Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft
File: mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft (raw, json)
Hash identifier: oST6T02yTQNU8oyhPCA/6UMWmiVGDQaaYPKpgxzSiyc=
Subject key identifier: DF:FC:B7:38:5B:A5:60:88:03:60:BE:A4:AC:FE:75:20:E1:E9:40:0B
Authority key identifier: 9A:B0:24:01:50:AC:0D:9D:F3:BB:9C:57:2E:31:C8:75:85:88:20:69
Certificate issuer: /CN=9ab0240150ac0d9df3bb9c572e31c87585882069
Certificate serial: 019749D5F319534FD8C964F2213228FA6FBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft
Manifest number: 05BC
Signing time: Sat 07 Jun 2025 10:00:47 +0000
Manifest this update: Sat 07 Jun 2025 10:00:47 +0000
Manifest next update: Sun 08 Jun 2025 10:00:47 +0000
Files and hashes: 1: mrAkAVCsDZ3zu5xXLjHIdYWIIGk.crl (hash: mAdjx1TNkH+tBBWdeQ9huJ33pg53IZTdtkayPt++h90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:f3:19:53:4f:d8:c9:64:f2:21:32:28:fa:6f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab0240150ac0d9df3bb9c572e31c87585882069
Validity
Not Before: Jun 7 10:00:47 2025 GMT
Not After : Jun 8 10:00:47 2025 GMT
Subject: CN=dffcb7385ba560880360bea4acfe7520e1e9400b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:df:86:55:88:cd:04:56:8a:b7:4e:90:90:b3:
58:94:86:8a:2b:bc:52:07:af:67:7d:a0:c7:6f:f2:
87:2a:8f:56:4e:29:21:be:df:d3:2f:56:4b:00:6a:
34:6e:7c:25:ff:c7:bf:e5:b6:63:a8:27:9d:4b:33:
43:65:09:92:07:0e:05:83:f0:8b:dc:a7:01:82:31:
57:df:03:2d:ba:46:40:a0:3a:05:94:e1:60:1d:25:
7f:94:de:18:ee:64:f2:65:b1:ad:5e:46:6b:42:9c:
e4:0a:23:ea:3a:cf:60:c4:39:6b:f2:74:46:ca:64:
42:1c:82:7b:e7:55:ab:ea:cf:7f:2a:4d:b2:b3:43:
8a:cf:a9:c3:1f:d9:db:24:f5:06:1d:b9:c2:cd:03:
ef:0d:14:c6:58:64:ef:41:ef:59:6c:16:c3:ab:65:
22:6a:96:c3:03:90:5f:c4:08:f2:02:ab:49:e0:4d:
eb:f4:65:ac:c3:5e:d3:aa:59:ab:6b:84:98:3f:06:
d6:94:2c:bc:20:cf:99:9e:d9:90:45:63:dd:62:b7:
cb:c2:ba:d4:68:4a:b9:1e:38:a5:5c:b0:ae:d1:64:
20:83:6b:88:72:98:10:0e:0f:01:0c:7e:ee:d4:fb:
c3:77:ae:40:48:11:37:60:eb:aa:c7:e3:2c:14:39:
3f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FC:B7:38:5B:A5:60:88:03:60:BE:A4:AC:FE:75:20:E1:E9:40:0B
X509v3 Authority Key Identifier:
keyid:9A:B0:24:01:50:AC:0D:9D:F3:BB:9C:57:2E:31:C8:75:85:88:20:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:81:92:7b:3b:3d:37:d7:dc:f2:e3:c6:cb:7d:16:b0:5d:41:
ca:4e:94:a2:c4:54:81:15:c9:9d:16:6d:d9:4e:63:9b:89:00:
5d:8e:88:68:d6:4e:63:1d:8a:34:fa:8b:b3:de:75:fb:db:e5:
8f:0b:01:00:b0:ee:20:53:5b:54:b1:14:ec:b5:52:61:94:2a:
2c:02:69:55:3b:1d:b0:5f:18:0f:2a:90:e9:ee:db:17:e5:55:
33:05:6e:33:fe:e6:a0:36:90:10:45:19:ee:fb:7a:f0:ff:7d:
98:20:89:56:ba:63:db:8c:80:b7:94:2d:78:5a:82:12:a3:e4:
92:09:4c:eb:3b:89:ae:f9:24:31:9a:34:4c:83:b7:ee:b0:d5:
46:66:e2:b1:8d:7a:67:7c:7f:a4:db:a7:95:a0:dd:e3:ee:09:
6f:43:11:aa:7d:ba:81:5b:53:da:20:3b:66:2f:e3:97:c4:b7:
86:03:62:60:d0:7e:29:14:84:66:cd:8f:7d:31:27:c8:c4:86:
0a:e9:98:f3:b4:5a:46:bf:fe:e5:34:b1:fd:41:da:0e:41:e2:
e7:b6:1a:16:24:24:85:1a:20:de:c8:55:3d:09:f2:14:82:28:
07:48:1c:c0:de:52:4c:d7:fb:b4:ce:17:ff:95:01:d5:13:d6:
65:1b:64:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:48:42 2025 by rpki-client