Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft
File: mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft (raw, json)
Hash identifier: lb611eSapWMqEOSim5Rd980MjlsLnlDLRpBk6kPPzi4=
Subject key identifier: 49:28:C7:52:3D:46:82:36:17:78:F6:EF:AA:74:F4:B6:65:7F:B5:CF
Authority key identifier: 9A:B0:24:01:50:AC:0D:9D:F3:BB:9C:57:2E:31:C8:75:85:88:20:69
Certificate issuer: /CN=9ab0240150ac0d9df3bb9c572e31c87585882069
Certificate serial: 019A503E1EFF145B97B7AC7984C7B5918744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft
Manifest number: 074D
Signing time: Tue 04 Nov 2025 19:00:39 +0000
Manifest this update: Tue 04 Nov 2025 19:00:39 +0000
Manifest next update: Wed 05 Nov 2025 19:00:39 +0000
Files and hashes: 1: mrAkAVCsDZ3zu5xXLjHIdYWIIGk.crl (hash: fLZTiPxq23JmPmruVh+H28nFf2Bw+C2L9TIUlNXMTiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:1e:ff:14:5b:97:b7:ac:79:84:c7:b5:91:87:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab0240150ac0d9df3bb9c572e31c87585882069
Validity
Not Before: Nov 4 19:00:39 2025 GMT
Not After : Nov 5 19:00:39 2025 GMT
Subject: CN=4928c7523d4682361778f6efaa74f4b6657fb5cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:01:9f:aa:cb:08:d9:dc:29:f5:f1:ba:49:60:
44:f9:50:3c:7f:b3:df:78:b5:12:79:4d:4a:6e:f9:
d8:92:5a:43:d0:f0:a7:8a:77:11:91:e6:58:74:a4:
16:fa:58:76:64:bf:d4:48:ac:95:60:0a:77:93:b4:
49:33:b3:fe:ce:fa:ce:3f:72:32:5c:27:9f:23:78:
77:d4:e5:aa:57:41:ad:9d:ed:85:98:d3:24:c7:cf:
4f:3d:a3:7f:14:63:0a:82:5d:58:70:0d:23:43:3c:
0c:9d:bd:ef:e8:af:1f:25:f3:24:f0:b3:b0:c6:1b:
f9:04:31:8c:bf:2e:a1:3d:da:77:ac:6d:58:1d:65:
d5:f5:1d:06:e1:e5:5e:34:86:8f:77:29:d3:46:14:
42:ba:0c:83:3f:8c:a3:78:39:76:01:1d:e7:80:b1:
c8:2e:86:73:d5:f9:90:e4:62:a1:b2:4c:96:28:94:
77:59:06:59:60:0d:33:e8:a8:00:25:be:78:ab:7f:
51:27:c7:92:cb:ee:dd:6d:8a:02:f6:b4:8e:9f:de:
f3:c2:10:9e:0f:13:0e:6c:cf:14:57:8b:6a:62:38:
c5:df:70:69:bc:81:5d:2d:4a:46:e1:3f:50:da:34:
2a:b8:00:70:76:3e:a5:31:10:9e:48:7a:4c:10:60:
c9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:28:C7:52:3D:46:82:36:17:78:F6:EF:AA:74:F4:B6:65:7F:B5:CF
X509v3 Authority Key Identifier:
keyid:9A:B0:24:01:50:AC:0D:9D:F3:BB:9C:57:2E:31:C8:75:85:88:20:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:14:38:3e:6b:26:c9:3c:a7:ab:12:72:97:fe:79:fc:2c:da:
7d:28:f5:eb:e2:a0:8f:14:0a:05:6b:dc:e8:15:96:d3:ea:e8:
38:88:4e:a7:c7:a7:b5:f3:e5:71:5e:67:92:85:8a:bc:a3:ed:
96:18:c8:5e:96:c8:8e:22:0e:9e:74:1c:4d:73:73:c5:33:95:
32:a5:af:9a:c9:be:b1:31:39:f8:97:ee:0e:c9:38:1d:ed:0e:
8e:bf:06:a3:36:35:85:de:68:ae:c4:21:fe:60:47:41:b4:f6:
98:cd:fe:b4:62:21:d4:fb:2f:7b:f7:3a:2f:d0:b0:a6:04:49:
2f:b9:dd:7c:47:67:56:2d:9f:e4:0d:46:80:5e:77:5f:19:b6:
c0:c1:04:ec:b7:04:0b:78:4a:ab:8f:1c:8f:95:7a:3b:ab:e2:
a9:77:c5:96:74:bc:7a:0f:62:02:cb:cd:67:88:3f:1f:db:de:
f2:66:cc:0c:94:84:2b:f3:a3:af:43:ed:d7:aa:0d:05:97:aa:
3f:53:48:be:c2:af:2b:d7:81:59:53:64:6e:d0:df:33:91:00:
c2:57:18:83:73:ba:64:60:1f:5b:04:2c:12:44:96:02:c6:2b:
1b:0f:42:ce:82:ab:ce:33:63:df:43:65:2a:5e:ce:e0:de:ff:
f5:8b:05:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:17:23 2025 by rpki-client