
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft
File: Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft (raw, json)
Hash identifier: SXWjS8eJc8dsBpkTl5eb+RVzZvRCITz62LOpRqiqB8Y=
Subject key identifier: 6F:81:92:7C:D7:7D:0B:10:98:89:F4:4F:EB:EA:79:DC:DA:E3:F2:A9
Authority key identifier: 33:18:F5:7A:F0:7C:4D:F5:98:5E:4A:72:0B:80:C8:9B:97:E9:0A:79
Certificate issuer: /CN=3318f57af07c4df5985e4a720b80c89b97e90a79
Certificate serial: 019882B089A7B9B6D7A933F267F7A6BF8BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mxj1evB8TfWYXkpyC4DIm5fpCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft
Manifest number: 40
Signing time: Thu 07 Aug 2025 04:01:04 +0000
Manifest this update: Thu 07 Aug 2025 04:01:04 +0000
Manifest next update: Fri 08 Aug 2025 04:01:04 +0000
Files and hashes: 1: Mxj1evB8TfWYXkpyC4DIm5fpCnk.crl (hash: 9PIVRvJBLBAyTiwpLJN2oP0CDmDdZSMXzcVEFUYeA1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mxj1evB8TfWYXkpyC4DIm5fpCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:b0:89:a7:b9:b6:d7:a9:33:f2:67:f7:a6:bf:8b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3318f57af07c4df5985e4a720b80c89b97e90a79
Validity
Not Before: Aug 7 04:01:04 2025 GMT
Not After : Aug 8 04:01:04 2025 GMT
Subject: CN=6f81927cd77d0b109889f44febea79dcdae3f2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:df:0c:80:34:e8:fd:74:df:b9:a7:6f:00:07:
02:95:75:dc:b3:d4:e4:f2:e1:70:a0:48:f7:d8:e7:
79:d3:73:ba:ba:36:cf:30:3d:e6:67:8e:9c:2b:27:
c7:55:40:cb:b0:98:60:74:5a:c7:e6:f6:03:e6:10:
07:7b:e7:8c:4b:36:e1:af:75:ae:6f:bd:83:5d:49:
a0:f3:59:db:ed:16:3a:58:86:1e:b8:5c:69:00:9a:
3c:c0:70:5d:5e:34:52:5b:ad:07:47:5f:bc:a7:bc:
1d:80:4b:59:f3:8a:96:0b:b2:4a:c2:2a:30:a3:4d:
38:fd:d9:dd:63:b4:c2:96:e3:1a:b6:0e:ee:17:d5:
49:9a:cb:36:b0:2b:5b:e1:08:85:44:22:c7:5a:00:
ca:3b:a5:ed:3f:f2:20:8c:95:d2:2c:9c:8f:b1:d3:
00:7c:51:0c:c6:48:a6:39:97:c5:05:47:c0:49:a7:
b4:dc:0a:7a:b6:71:8c:c6:8f:ca:99:b9:03:95:f7:
50:85:7e:f4:7a:41:19:a6:16:b0:41:d4:b2:51:10:
c4:b7:e7:b8:4a:3a:59:b1:6f:e5:aa:c4:34:25:cb:
15:e6:f3:c8:65:af:d8:19:34:63:29:3d:28:85:4d:
27:2b:86:61:51:56:27:b5:3e:93:3a:e7:67:f3:5a:
2b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:81:92:7C:D7:7D:0B:10:98:89:F4:4F:EB:EA:79:DC:DA:E3:F2:A9
X509v3 Authority Key Identifier:
keyid:33:18:F5:7A:F0:7C:4D:F5:98:5E:4A:72:0B:80:C8:9B:97:E9:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mxj1evB8TfWYXkpyC4DIm5fpCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a6:0e:ed:80:ef:10:4a:0a:d3:21:0a:59:ed:10:bc:46:74:
dd:65:4f:f6:48:32:09:0f:cd:e5:54:0a:bb:22:b0:e3:52:44:
0b:a1:42:14:84:e4:7b:d9:80:52:32:1f:39:3f:33:2e:d6:61:
de:42:54:0d:c2:fd:5a:6a:5a:6b:a4:97:2a:7f:1a:71:4a:35:
8e:7a:bb:07:1e:a5:17:e3:94:42:5e:d9:11:90:81:70:3e:db:
c7:fd:29:c7:26:5b:c9:ef:87:8d:34:29:49:48:8b:04:f8:27:
f5:3d:0f:65:3b:42:5b:5f:95:76:39:cc:b8:38:c1:48:3e:99:
b5:81:30:0e:96:39:9f:08:60:e5:c4:93:69:a7:0b:1d:01:64:
b2:fa:75:4f:ba:b3:b9:18:0e:47:64:c4:a3:c3:85:4d:23:38:
ba:44:04:20:74:ee:18:e8:67:72:39:e9:bc:bb:69:f8:2f:07:
7d:9d:7f:5c:52:5b:2e:26:e9:0e:00:b1:7f:01:8e:a1:0e:e6:
45:0e:55:06:d7:18:12:99:56:ab:1a:5e:a6:f4:15:7e:87:aa:
b4:05:19:6d:de:2e:40:bf:c6:52:d8:bc:b7:12:8b:97:78:9b:
1b:a8:f5:a2:63:a4:99:64:cb:28:2e:75:cc:14:9b:f5:ae:8d:
9c:cf:64:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:20:38 2025 by rpki-client