Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft
File: mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft (raw, json)
Hash identifier: JOuV2TLQx9bIsGwSeKGuzqK5Bf5RYzt7+oqp3ROSuV8=
Subject key identifier: D6:AB:5D:94:FB:E9:1A:FC:2F:D0:6A:18:13:50:1F:20:12:B1:9A:15
Authority key identifier: 9A:B0:24:01:50:AC:0D:9D:F3:BB:9C:57:2E:31:C8:75:85:88:20:69
Certificate issuer: /CN=9ab0240150ac0d9df3bb9c572e31c87585882069
Certificate serial: 019A71131B5939AC4B16C708701DA139E232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft
Manifest number: 075E
Signing time: Tue 11 Nov 2025 04:01:08 +0000
Manifest this update: Tue 11 Nov 2025 04:01:08 +0000
Manifest next update: Wed 12 Nov 2025 04:01:08 +0000
Files and hashes: 1: mrAkAVCsDZ3zu5xXLjHIdYWIIGk.crl (hash: OX5H7P01kCnKd7eImKl4iFPWBW+gywYJTM1l4TmcELE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:1b:59:39:ac:4b:16:c7:08:70:1d:a1:39:e2:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab0240150ac0d9df3bb9c572e31c87585882069
Validity
Not Before: Nov 11 04:01:08 2025 GMT
Not After : Nov 12 04:01:08 2025 GMT
Subject: CN=d6ab5d94fbe91afc2fd06a1813501f2012b19a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c6:1e:68:c5:cf:5d:bf:31:51:3d:c8:38:ca:
83:58:87:dc:c8:af:3c:60:7c:5d:a6:5a:75:68:8d:
a3:aa:80:97:1f:e7:af:a1:5f:2b:f3:0c:14:12:bf:
f5:70:7b:6a:fa:ee:96:18:54:38:2e:99:5a:e9:74:
2d:7b:5c:ec:ff:63:fc:0c:02:39:20:90:74:f9:54:
af:11:02:6f:70:85:c3:a7:0e:e5:25:1b:4d:58:17:
87:5f:f2:07:84:e0:67:a8:11:32:7b:4e:bd:d3:78:
18:47:a8:a5:10:27:67:d4:8a:8f:13:b0:f2:29:89:
1f:72:1c:b5:07:10:b6:74:34:07:aa:50:80:6e:e6:
38:02:91:34:bb:c8:b1:99:d9:44:98:c1:4c:cb:a2:
b2:53:61:ac:33:5a:4f:8a:75:20:23:82:b6:db:8c:
ed:d8:5a:7d:42:6d:6f:81:5a:12:22:74:3e:99:17:
4f:5a:9e:00:77:5b:aa:01:3b:67:2b:32:36:37:f5:
00:e3:47:ce:82:94:b4:46:2b:54:9b:84:82:ad:4e:
5a:b6:94:82:9c:bb:06:e3:cb:72:f5:a8:c2:24:f2:
a3:33:9c:3d:7b:6a:c6:e6:73:6a:95:67:cb:9e:56:
3d:11:da:94:b2:f7:64:e7:01:66:d7:05:7d:aa:c1:
c1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AB:5D:94:FB:E9:1A:FC:2F:D0:6A:18:13:50:1F:20:12:B1:9A:15
X509v3 Authority Key Identifier:
keyid:9A:B0:24:01:50:AC:0D:9D:F3:BB:9C:57:2E:31:C8:75:85:88:20:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:02:2c:04:0d:26:03:e4:cd:ab:8d:b9:d5:58:d2:1c:44:04:
ab:a7:b7:d1:09:87:7c:57:2b:ae:77:7e:f4:f9:18:8d:60:79:
bb:ea:65:7b:51:cf:60:35:5e:23:b0:61:ed:83:6c:c0:0d:02:
8e:82:a3:23:ba:dc:80:25:c9:56:26:38:fc:41:85:77:10:a2:
8a:e6:ee:33:3b:de:b4:5c:2b:35:b9:cc:07:37:7c:03:e2:67:
e5:e9:3a:93:29:d9:4b:92:dd:0e:40:70:53:b5:40:13:57:93:
f5:1c:cf:04:9d:25:89:b0:87:a1:ed:ab:83:3c:bd:34:2c:75:
04:3c:19:66:f3:6c:2a:eb:f2:b3:bf:f4:fa:fb:6a:71:e0:d0:
cf:91:fe:b9:df:c9:5f:04:1a:35:69:23:5b:89:54:28:dc:72:
ad:51:ac:b7:50:41:c3:0b:01:1c:2d:fa:55:70:df:8f:44:33:
8d:a8:36:33:09:f1:b3:cb:e4:42:a5:71:de:09:b8:f6:05:8f:
b3:5b:73:71:e6:2d:53:53:1f:88:e4:89:23:71:1c:db:93:11:
45:2e:2c:0e:3f:f7:d9:be:8d:d3:8c:bd:b2:e3:da:7c:8f:20:
e5:47:e0:c8:b3:e7:ed:bf:99:bd:3e:55:30:3a:f3:36:fc:4f:
8f:62:27:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:39 2025 by rpki-client