Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.mft
File: MfxYQJK_niCslRtZUN1PpxMgPMM.mft (raw, json)
Hash identifier: 8uLz98ZH5YvZ61C506UFYBwsQRcsPfVNjAHdpaEcHhs=
Subject key identifier: CE:5C:92:D8:D6:D4:99:B1:68:89:63:91:58:92:81:CC:73:3C:37:92
Authority key identifier: 31:FC:58:40:92:BF:9E:20:AC:95:1B:59:50:DD:4F:A7:13:20:3C:C3
Certificate issuer: /CN=31fc584092bf9e20ac951b5950dd4fa713203cc3
Certificate serial: 01988EED034D8F3779E50016534AA913FE55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfxYQJK_niCslRtZUN1PpxMgPMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.mft
Manifest number: 1043
Signing time: Sat 09 Aug 2025 13:02:33 +0000
Manifest this update: Sat 09 Aug 2025 13:02:33 +0000
Manifest next update: Sun 10 Aug 2025 13:02:33 +0000
Files and hashes: 1: MfxYQJK_niCslRtZUN1PpxMgPMM.crl (hash: MQ/yxTa6XgqO+AsXit+CZ8E/dDsDhkoaX+lWBiF9DF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MfxYQJK_niCslRtZUN1PpxMgPMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ed:03:4d:8f:37:79:e5:00:16:53:4a:a9:13:fe:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31fc584092bf9e20ac951b5950dd4fa713203cc3
Validity
Not Before: Aug 9 13:02:33 2025 GMT
Not After : Aug 10 13:02:33 2025 GMT
Subject: CN=ce5c92d8d6d499b168896391589281cc733c3792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1f:85:60:cf:bf:33:5f:13:c9:07:d7:a3:28:
1c:c1:17:a4:9a:67:57:c4:74:f9:3c:eb:68:3b:ee:
e0:81:c3:17:6e:80:c2:47:ab:e4:d1:98:14:2a:2a:
60:4f:b5:b0:8d:d6:5c:26:af:69:f6:5e:b7:53:cd:
70:a6:69:48:5d:ad:34:af:3c:26:15:38:e1:77:8c:
09:3a:86:79:6e:dc:45:ae:67:9e:42:b7:17:eb:f3:
a9:3f:b2:8f:2e:9e:8f:61:dd:07:e9:00:49:2c:57:
fa:e4:35:2f:a6:36:14:e4:8e:3d:ba:d1:f9:aa:75:
1f:6c:43:37:84:d5:4b:09:0a:cb:b8:dc:d8:6a:d3:
27:39:dc:65:79:86:7c:94:72:1a:54:34:e9:78:95:
73:6e:f8:92:62:49:80:ee:78:26:ed:dc:a9:c8:a3:
4f:0b:8e:e8:8a:3f:79:24:b9:19:81:09:6a:f4:05:
28:11:d0:75:ae:02:43:98:52:b0:75:fb:11:3d:45:
b7:1a:c0:1f:15:10:55:1c:d9:87:46:a3:d4:2b:4d:
47:c1:31:8b:65:73:2d:d7:c2:30:92:48:18:e7:6f:
da:02:92:31:62:ed:17:06:05:e7:13:e6:0b:dc:87:
ab:26:92:a8:3e:fd:4f:c7:f7:08:fc:33:36:22:7f:
c3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5C:92:D8:D6:D4:99:B1:68:89:63:91:58:92:81:CC:73:3C:37:92
X509v3 Authority Key Identifier:
keyid:31:FC:58:40:92:BF:9E:20:AC:95:1B:59:50:DD:4F:A7:13:20:3C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfxYQJK_niCslRtZUN1PpxMgPMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:9e:c0:32:49:fb:96:29:48:f2:43:61:7e:70:2f:39:43:75:
b6:cd:e1:39:2a:5a:38:fb:72:0e:cb:27:ee:f5:fb:2e:cd:ac:
88:90:b2:c2:0e:1d:d6:e7:2f:91:f1:5a:cf:77:b1:79:10:c3:
ff:75:0c:78:2c:07:f0:8c:0e:d1:8d:76:5b:33:98:64:43:6f:
94:9c:8e:18:05:26:5c:63:36:00:f3:60:72:71:36:26:c5:98:
d6:27:79:e9:9a:2f:2e:c6:a0:6d:bc:0a:66:0c:cb:d6:63:1b:
f0:81:97:bf:5d:1d:56:85:c6:c1:d6:3b:05:93:8e:dd:94:7a:
df:f8:de:47:0a:71:f8:ed:3c:52:05:a9:45:74:5e:ef:8c:80:
45:ad:02:14:67:46:8e:b5:d4:9a:ad:d1:32:da:d7:4a:7a:82:
09:fa:6e:9b:a2:1e:d3:09:c3:39:00:5d:b4:8e:4f:39:9d:64:
c2:7e:00:b8:6d:e5:25:94:0b:9f:0b:da:24:ce:9c:b5:d3:25:
b8:96:25:0d:a2:bd:0e:e4:5b:09:3d:c6:d9:05:d1:2a:8f:2f:
21:25:5e:5b:e5:11:11:f2:83:a5:67:7d:d9:eb:08:72:8b:50:
ce:db:20:1d:92:9c:a8:eb:4e:98:59:3a:1b:c9:b0:55:0c:e6:
41:ad:bf:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:07:48 2025 by rpki-client