Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
File: mrlC3a28mskLTs---tsjEyOmcFU.mft (raw, json)
Hash identifier: ee6MfnykLC7rJNiSiNFpli48dH7yl44Pwvkaw31Cgsg=
Subject key identifier: 55:DF:01:44:50:E1:FD:84:E7:5F:79:6C:91:CD:1B:15:B5:78:25:92
Authority key identifier: 9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55
Certificate issuer: /CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055
Certificate serial: 019A72263C9D0EAAB1C5A733F587D8C84447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
Manifest number: 0E04
Signing time: Tue 11 Nov 2025 09:01:39 +0000
Manifest this update: Tue 11 Nov 2025 09:01:39 +0000
Manifest next update: Wed 12 Nov 2025 09:01:39 +0000
Files and hashes: 1: mrlC3a28mskLTs---tsjEyOmcFU.crl (hash: FBd9IYD90TrzZB91eOF/0YhQCsTAj3lSbgZFa6cbfN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:3c:9d:0e:aa:b1:c5:a7:33:f5:87:d8:c8:44:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055
Validity
Not Before: Nov 11 09:01:39 2025 GMT
Not After : Nov 12 09:01:39 2025 GMT
Subject: CN=55df014450e1fd84e75f796c91cd1b15b5782592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:44:09:a8:29:bf:15:65:7c:75:9f:ee:5e:ea:
58:cd:62:ed:ef:1a:31:95:40:00:1d:13:5b:ea:4f:
47:a7:03:c2:81:b8:c3:13:c8:4f:13:2c:20:ad:ed:
99:df:af:94:2c:9c:54:df:d5:b6:27:1c:01:9a:b7:
de:01:d1:44:01:a1:11:91:83:45:33:75:8a:dd:b7:
96:2e:a1:9a:41:ce:aa:dc:b3:b2:25:71:f7:b4:1f:
eb:8a:22:af:01:66:be:4d:b1:06:be:e8:92:77:d3:
51:9d:61:0f:bc:a2:f2:88:6c:4b:43:31:de:75:43:
47:f4:e1:63:1c:73:03:25:a6:02:a3:ac:f7:62:df:
dc:36:01:b5:98:6a:41:59:60:fd:0d:07:16:8b:12:
c2:b8:9c:43:15:1d:07:97:33:6f:15:14:e4:98:3f:
95:f3:ce:64:73:b0:4a:d1:a0:c7:55:61:a5:29:63:
45:0d:2a:cb:03:65:03:8a:2e:c9:61:d3:6e:a0:bb:
fa:77:e1:bd:f3:95:68:30:ed:e2:c2:1c:24:2c:05:
f1:f4:1a:35:d5:6b:bf:8d:02:a6:20:5a:24:3a:2b:
26:e0:a2:9f:84:78:90:3a:f4:6e:43:68:ad:ee:c7:
ae:e7:66:04:66:f6:d6:f0:e1:22:24:c0:82:d2:60:
cf:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DF:01:44:50:E1:FD:84:E7:5F:79:6C:91:CD:1B:15:B5:78:25:92
X509v3 Authority Key Identifier:
keyid:9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:17:35:2d:29:b5:69:ca:65:e3:d1:84:88:64:1e:d3:9e:73:
00:bb:8c:c0:36:f3:db:59:c9:b1:7e:36:bf:cb:ee:ba:15:6a:
2e:6a:a5:38:6e:06:13:18:31:ea:b7:56:1c:11:ad:ef:fd:76:
fd:ab:c2:5f:a6:18:a1:1c:1e:dd:87:d5:fc:e9:c3:26:11:bb:
88:98:78:0f:41:64:ea:e0:a9:61:08:80:30:c0:3a:4b:fa:ad:
62:f2:b3:07:28:79:c1:c1:a4:98:8b:19:f2:29:8f:20:81:ad:
54:41:39:64:9c:e9:2f:36:04:2b:99:b4:33:fa:8f:ea:f0:c8:
97:39:8c:8d:c4:93:9c:2a:75:c1:86:03:88:02:47:9f:02:24:
0c:67:e9:7e:e3:43:59:45:64:ae:81:bb:81:f4:89:2b:3e:6a:
09:cd:5b:ea:a1:5c:c2:cb:f5:6e:d4:73:cb:84:67:0a:99:6f:
a4:c7:fe:0c:35:11:5a:b3:e7:38:1e:88:24:6d:bc:19:4a:c6:
e9:d0:d7:2f:93:e7:87:b3:c9:7b:f2:ec:f2:e6:1d:0a:4a:2e:
c7:26:f1:3e:56:0b:5a:9d:7e:52:1f:a6:63:41:de:f3:54:a3:
83:ae:29:40:93:6f:bc:c3:26:e4:41:7f:c4:e0:e9:6b:be:41:
fb:ef:84:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:01 2025 by rpki-client