Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
File: MxpRr9TLZoLCMN7WQGWMETxWL9I.mft (raw, json)
Hash identifier: 2t47AT6BmAifWk7CDaTpO9SJU5fAYddXqttYbRkqnV0=
Subject key identifier: DD:A4:59:18:36:A9:31:20:81:83:F2:97:99:BE:07:59:20:3B:27:37
Authority key identifier: 33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2
Certificate issuer: /CN=331a51afd4cb6682c230ded640658c113c562fd2
Certificate serial: 019921E7681D0F68A33A6F7C70B0F418569C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
Manifest number: 08BF
Signing time: Sun 07 Sep 2025 02:00:37 +0000
Manifest this update: Sun 07 Sep 2025 02:00:37 +0000
Manifest next update: Mon 08 Sep 2025 02:00:37 +0000
Files and hashes: 1: MxpRr9TLZoLCMN7WQGWMETxWL9I.crl (hash: mVThpb0Z2pkQZuVF9HYK8ufgBDBjaIG/c1ipAEqSf3A=)
2: TS9TQNQnmKCUyfNW3iHSrKN4kHU.roa (hash: FKmub+udVUMJc6SCu1H3/G3fAnw8GwGXkDsFmXaZ8+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:68:1d:0f:68:a3:3a:6f:7c:70:b0:f4:18:56:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331a51afd4cb6682c230ded640658c113c562fd2
Validity
Not Before: Sep 7 02:00:37 2025 GMT
Not After : Sep 8 02:00:37 2025 GMT
Subject: CN=dda4591836a931208183f29799be0759203b2737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8e:1d:f0:3f:24:51:4b:f1:2f:a2:f0:79:c1:
ac:40:24:66:6b:19:ec:b2:03:d0:57:27:62:90:ec:
89:d1:a6:e9:1f:8c:eb:9c:8d:c8:de:7d:29:31:61:
dd:33:ca:cf:13:9a:a9:38:d9:ab:12:47:ed:77:31:
2b:e4:72:f9:46:46:ba:71:10:a0:21:62:7e:b1:0a:
da:db:0b:c3:81:db:69:c0:7a:d0:f6:23:cd:87:0d:
84:3e:66:8e:b0:28:d2:e4:f6:e7:f0:41:40:07:c4:
16:f3:30:21:dc:b4:64:32:7e:61:6d:c2:61:ec:84:
90:8a:59:67:96:a4:d3:8d:7d:27:ec:b1:fe:ba:99:
03:8a:94:54:bf:5c:b7:75:c0:94:9f:76:3a:b9:15:
e4:a6:87:1f:d4:76:49:06:80:9a:94:89:b0:c2:8a:
bf:24:7d:df:04:e4:1f:70:e1:7d:30:83:ac:87:da:
22:d8:f5:b5:5f:a6:98:87:5d:fb:01:a5:00:3d:c8:
18:5d:5a:bd:61:a4:f1:68:b8:96:24:4d:3d:5d:d0:
95:cd:48:0a:42:06:b5:7e:80:a8:d1:29:cb:af:d8:
b7:69:ac:44:da:55:40:3f:ea:25:64:58:3b:2f:71:
27:ca:23:e0:f8:6c:65:60:68:94:94:4f:78:1f:85:
7a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A4:59:18:36:A9:31:20:81:83:F2:97:99:BE:07:59:20:3B:27:37
X509v3 Authority Key Identifier:
keyid:33:1A:51:AF:D4:CB:66:82:C2:30:DE:D6:40:65:8C:11:3C:56:2F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxpRr9TLZoLCMN7WQGWMETxWL9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1cdbb1-e265-44c5-b980-4a566add54b2/1/MxpRr9TLZoLCMN7WQGWMETxWL9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:06:b4:c2:d5:fd:f2:a3:71:d2:66:70:21:c6:a8:74:52:1c:
af:47:d1:7a:36:53:34:dc:61:3e:69:2f:9f:a2:66:70:80:cb:
89:3a:7d:68:03:e8:c2:71:d7:a9:52:85:74:5f:3d:ee:b4:ba:
e1:7f:f4:bc:2c:87:e2:e3:1e:06:8e:63:a7:59:e1:d3:bb:d3:
f0:ee:a7:91:06:48:7b:4b:1a:36:4a:f9:b9:84:27:47:4b:a7:
2b:54:15:d3:2d:ae:59:b5:4b:81:93:61:b3:4e:ff:90:8f:d4:
2b:de:a0:43:2a:0e:58:6e:fd:72:3c:db:d3:16:63:ef:0a:6f:
b1:4f:89:d1:ee:be:8f:40:ce:5a:f7:9d:eb:a8:5b:d8:e9:74:
b2:51:bd:f2:9a:d2:3c:20:55:78:e5:d6:4d:9e:ab:f1:98:5d:
75:d5:ae:b5:95:9a:1e:d9:22:1a:df:76:39:1d:d6:be:07:aa:
39:80:ea:a0:b7:f6:be:77:4c:2b:9d:8a:bd:f5:3a:a6:81:e8:
19:4c:0c:29:e1:36:04:e0:ac:c1:6b:05:2c:76:2a:9d:6f:1b:
3b:b4:2b:e7:25:8a:d0:1a:4b:b4:91:84:cf:89:36:78:b4:56:
22:5a:d6:63:f8:50:c7:bf:91:e2:56:04:79:c9:68:ad:ae:8c:
a1:2f:12:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:54:00 2025 by rpki-client