
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
File: mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft (raw, json)
Hash identifier: 7UOoDnpPrt189+3Z0gk3kxfKGQZK3jIYcKZrfVQXtlU=
Subject key identifier: B2:D2:7E:BC:3B:1C:9D:C3:A8:65:FE:B5:13:77:66:9A:8C:4E:F5:4E
Authority key identifier: 9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9
Certificate issuer: /CN=9ab571b69af85650affedcefe57d2a73fd6e6ca9
Certificate serial: 019883557E1CD52E7553CC95986F11B7B430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
Manifest number: 0C0B
Signing time: Thu 07 Aug 2025 07:01:14 +0000
Manifest this update: Thu 07 Aug 2025 07:01:14 +0000
Manifest next update: Fri 08 Aug 2025 07:01:14 +0000
Files and hashes: 1: mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl (hash: JCDbxQx7YcQGzFTDZ9ZMdnaDZ04VjzfZ4LjS0w473zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:55:7e:1c:d5:2e:75:53:cc:95:98:6f:11:b7:b4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab571b69af85650affedcefe57d2a73fd6e6ca9
Validity
Not Before: Aug 7 07:01:14 2025 GMT
Not After : Aug 8 07:01:14 2025 GMT
Subject: CN=b2d27ebc3b1c9dc3a865feb51377669a8c4ef54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:31:18:2f:d9:76:c9:08:3e:03:ac:23:1c:fa:
60:1c:22:4e:26:e0:1c:dc:fc:6f:59:3a:a4:71:13:
5e:13:35:71:8c:2d:ce:26:ec:fe:57:e2:76:13:2b:
de:3a:1f:e3:ee:a5:cf:a0:ad:47:0c:6c:d5:4c:76:
44:97:53:b1:6e:f8:f5:0c:ca:ce:e9:a2:8f:cc:8a:
86:40:f9:45:44:dd:c1:74:d1:60:28:cb:ef:4b:ec:
88:6d:58:97:86:8e:07:44:1c:09:57:5a:af:ca:17:
4f:9a:8d:68:1a:ef:10:63:0a:37:fd:35:67:e9:df:
d9:16:43:fe:e8:a1:fb:f8:95:ca:d6:87:1a:3b:20:
c6:de:0c:c5:b1:79:24:a6:8d:f7:53:c1:00:28:23:
1a:eb:40:66:46:d2:73:b6:94:3d:07:30:70:0d:fa:
39:b5:f2:43:18:ab:77:65:c2:8d:aa:d7:37:04:dc:
2a:98:60:98:af:bd:40:67:f2:ae:2b:b8:f3:cf:ee:
e6:34:2f:80:90:3b:0e:a8:8f:a3:1d:a3:cc:b6:a7:
7e:ff:fe:26:2a:41:39:83:f9:1a:f8:16:e5:d5:97:
3e:68:f3:1e:0d:7a:eb:fd:ee:98:69:3e:e0:3a:2e:
ab:c8:46:16:73:ff:8e:85:6c:68:03:c7:5c:3e:af:
d3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D2:7E:BC:3B:1C:9D:C3:A8:65:FE:B5:13:77:66:9A:8C:4E:F5:4E
X509v3 Authority Key Identifier:
keyid:9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:7c:fe:87:b8:9b:8a:4d:69:16:45:93:84:f2:5c:d6:8d:0e:
04:a6:60:6e:6f:88:84:39:b2:45:6f:b8:69:a8:7c:0f:4a:f4:
28:f9:ec:59:e1:fc:c8:af:eb:1f:ae:62:c0:28:12:eb:d0:c9:
62:e6:ff:af:50:fa:b5:14:ce:61:80:a0:1d:5e:92:f8:2e:6e:
86:55:49:9c:de:2d:ca:a2:75:16:7d:3f:16:f3:5d:f2:8a:2f:
24:1f:41:47:74:ea:f6:90:fd:f7:e5:cc:dc:c6:2e:5d:15:40:
c5:f5:3b:a3:0b:f9:c6:70:7b:4e:1b:4d:3f:a6:e5:a6:08:a0:
6a:b8:93:29:ef:63:16:7e:48:13:40:8d:55:81:94:61:c3:59:
7b:85:bd:3c:ce:c6:9a:f0:96:a6:3c:ab:83:5d:ee:c4:3a:87:
32:16:da:73:8f:a0:fc:be:ba:f7:70:27:58:a8:99:66:0d:12:
31:92:a3:10:e1:7e:df:8f:d3:3d:f9:54:ee:39:23:b1:a3:07:
60:93:d4:09:92:59:ac:77:1c:31:d4:cb:0d:f3:e5:11:ed:c8:
6a:59:e9:f8:20:e1:fb:f1:6a:ce:6a:a0:ef:04:6a:0b:e5:b2:
c8:34:8d:a1:68:b2:45:80:12:08:e1:af:a6:10:39:ae:6f:99:
fc:5b:b3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:33:26 2025 by rpki-client