
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft
File: MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft (raw, json)
Hash identifier: +yqUW/RYFv8+dZv9yanahnDdBvwOMiR3dceboG+0MdQ=
Subject key identifier: 15:73:41:20:3B:09:66:3A:B4:FB:01:10:A3:42:D4:41:18:59:AD:61
Authority key identifier: 31:B1:62:1C:E2:8C:BB:FE:F0:38:AB:D7:54:9F:C6:CB:50:E7:11:6B
Certificate issuer: /CN=31b1621ce28cbbfef038abd7549fc6cb50e7116b
Certificate serial: 01987DF812CAA0826C083C005BDF001CA6D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft
Manifest number: 090D
Signing time: Wed 06 Aug 2025 06:01:06 +0000
Manifest this update: Wed 06 Aug 2025 06:01:06 +0000
Manifest next update: Thu 07 Aug 2025 06:01:06 +0000
Files and hashes: 1: MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.crl (hash: AHYVJl0L+VBC9MtePuf55PZFXjPpgOuaBHYQJK92cgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:12:ca:a0:82:6c:08:3c:00:5b:df:00:1c:a6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b1621ce28cbbfef038abd7549fc6cb50e7116b
Validity
Not Before: Aug 6 06:01:06 2025 GMT
Not After : Aug 7 06:01:06 2025 GMT
Subject: CN=157341203b09663ab4fb0110a342d4411859ad61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6a:d8:4e:86:68:06:5d:6d:40:d6:4c:43:91:
de:4f:9e:36:6c:01:cf:01:2b:0c:f2:62:20:52:55:
62:b6:92:96:39:2d:23:e0:91:8f:33:29:46:20:55:
b6:59:e9:7b:75:ab:15:65:28:34:b3:e2:f1:1f:b8:
ba:ff:59:57:34:96:72:2d:e6:a8:2f:38:3f:07:05:
9b:a1:d6:26:c8:2b:6a:86:51:a2:81:ae:38:95:5f:
cd:e0:97:31:ef:dd:da:3e:a4:ee:95:cb:10:1b:0f:
cc:59:2b:74:f3:31:32:07:29:87:8f:50:2e:da:48:
99:ba:a0:fb:e0:d3:46:34:79:1b:46:ea:fc:b7:8f:
3d:90:fa:fe:2c:54:40:29:ca:34:ab:6d:21:22:cf:
76:a5:1b:4b:75:67:06:eb:d2:0e:83:4e:1a:eb:de:
6b:a0:77:5f:0d:6f:0b:b2:fa:80:bf:00:1e:e6:01:
c8:f5:72:16:8f:b6:4a:02:a1:39:b4:97:6f:ef:2a:
55:7c:7e:26:49:cd:80:a0:b5:49:54:f8:be:af:1e:
d7:90:1f:8e:4e:85:d6:9f:f1:5f:d7:62:4b:29:53:
4f:7f:24:0d:c3:fe:48:c7:1b:c7:30:81:68:45:7a:
c1:8c:51:e0:ca:1a:77:1b:6a:18:c2:ef:6b:39:20:
0e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:73:41:20:3B:09:66:3A:B4:FB:01:10:A3:42:D4:41:18:59:AD:61
X509v3 Authority Key Identifier:
keyid:31:B1:62:1C:E2:8C:BB:FE:F0:38:AB:D7:54:9F:C6:CB:50:E7:11:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/20602c-8de4-4dec-8b24-6614632723b9/1/MbFiHOKMu_7wOKvXVJ_Gy1DnEWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:52:91:85:d3:b9:24:9d:98:69:57:36:bf:3b:82:e7:3a:24:
98:76:13:31:bf:38:af:d8:66:85:d9:6b:4e:bc:12:4a:f9:aa:
82:a8:d9:3a:53:ef:8b:49:04:17:b3:e6:28:17:4e:00:d8:6e:
40:29:a5:e4:82:78:47:40:c9:e4:c0:53:32:a1:42:f7:8d:bd:
99:2f:12:f0:ed:a4:72:ca:4d:2c:73:7b:a6:63:9e:76:20:31:
7e:c0:77:2f:2f:9a:93:8a:27:b6:67:7a:bb:10:8d:b6:62:f4:
68:74:6b:1b:bc:6d:ef:61:a3:1c:f0:48:3e:fc:50:18:49:fc:
1b:39:f0:45:03:60:22:a6:f9:01:d5:85:78:1b:72:85:26:83:
ad:a4:f1:b8:7d:1c:92:97:89:f0:ac:77:12:68:5f:be:7b:5b:
e0:86:a2:79:3d:67:2c:80:6f:fe:85:a6:72:83:27:02:f5:cf:
fd:95:d7:7e:c7:b9:6b:d4:e0:1e:05:9b:7e:20:02:ce:54:db:
ee:74:f6:1b:bb:a2:16:bb:ad:0e:b2:30:36:47:4c:11:57:c0:
aa:2a:77:86:7f:9c:24:6c:3f:e3:de:82:02:26:00:a1:e4:4d:
af:7a:00:c0:28:94:5d:89:7d:37:d2:18:e6:b6:6e:ff:b5:be:
91:88:79:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:08:37 2025 by rpki-client