Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft
File: mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft (raw, json)
Hash identifier: cthDzvI3/1Rz1/NGrtx/Is4sjSrvbB8+pneAw0pajBs=
Subject key identifier: 66:93:90:74:E8:6F:5F:57:B7:2C:AF:77:1B:94:43:CE:53:30:A1:F9
Authority key identifier: 9B:13:4B:6E:90:24:06:4B:90:57:28:34:89:BF:2C:43:6F:40:75:E8
Certificate issuer: /CN=9b134b6e9024064b9057283489bf2c436f4075e8
Certificate serial: 019A1EACF9EB68B6A18B0DDEE55912F510F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxNLbpAkBkuQVyg0ib8sQ29Adeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft
Manifest number: 084F
Signing time: Sun 26 Oct 2025 04:00:43 +0000
Manifest this update: Sun 26 Oct 2025 04:00:43 +0000
Manifest next update: Mon 27 Oct 2025 04:00:43 +0000
Files and hashes: 1: mxNLbpAkBkuQVyg0ib8sQ29Adeg.crl (hash: 7C/SDFr476FT7aAu2jtwWnWl/DH3NiCb0Rwc2kh/hGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mxNLbpAkBkuQVyg0ib8sQ29Adeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ac:f9:eb:68:b6:a1:8b:0d:de:e5:59:12:f5:10:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b134b6e9024064b9057283489bf2c436f4075e8
Validity
Not Before: Oct 26 04:00:43 2025 GMT
Not After : Oct 27 04:00:43 2025 GMT
Subject: CN=66939074e86f5f57b72caf771b9443ce5330a1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:95:8e:7d:8b:48:d4:50:1c:06:90:e8:2e:80:
6b:65:e5:13:d4:5e:4a:cb:bd:54:48:37:20:57:31:
dd:fe:74:7e:f5:97:8c:11:d7:d2:20:52:3d:5a:92:
a1:9e:78:b8:ce:9f:4d:6a:fe:69:31:1b:9b:21:0e:
d9:9c:b5:a2:50:7c:d2:be:a1:43:2f:d6:ef:4a:ab:
3f:fb:2a:d3:a2:a6:6c:08:99:6d:77:f4:86:bd:0d:
df:77:cb:83:2e:e2:44:18:a2:a8:11:f9:0e:f0:23:
c2:d5:64:ac:05:19:be:b7:8d:9b:df:c2:b8:42:c6:
3c:8a:a3:d8:b7:c2:c3:00:a4:42:9d:38:d8:4e:2c:
a5:95:2c:f7:32:fa:c8:b5:0b:5e:00:4c:8c:c7:af:
4b:57:98:2b:4c:ea:6c:d6:ee:fa:8a:bb:61:9e:8f:
94:9b:82:f0:f4:d7:00:b4:5e:b5:72:71:16:b1:fc:
54:15:7f:30:9e:9b:a6:bf:6b:91:4e:f2:9e:d9:87:
df:69:6b:ad:34:3c:d7:17:7b:23:e4:fa:9e:76:0f:
0b:22:df:81:6e:32:15:76:ed:7c:5a:b1:a7:0d:1a:
e8:c8:4a:7e:2d:7e:f3:88:79:fd:63:3f:b3:40:79:
8d:b9:31:4c:16:7e:b5:50:0d:00:4e:c9:03:4a:b6:
bd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:93:90:74:E8:6F:5F:57:B7:2C:AF:77:1B:94:43:CE:53:30:A1:F9
X509v3 Authority Key Identifier:
keyid:9B:13:4B:6E:90:24:06:4B:90:57:28:34:89:BF:2C:43:6F:40:75:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxNLbpAkBkuQVyg0ib8sQ29Adeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:55:a6:3e:d8:15:a6:26:1f:68:48:53:3c:d2:5a:09:52:c5:
05:e1:60:10:37:ae:9e:10:8f:bc:6c:76:34:d0:30:46:40:25:
f7:94:bc:06:bc:43:8e:bc:09:dd:75:30:fb:13:fe:da:56:e3:
28:3e:b4:53:4b:ec:ae:e4:cb:51:9d:f2:db:85:09:68:b4:33:
ab:5e:71:1d:46:7f:74:89:25:97:8b:ae:40:34:44:6a:00:30:
93:5b:2c:26:c1:41:18:84:7b:3f:bf:fc:2d:32:27:58:3c:df:
ce:cb:1a:07:6d:4d:0a:e4:8b:f3:87:8e:40:83:91:ab:cf:60:
e4:8c:2a:9f:98:6c:85:01:68:b7:ce:57:53:c9:a7:78:c6:1e:
52:7d:44:75:f7:a8:3e:4e:2e:95:c4:14:0b:cf:bd:e7:e2:bc:
d3:1b:89:db:a1:29:68:98:82:cb:59:36:6e:58:2f:71:d0:eb:
a7:bd:99:25:9d:13:e4:97:8a:c1:8a:03:47:3d:e9:2b:fa:ec:
78:79:1a:fe:18:61:ea:ee:85:94:51:df:f5:38:fd:13:b4:6b:
a7:a4:be:28:05:78:cd:2f:cd:3f:78:f6:7a:3c:ea:f9:0d:85:
4e:d6:12:b1:4b:c4:c8:f5:c1:c1:59:24:1c:04:47:67:af:a6:
de:8c:1f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 12:00:43 2025 by rpki-client