
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft
File: mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft (raw, json)
Hash identifier: j/GqYYCLqznn5DwjdfYsGOIf8u4KKFweqMlN+h93TWA=
Subject key identifier: C5:F7:69:2D:F2:B4:A7:55:FC:F8:F5:D9:89:6E:BD:45:6A:E0:E1:8E
Authority key identifier: 9B:13:4B:6E:90:24:06:4B:90:57:28:34:89:BF:2C:43:6F:40:75:E8
Certificate issuer: /CN=9b134b6e9024064b9057283489bf2c436f4075e8
Certificate serial: 01987D8AD94B24F234D9D0B3DF25EB76BBB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxNLbpAkBkuQVyg0ib8sQ29Adeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft
Manifest number: 0777
Signing time: Wed 06 Aug 2025 04:01:48 +0000
Manifest this update: Wed 06 Aug 2025 04:01:48 +0000
Manifest next update: Thu 07 Aug 2025 04:01:48 +0000
Files and hashes: 1: mxNLbpAkBkuQVyg0ib8sQ29Adeg.crl (hash: jzRlRk3w7hlTewrvyHOS0m2++IoPpDfucazquK98tBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mxNLbpAkBkuQVyg0ib8sQ29Adeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:d9:4b:24:f2:34:d9:d0:b3:df:25:eb:76:bb:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b134b6e9024064b9057283489bf2c436f4075e8
Validity
Not Before: Aug 6 04:01:48 2025 GMT
Not After : Aug 7 04:01:48 2025 GMT
Subject: CN=c5f7692df2b4a755fcf8f5d9896ebd456ae0e18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8b:79:45:d2:f1:7e:ea:cb:d9:5d:91:07:62:
9e:12:2f:dc:60:20:8b:68:81:0c:df:f6:75:86:59:
ed:9b:77:4a:b8:83:c9:0a:82:7d:28:db:ba:c2:51:
86:dc:48:7a:c6:77:77:b2:5d:23:af:42:e1:b1:df:
05:42:8d:b9:dc:99:9b:da:41:8d:8b:9a:8a:14:fa:
3a:95:11:b2:58:06:8f:39:d5:e5:e7:cf:e3:6f:64:
24:15:34:94:a5:e1:74:63:ab:1a:1f:bf:fa:f9:59:
40:2e:50:99:1e:9d:c6:d5:67:0c:45:30:ee:b6:05:
01:48:1d:17:ef:26:12:59:ae:aa:0d:3d:10:e2:76:
85:91:eb:d5:28:3c:5e:9e:14:54:d4:eb:d5:ad:0e:
b5:e1:95:d6:3c:c8:99:f8:62:6c:f5:96:95:8b:8b:
cd:99:79:67:fa:5a:ef:25:f7:f4:39:bf:75:87:12:
2f:9a:01:0f:a8:6c:9a:9c:89:81:93:8a:f8:82:d7:
ed:f8:49:a8:b3:53:c8:19:7d:ce:60:1f:ee:b2:15:
4d:ed:78:ce:2f:21:c9:96:68:64:65:7d:55:c0:d2:
03:1e:c9:f3:d6:ca:1f:87:8a:e6:31:e3:72:c9:5f:
e2:33:25:fd:db:eb:b1:1b:6e:ef:32:f6:a7:24:a2:
33:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F7:69:2D:F2:B4:A7:55:FC:F8:F5:D9:89:6E:BD:45:6A:E0:E1:8E
X509v3 Authority Key Identifier:
keyid:9B:13:4B:6E:90:24:06:4B:90:57:28:34:89:BF:2C:43:6F:40:75:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxNLbpAkBkuQVyg0ib8sQ29Adeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a0:0f:2a:8b:2c:95:c3:70:fa:89:65:e5:e1:50:99:27:1f:
b9:86:19:59:f2:77:f1:1b:fc:80:1d:3e:50:11:74:25:81:a5:
07:0f:ae:e8:ed:c5:54:62:dd:26:58:a2:f0:0b:cb:da:ce:81:
94:b7:1e:76:91:fa:bc:a9:7d:0e:2a:f6:3f:55:a8:cb:3f:02:
bc:db:97:75:05:22:6c:79:9d:95:61:60:8b:db:4c:5c:ac:85:
18:82:9e:fb:1e:fa:47:1e:10:c3:94:92:b8:9e:73:c6:5c:19:
c0:cd:fb:37:b5:35:26:e2:83:3c:9b:a5:07:35:e8:36:f3:b7:
69:63:a7:4b:31:8e:74:5e:1b:66:37:ec:e5:75:fb:64:a2:0a:
01:46:3d:f7:24:d1:8f:83:05:24:72:a9:19:d2:70:0c:61:8c:
af:88:19:69:42:61:b3:7b:7f:35:a9:7a:3a:d2:ec:5d:c3:64:
42:02:1d:5e:9f:c0:e4:70:74:66:ef:52:57:47:93:01:0f:65:
37:86:61:ea:86:c1:7b:a0:54:12:0e:7a:75:82:1b:f4:81:08:
c6:d3:79:f0:c4:12:e3:24:c0:ce:03:3f:90:3c:f8:e8:28:8f:
7b:69:92:32:f4:fe:78:2b:46:da:90:cf:5d:93:1a:42:cb:52:
b3:66:fd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:26:56 2025 by rpki-client