
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
File: MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft (raw, json)
Hash identifier: XrQDew3un8a0xSNm0F89sLShJ17XqLCAQSXVod2Tnx4=
Subject key identifier: 6E:2D:62:53:CB:9E:0A:52:00:25:BA:57:DB:51:8F:FB:C5:01:5F:5B
Authority key identifier: 33:35:8B:45:1E:E0:FE:85:B0:04:A0:56:4F:83:10:FB:21:1C:95:FA
Certificate issuer: /CN=33358b451ee0fe85b004a0564f8310fb211c95fa
Certificate serial: 019918AD553768CBB9386537B159665C4AEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
Manifest number: 1670
Signing time: Fri 05 Sep 2025 07:00:36 +0000
Manifest this update: Fri 05 Sep 2025 07:00:36 +0000
Manifest next update: Sat 06 Sep 2025 07:00:36 +0000
Files and hashes: 1: MzWLRR7g_oWwBKBWT4MQ-yEclfo.crl (hash: iPAIq2db+dputvFDKTCAwxcUfvSmq/yl0N3wtj/sw0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:ad:55:37:68:cb:b9:38:65:37:b1:59:66:5c:4a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33358b451ee0fe85b004a0564f8310fb211c95fa
Validity
Not Before: Sep 5 07:00:36 2025 GMT
Not After : Sep 6 07:00:36 2025 GMT
Subject: CN=6e2d6253cb9e0a520025ba57db518ffbc5015f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:3e:42:fe:cd:02:e6:13:7c:45:3a:7c:ca:
80:43:7f:51:58:9d:0a:65:0e:4e:71:18:d1:82:23:
65:ee:81:98:bc:b7:6d:47:c1:e9:46:27:9b:48:c7:
f9:70:0e:0e:87:ed:ce:7b:f2:8c:ff:03:6f:8f:ec:
ac:a7:3d:72:c9:44:04:ee:05:0f:16:83:b4:cc:9e:
89:64:e0:ac:17:8a:79:f5:9c:7f:3f:42:59:79:e1:
00:14:0a:2b:93:c6:aa:08:76:cd:a5:96:50:0c:e1:
09:0e:e5:1e:c4:03:1b:91:7e:f6:15:1d:5e:aa:73:
bd:0d:11:ef:78:cd:0f:67:28:99:f2:b2:85:b9:1d:
09:09:71:39:9c:4e:d8:55:5f:9a:fa:e8:5e:e7:7a:
0f:98:d1:82:ba:25:92:07:3f:18:fc:53:28:fc:ee:
73:08:76:fb:13:71:18:73:ad:a4:88:04:03:b4:bb:
a7:b4:88:1a:ed:c0:dd:06:ac:f9:a4:f1:fc:bd:7c:
bf:4a:84:79:57:14:a5:ed:c1:5c:65:b9:b6:e8:51:
85:f4:85:10:97:f3:2c:a2:0a:e5:27:ea:e2:82:91:
a3:a3:52:7f:16:71:23:b7:4d:9a:77:5d:be:05:ae:
fa:d4:c8:2b:17:f6:36:ad:88:d7:e1:2b:41:c7:69:
ae:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2D:62:53:CB:9E:0A:52:00:25:BA:57:DB:51:8F:FB:C5:01:5F:5B
X509v3 Authority Key Identifier:
keyid:33:35:8B:45:1E:E0:FE:85:B0:04:A0:56:4F:83:10:FB:21:1C:95:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:4c:82:bb:cf:22:83:64:11:d2:eb:19:0d:df:24:22:ad:ae:
12:89:58:d7:5c:3d:36:75:93:d5:9d:6b:f5:ab:b1:c8:10:83:
a7:f4:79:10:e4:f0:a5:2d:b6:60:b4:eb:74:bf:e0:6b:b2:e1:
bd:07:d6:04:af:95:f9:73:31:73:60:3c:4c:92:40:8e:dd:88:
5c:bb:c2:62:80:8c:8b:6d:ec:a1:45:a9:3e:71:b3:2a:2b:52:
6d:ec:59:99:36:7b:f1:ee:4b:be:f7:7c:31:ff:04:2d:3b:b3:
29:86:65:ed:6f:8a:85:37:4c:40:5e:d2:48:ce:0b:a7:4d:12:
09:6f:92:19:85:0e:9c:43:6e:a5:7c:96:f7:f3:7c:e1:91:8e:
7c:3c:d6:bd:f2:1f:b5:9a:32:56:12:ef:6b:6a:18:b3:36:e7:
e1:76:a7:89:fa:58:c5:95:8f:45:2e:6e:3e:2c:a0:77:63:63:
d5:fb:f0:69:d8:3d:e7:af:d7:ed:d9:1e:07:3c:bb:4f:b6:79:
34:43:ab:83:da:40:28:5b:57:cd:8e:7a:ad:7a:e2:bd:48:b3:
d4:1a:f1:a6:c4:2d:34:8e:38:c1:d7:01:22:6f:0c:7f:9d:76:
cf:a8:a1:cd:21:aa:f0:e1:7e:a1:b4:52:8e:98:3e:23:df:66:
04:ac:04:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:49:30 2025 by rpki-client