fa:de:
e1:99:2c:75:86:29:b6:2c:eb:69:19:ff:a7:27:25:
68:36:08:61:aa:26:b6:2f:8c:d5:59:d6:be:35:06:
29:b8:12:07:c5:cf:72:03:f8:1f:b2:e6:a7:7b:46:
b2:8b:f0:81:e0:31:1a:5d:e7:95:3c:38:e0:88:5c:
75:33:35:a2:53:77:f9:f4:f2:c6:5d:60:54:72:e3:
07:c9:9c:06:69:6b:57:41:3d:e1:2d:7a:f3:ba:b3:
9d:59:fd:e5:22:3c:2f:b7:64:03:f6:2f:b9:ce:f3:
d7:43:1e:53:cf:ba:7c:7e:47:33:b2:14:2b:2d:94:
75:dd:49:50:b4:4a:37:31:2d:28:a3:d1:42:68:c9:
19:a5:8b:4c:74:5d:c8:e7:b6:fb:26:16:a8:7e:af:
c0:6d:d4:ed:7c:0a:a3:0a:ed:f8:f2:3f:6a:3b:23:
a7:27:56:39:9a:89:08:9e:4a:2c:34:45:91:84:60:
8e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:77:86:E9:73:C1:4B:1B:B0:4A:B0:0C:AE:19:E3:7C:2C:77:D8:9C
X509v3 Authority Key Identifier:
keyid:30:52:A9:51:1E:19:A5:42:C0:BB:23:78:B5:DE:8F:4F:B4:52:1D:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFKpUR4ZpULAuyN4td6PT7RSHb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d35a1d-94e9-4eb4-83f4-020e1851e943/1/MFKpUR4ZpULAuyN4td6PT7RSHb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f9:f9:28:e0:2a:88:75:45:12:10:c7:1c:72:60:f5:23:a2:
3f:b9:e1:71:ba:e6:5f:78:c8:fd:17:34:99:e1:32:c3:ee:14:
3a:27:77:96:c4:fd:10:5e:0a:03:41:00:9d:44:32:fc:5e:c9:
71:bc:9c:bd:85:1b:22:1c:18:23:64:ba:e4:d4:3a:ee:94:f4:
94:4e:62:96:0f:c2:21:3a:88:c0:81:50:69:9d:22:d6:97:eb:
9f:a2:60:68:4d:12:07:fc:3b:75:e8:73:8d:f3:81:2e:68:21:
84:9d:0c:16:eb:74:0d:90:39:58:54:35:de:e0:82:c6:a6:fe:
74:91:4b:17:3d:7e:40:a0:d9:2d:bc:ea:6d:c4:b3:3e:94:49:
97:f8:20:6e:2d:0f:e2:53:b7:c8:f8:d2:c3:05:10:93:79:f1:
4e:cf:a0:8f:77:54:ff:61:4f:b9:6c:d4:56:c0:67:d6:16:2d:
9c:56:5e:af:a6:a9:5e:e3:39:d1:7d:3c:59:30:f9:7a:39:42:
d0:44:e7:7b:ec:81:fa:e4:da:92:a7:23:b1:b4:82:14:69:20:
86:84:00:d9:3c:6d:c0:39:e9:cd:13:b8:3a:d0:90:e2:05:29:
ee:68:94:6d:ea:bf:44:75:0d:ec:a6:82:8d:e1:57:47:b7:c0:
58:ca:8c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:28 2025 by rpki-client