Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
File: mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft (raw, json)
Hash identifier: LFwVgga3LW2zJwfoCSoLreiGM70XVNJYREhrTojO/2c=
Subject key identifier: E1:73:A6:03:20:79:EF:37:EE:10:C1:73:E5:2D:78:04:85:1C:41:F4
Authority key identifier: 9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9
Certificate issuer: /CN=9ab571b69af85650affedcefe57d2a73fd6e6ca9
Certificate serial: 019A52D179B0BD5E0665C545AE93E7FEC4DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
Manifest number: 0CFB
Signing time: Wed 05 Nov 2025 07:00:51 +0000
Manifest this update: Wed 05 Nov 2025 07:00:51 +0000
Manifest next update: Thu 06 Nov 2025 07:00:51 +0000
Files and hashes: 1: mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl (hash: ivNpyCg+NVUp4HCYdy+X1JQNO9LiYPB6KRF2RnJO4FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:79:b0:bd:5e:06:65:c5:45:ae:93:e7:fe:c4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab571b69af85650affedcefe57d2a73fd6e6ca9
Validity
Not Before: Nov 5 07:00:51 2025 GMT
Not After : Nov 6 07:00:51 2025 GMT
Subject: CN=e173a6032079ef37ee10c173e52d7804851c41f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c9:7e:31:79:57:ca:57:ed:d8:fb:cb:a0:87:
2f:a2:59:46:a8:f0:64:30:0e:0e:38:67:bb:98:3b:
bd:b1:a7:86:9e:32:28:91:c5:89:a4:84:32:fe:04:
2b:e8:0d:1a:45:b5:7b:40:7c:8b:43:b0:90:f4:32:
fb:14:dd:05:34:0f:85:0d:fb:57:09:65:da:f4:0c:
43:6e:91:20:9b:10:9b:b7:6f:15:d3:a0:d3:43:dc:
98:f8:de:d9:c4:9c:04:51:1d:5a:94:6b:c8:2c:54:
b4:af:9c:a1:22:b8:66:08:af:f1:fe:e9:67:7d:ff:
bc:32:3d:4c:9f:e6:72:cc:33:98:69:6a:6f:54:dd:
74:f5:65:2f:f0:4c:08:16:69:5f:d8:81:e3:e8:98:
04:2f:f7:b6:53:c2:a7:97:43:dc:0b:0c:df:d3:e9:
a7:c4:a0:4f:ce:71:ca:dd:19:7d:6a:c9:9b:8d:7a:
d2:28:72:2a:6a:ea:ed:7e:c1:36:87:01:25:b3:64:
da:97:28:c5:69:2c:2e:ae:67:7a:8d:28:32:89:e1:
b1:6d:9c:00:03:e3:bd:e3:ab:b8:74:fe:37:8b:6d:
86:22:6f:e2:3e:55:88:ae:10:e5:e0:9b:f4:48:7b:
43:d3:19:a4:5b:25:3e:d3:1a:8f:c0:dd:5d:10:76:
87:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:73:A6:03:20:79:EF:37:EE:10:C1:73:E5:2D:78:04:85:1C:41:F4
X509v3 Authority Key Identifier:
keyid:9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ad:65:c7:34:62:b8:a8:a2:ea:13:ab:f6:ad:22:bd:d8:4e:
5e:c9:44:86:9f:5a:14:29:2e:c2:71:39:a5:4d:2e:8a:93:a1:
c4:41:88:b8:26:1e:c6:3a:3c:b2:4d:31:91:af:8d:e9:6f:7d:
1e:5f:9f:8d:e6:c1:3c:07:6e:20:53:13:1b:00:6a:4b:4d:db:
36:81:63:9e:76:4b:3f:3e:0a:89:66:6b:bd:b3:bc:9b:eb:4e:
1e:ef:94:1c:e9:05:cc:1b:eb:c3:66:58:20:78:e3:b6:36:ca:
c4:d4:cf:2e:9d:0e:eb:95:90:c8:a3:98:dd:bc:f2:c4:21:18:
62:e8:d5:af:af:2c:3a:30:55:97:48:c4:39:a1:12:71:62:99:
a1:45:41:eb:e6:72:8e:6d:b5:3e:7a:01:60:94:7c:37:b7:5b:
06:91:6f:63:9a:f0:b6:af:ff:27:52:2f:d7:77:8d:c7:1d:35:
90:aa:4b:56:ce:c2:a5:38:c9:3a:26:58:a2:d6:c3:7f:8d:3d:
5f:97:b3:1f:f7:28:74:81:d3:af:66:cb:30:b2:c3:20:59:2f:
f3:14:19:8b:4b:01:12:78:dd:a5:2d:e2:e6:e4:b7:8f:b2:41:
df:87:f0:94:c4:54:9c:ab:78:7d:82:7b:07:d3:bb:f7:d1:67:
57:52:c4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:06:53 2025 by rpki-client