Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
File: mrlC3a28mskLTs---tsjEyOmcFU.mft (raw, json)
Hash identifier: 4XCZwRvKJHb1KEFe+tpg/q8cps2/Srjb6yxTKvBL9J8=
Subject key identifier: 3F:DA:AB:B1:7A:E9:29:CE:39:98:49:A2:87:10:97:AA:C4:E1:64:BC
Authority key identifier: 9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55
Certificate issuer: /CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055
Certificate serial: 019A4F62D28FC8FE3BBD91256453FC9C83A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
Manifest number: 0DF2
Signing time: Tue 04 Nov 2025 15:01:07 +0000
Manifest this update: Tue 04 Nov 2025 15:01:07 +0000
Manifest next update: Wed 05 Nov 2025 15:01:07 +0000
Files and hashes: 1: mrlC3a28mskLTs---tsjEyOmcFU.crl (hash: H/J0aH5l8/05zHKoRyYZ8SUVx/OBPnr9UYz52ywBFXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:d2:8f:c8:fe:3b:bd:91:25:64:53:fc:9c:83:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055
Validity
Not Before: Nov 4 15:01:07 2025 GMT
Not After : Nov 5 15:01:07 2025 GMT
Subject: CN=3fdaabb17ae929ce399849a2871097aac4e164bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d7:16:55:3d:19:e3:42:ab:a4:91:c9:a2:bd:
65:c2:61:a2:ed:a5:d6:cc:c3:6b:04:46:30:12:5c:
ea:84:2f:aa:7e:97:57:ea:e2:26:f2:61:49:80:47:
93:18:1f:0d:aa:0a:6a:25:3e:95:f4:c2:e7:b4:d2:
cf:d9:e1:7e:d2:f2:81:05:52:78:3d:3a:8a:22:d4:
86:52:6e:2e:08:c0:3e:de:e6:8e:af:0e:98:f1:dc:
74:c7:7e:70:bf:ce:02:54:f7:9a:d1:51:d6:83:de:
71:ea:5b:ac:40:f4:24:ed:22:50:c3:36:46:09:7e:
03:57:cc:17:59:f8:a3:24:14:3a:5c:4b:56:50:5d:
c1:35:e1:e1:9c:1f:c6:56:45:5a:d3:7a:2c:56:bd:
e1:ba:76:75:ac:30:b2:95:67:f6:cd:eb:46:07:88:
ee:07:17:07:0b:5b:86:3d:e9:c2:a0:29:19:62:74:
70:c6:64:cc:d7:92:ec:41:72:c4:c1:14:14:b2:2e:
9b:e3:15:f1:4e:dc:14:be:a8:52:87:e8:69:6e:7e:
ec:e3:f8:0a:0c:be:77:48:eb:78:88:c6:c1:23:9f:
10:ae:da:81:34:d9:d4:75:3b:06:da:e2:44:05:d7:
69:ba:23:4b:ae:2c:b0:5a:91:5d:f4:48:b9:b7:37:
6e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DA:AB:B1:7A:E9:29:CE:39:98:49:A2:87:10:97:AA:C4:E1:64:BC
X509v3 Authority Key Identifier:
keyid:9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d3:a1:e3:0b:60:d1:35:2b:f2:de:b0:6f:b2:8f:21:02:27:
c3:a0:5f:77:12:59:79:e7:17:93:ce:6b:8d:7e:e8:82:52:20:
2b:08:51:8a:c5:56:a0:ea:f9:eb:37:b8:0b:2e:f4:ee:3e:98:
1d:9a:f7:29:0d:9f:ea:b2:bc:9f:2b:48:06:41:96:b2:0c:f6:
81:f9:b8:c5:be:8a:b0:39:c2:5b:a5:bc:89:b6:eb:e8:3d:e0:
dd:36:45:8c:7a:f6:d9:b6:ee:3b:40:3e:5d:db:4a:24:a3:6f:
d9:87:62:93:78:09:a1:06:64:da:cd:ca:d9:db:bc:f4:39:12:
fa:84:d6:37:10:98:87:19:7d:07:a9:14:aa:c7:89:15:aa:c1:
f2:8c:ef:0a:96:96:e7:73:e3:04:72:8a:61:6c:c6:cc:dc:f4:
6d:ca:c7:e0:99:14:fd:a7:db:a9:95:bb:fe:5d:57:e6:66:98:
89:32:48:b9:22:bc:92:31:10:9e:35:f6:f5:36:92:97:85:34:
77:a9:0e:bc:fc:05:7a:84:46:02:eb:b9:8c:d0:77:45:b0:28:
d6:64:4a:28:81:d3:20:92:a0:1b:d7:86:b5:2b:89:73:5e:de:
38:b4:86:19:17:1e:39:8d:76:4a:48:48:e7:fb:7c:78:7d:b3:
5b:51:b2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:25 2025 by rpki-client