Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
File: mrlC3a28mskLTs---tsjEyOmcFU.mft (raw, json)
Hash identifier: 1I/wZxw1fzt2t0X4kn373Rf+deqcmom0ihEjK3m54N0=
Subject key identifier: B9:BF:04:7E:9D:CD:75:41:F8:9F:D2:27:17:7F:05:39:29:7D:B2:B0
Authority key identifier: 9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55
Certificate issuer: /CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055
Certificate serial: 0199221F1BA6D5271272279D3B33E499DE4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
Manifest number: 0D56
Signing time: Sun 07 Sep 2025 03:01:27 +0000
Manifest this update: Sun 07 Sep 2025 03:01:27 +0000
Manifest next update: Mon 08 Sep 2025 03:01:27 +0000
Files and hashes: 1: mrlC3a28mskLTs---tsjEyOmcFU.crl (hash: PF9UH0TP38Lr8kxCu0LUqRiydmhQJrWwk/lB6WbYIec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:1b:a6:d5:27:12:72:27:9d:3b:33:e4:99:de:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055
Validity
Not Before: Sep 7 03:01:27 2025 GMT
Not After : Sep 8 03:01:27 2025 GMT
Subject: CN=b9bf047e9dcd7541f89fd227177f0539297db2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:7f:ea:32:0f:17:4b:19:c7:ef:bf:f1:ac:
a7:e7:11:87:d3:e7:b5:cd:47:68:07:42:28:4e:8d:
7b:da:52:28:5c:21:a5:5b:b6:b2:56:1d:50:af:7b:
1c:56:77:b1:0f:ac:16:ca:b5:bc:38:ce:e5:39:fa:
6e:a6:03:74:09:68:4b:d7:2a:78:b3:12:03:cc:11:
72:09:d7:5c:7d:61:22:27:3d:76:14:67:03:2e:48:
46:d2:41:f4:cb:00:61:5e:94:5c:0e:db:4a:db:19:
d5:59:f8:41:3f:ec:58:79:e9:76:35:64:d5:7c:5a:
05:d1:89:fb:46:04:29:23:72:8c:35:2b:45:68:07:
52:cc:ec:a9:1c:a8:24:3a:8d:3c:2d:a4:5d:40:f7:
bb:3e:60:f4:41:8f:60:59:78:c3:9e:86:7c:e3:13:
15:81:41:e3:81:47:60:55:cb:96:8b:36:31:e7:3d:
06:7d:49:c4:30:d5:04:9e:02:1c:9a:10:89:d0:60:
b8:65:01:67:82:e6:72:7a:87:d6:11:5b:ff:8c:3b:
55:83:91:ab:47:0b:a3:d5:fa:d1:6e:03:66:9c:e2:
31:0e:d1:c0:0c:85:54:93:d5:e8:03:04:1a:e8:bd:
67:19:87:08:22:3e:59:02:be:35:b3:51:e5:b1:98:
cd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BF:04:7E:9D:CD:75:41:F8:9F:D2:27:17:7F:05:39:29:7D:B2:B0
X509v3 Authority Key Identifier:
keyid:9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:67:aa:c0:70:c0:e8:27:5d:3f:b5:7a:72:86:78:ce:a7:29:
1d:3e:1c:3f:e7:f4:a3:7d:f0:34:7e:b2:b3:db:47:97:5d:59:
ff:4b:18:2d:ba:e6:fb:d1:fe:7a:47:26:4c:51:46:26:6d:d5:
80:39:24:cc:35:5f:7d:25:df:8d:1e:25:b8:66:ca:3e:24:a2:
37:6d:9b:84:ff:db:fa:7b:09:f4:ef:cc:ad:22:34:ae:3c:19:
43:db:47:45:0a:39:72:38:80:bc:2f:1d:41:35:b6:87:1c:88:
6a:e4:4d:32:49:4d:1f:ef:88:66:26:69:fb:fa:b9:9e:ef:dd:
1b:9f:73:e9:18:95:f2:e1:75:73:d0:f0:c1:a7:ca:9e:4a:ae:
d3:82:b0:66:11:a6:10:f2:ee:24:ec:71:38:ef:9d:df:62:eb:
90:40:3d:da:2e:31:10:ac:6f:7f:de:fc:38:09:b5:13:69:f5:
9e:24:d6:b3:11:78:cc:75:ef:25:0c:a4:b7:8d:5f:a2:1e:d2:
e7:fe:f4:46:ec:5f:f5:17:be:45:b4:e2:3f:4e:90:28:33:ea:
56:3e:f7:00:d5:06:84:5c:ad:1c:69:40:b0:f4:22:f9:35:d7:
a1:70:f3:7d:eb:0a:71:71:e1:e1:03:29:29:f8:ec:89:39:a2:
41:74:b7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:49 2025 by rpki-client