
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
File: MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft (raw, json)
Hash identifier: +BjQUWOJTCu69UBIgiht+QuAoNNoLN3WB4wTnSVDwEA=
Subject key identifier: 3C:8A:C7:EB:57:3E:20:41:EF:24:4C:1E:F1:C9:67:8A:97:3C:DA:40
Authority key identifier: 33:35:8B:45:1E:E0:FE:85:B0:04:A0:56:4F:83:10:FB:21:1C:95:FA
Certificate issuer: /CN=33358b451ee0fe85b004a0564f8310fb211c95fa
Certificate serial: 01974742971C6E6FAA1653D6D12CCF22B85B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
Manifest number: 157F
Signing time: Fri 06 Jun 2025 22:00:35 +0000
Manifest this update: Fri 06 Jun 2025 22:00:35 +0000
Manifest next update: Sat 07 Jun 2025 22:00:35 +0000
Files and hashes: 1: MzWLRR7g_oWwBKBWT4MQ-yEclfo.crl (hash: wFAebK8ocdFANOLMUMnS3vl2RKviyB7Nie6fHPr5hfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:97:1c:6e:6f:aa:16:53:d6:d1:2c:cf:22:b8:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33358b451ee0fe85b004a0564f8310fb211c95fa
Validity
Not Before: Jun 6 22:00:35 2025 GMT
Not After : Jun 7 22:00:35 2025 GMT
Subject: CN=3c8ac7eb573e2041ef244c1ef1c9678a973cda40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:13:92:d3:6b:8a:e6:97:a4:31:15:9f:1c:90:
05:39:3b:f3:6a:cc:08:bb:5b:76:0c:ee:06:84:88:
d2:16:e9:00:8b:fb:61:da:0b:6d:81:01:cf:f5:f2:
67:7e:e4:32:2d:31:92:8e:d5:e6:61:b5:58:00:94:
2d:fd:3b:27:98:1f:2f:25:56:74:8e:5b:1e:83:ed:
a2:2d:25:a1:2a:40:f2:b9:ea:d6:d1:9b:ae:f4:00:
8d:91:53:d9:9c:bc:1a:91:8d:2a:80:16:93:9a:71:
3f:35:c6:19:7d:92:30:cf:b7:e3:cd:7e:93:0f:1e:
b0:51:78:c9:d2:e1:f2:e4:cf:d6:d9:19:30:48:62:
8b:4d:0d:47:7d:b6:4b:6a:70:5a:0c:31:ba:3b:70:
9d:7a:d7:cd:8a:49:98:04:6f:7b:fd:76:1b:2e:9d:
75:aa:ce:74:16:0a:a6:35:f4:f1:f8:54:c4:42:ad:
0d:2f:ff:45:ac:27:45:ce:7d:d8:9b:90:c5:21:98:
0c:b2:1d:3d:e7:7d:40:91:90:62:31:b6:ac:64:94:
18:92:de:75:b4:b6:b1:c5:8a:42:90:0a:b5:e6:a8:
56:35:89:38:52:1d:65:98:36:1d:81:66:8e:c5:bf:
db:ab:3a:70:99:5e:77:98:31:3b:95:bb:de:39:17:
97:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8A:C7:EB:57:3E:20:41:EF:24:4C:1E:F1:C9:67:8A:97:3C:DA:40
X509v3 Authority Key Identifier:
keyid:33:35:8B:45:1E:E0:FE:85:B0:04:A0:56:4F:83:10:FB:21:1C:95:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:28:4e:ce:5b:06:39:1b:98:5b:2e:f9:e0:f0:f7:39:99:6f:
5e:a8:1d:f6:17:95:ce:90:45:e6:97:3a:e0:21:8b:6a:50:94:
0f:fd:91:56:24:6f:2e:72:57:5c:66:a5:c2:c3:f8:7f:cc:89:
7a:95:15:d2:35:d1:98:01:19:f1:79:1a:be:07:f4:8c:bb:1f:
3a:e1:cf:57:ec:a4:ea:27:65:47:57:47:4f:97:a9:63:75:08:
5a:f2:87:47:e8:4f:aa:bc:90:4a:b4:d7:86:89:05:6c:dd:da:
fb:32:b4:61:6a:b0:96:ad:2e:3c:4c:25:9c:e5:8f:e1:ad:01:
12:d0:43:e8:c6:ee:e5:a8:6c:d7:33:9b:e4:d7:03:f2:17:d7:
31:81:c3:01:c9:af:bc:b2:d3:ed:a1:8e:07:a3:fd:7b:e9:e3:
4f:ee:9c:e2:16:c2:4d:12:d2:2a:a8:e7:a7:83:64:dd:47:63:
bb:78:3d:08:03:67:cf:48:dd:73:2d:c2:83:e5:42:c0:c4:1f:
7d:1c:c4:51:7d:49:ed:eb:b6:99:ff:a9:0c:e7:bc:c4:ec:3d:
f7:47:c4:2a:0f:c7:ff:ab:1c:7e:6e:86:22:fc:eb:a7:e0:2f:
ca:fd:8b:55:0e:a8:3a:83:7a:d7:ac:13:52:56:ff:c6:49:45:
6e:01:a1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:12:02 2025 by rpki-client