
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft
File: mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft (raw, json)
Hash identifier: D6q7roUFLI+auXBnewnp3Vrg5tElO3BIhhCFt6loqxE=
Subject key identifier: D2:C8:BC:28:E3:F6:AB:73:2A:2F:5D:E2:6E:0A:B7:5D:9E:AF:8D:61
Authority key identifier: 9A:B0:24:01:50:AC:0D:9D:F3:BB:9C:57:2E:31:C8:75:85:88:20:69
Certificate issuer: /CN=9ab0240150ac0d9df3bb9c572e31c87585882069
Certificate serial: 01987CE5C6E62D772AD84181D36EB8FC5635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft
Manifest number: 065B
Signing time: Wed 06 Aug 2025 01:01:29 +0000
Manifest this update: Wed 06 Aug 2025 01:01:29 +0000
Manifest next update: Thu 07 Aug 2025 01:01:29 +0000
Files and hashes: 1: mrAkAVCsDZ3zu5xXLjHIdYWIIGk.crl (hash: CyixyxSVIEDRfKOQSp1KNtzK+pZFoQf5V4VGMD3Yn98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:c6:e6:2d:77:2a:d8:41:81:d3:6e:b8:fc:56:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab0240150ac0d9df3bb9c572e31c87585882069
Validity
Not Before: Aug 6 01:01:29 2025 GMT
Not After : Aug 7 01:01:29 2025 GMT
Subject: CN=d2c8bc28e3f6ab732a2f5de26e0ab75d9eaf8d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5b:42:d3:83:16:fe:90:af:84:f6:0d:8d:71:
2c:39:f7:74:5e:f8:15:f2:e1:15:ba:69:f3:ab:ea:
24:d3:b2:56:0a:c9:9e:1d:1b:fd:a1:8c:0f:be:87:
d4:59:14:8a:67:55:69:2f:8b:51:11:10:e3:08:0c:
4c:92:e9:59:85:c5:87:5a:be:02:4c:14:85:39:a5:
16:06:41:0a:22:71:33:2e:86:45:a3:ca:05:56:f1:
15:42:af:c7:5a:25:0c:92:de:7a:47:c4:0a:b7:21:
0d:7e:2a:ac:61:8d:99:c3:ac:4d:fc:ae:8d:42:57:
a3:1f:c7:f9:3e:2f:d9:58:9b:99:fa:92:59:0c:b8:
57:d0:3c:87:93:5e:c0:79:23:c3:db:0b:8b:b2:6e:
b1:d3:fe:3b:ef:50:3f:07:47:a6:ec:60:f5:61:0b:
4b:5c:b0:80:11:0a:1f:3e:43:dc:c1:e1:39:dd:5d:
ea:91:02:86:16:3b:ab:2e:47:52:20:3b:96:e4:44:
b9:fa:cd:42:2a:81:86:b9:d9:df:a2:20:3d:33:9b:
14:4d:67:5b:24:2b:02:6e:e1:3b:2b:dc:47:03:0b:
7c:1e:64:7f:51:12:19:9c:a6:ed:de:10:9a:e7:ca:
b0:5a:44:c8:e6:4f:f9:f2:9f:76:7f:ea:12:c6:a6:
1b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C8:BC:28:E3:F6:AB:73:2A:2F:5D:E2:6E:0A:B7:5D:9E:AF:8D:61
X509v3 Authority Key Identifier:
keyid:9A:B0:24:01:50:AC:0D:9D:F3:BB:9C:57:2E:31:C8:75:85:88:20:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d6:e4:7b:89:5b:b6:58:92:cc:15:73:44:04:53:8f:d9:03:
c4:a0:87:fa:25:f9:79:de:f0:b4:37:8f:5e:2e:b4:18:a0:a0:
a7:97:44:21:76:d3:c9:86:fc:67:65:8d:b9:ae:0b:52:17:72:
36:a1:d6:fa:0b:7e:1a:8b:4f:c9:e7:41:58:af:03:c7:08:ec:
12:64:70:ac:8e:aa:a4:2b:a9:3e:c4:f1:10:45:ed:68:04:18:
3a:e5:88:c7:44:78:2a:87:b8:b1:4c:5e:4e:d9:b9:44:ce:e0:
7f:cb:ff:49:2f:69:b0:78:80:ec:6b:88:e9:13:a2:36:8b:a3:
bd:71:63:02:53:8d:04:3e:24:a3:6f:e6:12:97:38:0c:71:af:
31:3a:81:9a:0f:4e:05:dc:52:7a:bb:01:49:b1:19:65:78:1a:
5e:bc:5f:63:e4:d7:40:ea:bf:ef:b2:9f:d5:0b:99:68:93:2b:
e6:3f:3c:1e:fb:42:91:c5:d7:7d:ad:46:84:2e:f8:05:97:75:
62:38:c6:d0:91:25:2f:44:f2:35:c4:58:21:cf:ef:39:d0:f2:
f9:2f:93:4c:53:a9:f0:8d:31:9b:13:ac:51:1f:46:aa:de:5e:
00:a1:0f:75:fa:fe:c7:2d:56:5f:fa:58:fd:43:d1:1a:c5:23:
2f:c3:f6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:07:38 2025 by rpki-client