Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
File: Mb9CyzMks4trh4t81W9pk263w9M.mft (raw, json)
Hash identifier: /uuuvqGe46JAGBJWed6q9JaVjfMiSKFkl1NYsP5g0FA=
Subject key identifier: 4A:DB:F7:36:1E:27:54:9E:75:A1:5F:26:77:73:4A:66:CD:0D:61:0D
Authority key identifier: 31:BF:42:CB:33:24:B3:8B:6B:87:8B:7C:D5:6F:69:93:6E:B7:C3:D3
Certificate issuer: /CN=31bf42cb3324b38b6b878b7cd56f69936eb7c3d3
Certificate serial: 01976885119371255F889E6A7B558D777A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mb9CyzMks4trh4t81W9pk263w9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
Manifest number: 03D1
Signing time: Fri 13 Jun 2025 09:00:40 +0000
Manifest this update: Fri 13 Jun 2025 09:00:40 +0000
Manifest next update: Sat 14 Jun 2025 09:00:40 +0000
Files and hashes: 1: Mb9CyzMks4trh4t81W9pk263w9M.crl (hash: D/+994JH8KdeMJ4DcxScb57BZSxECVE8yjldFYc/6Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mb9CyzMks4trh4t81W9pk263w9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:11:93:71:25:5f:88:9e:6a:7b:55:8d:77:7a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31bf42cb3324b38b6b878b7cd56f69936eb7c3d3
Validity
Not Before: Jun 13 09:00:40 2025 GMT
Not After : Jun 14 09:00:40 2025 GMT
Subject: CN=4adbf7361e27549e75a15f2677734a66cd0d610d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cc:b0:22:16:ba:19:b5:b6:02:cc:b8:a5:0f:
ce:6f:d1:5f:ac:cd:5c:9b:00:22:50:65:79:85:0c:
2d:00:f4:32:68:89:eb:b9:40:4b:f1:e2:59:fa:20:
db:df:0d:55:f3:2f:f9:53:65:2a:6e:66:d0:15:e2:
f6:fd:3e:cf:1a:bb:f7:5c:09:7b:f9:38:e0:da:d3:
56:23:0e:af:7d:81:3a:17:be:64:04:40:a8:aa:34:
6c:3b:d1:20:ed:bf:9f:09:9d:13:c8:ca:69:a7:f9:
af:d2:be:15:3c:8e:c5:e6:c0:61:bb:ae:19:2f:f3:
48:e8:1c:94:59:6d:41:3f:b2:e2:81:f8:8c:2b:c3:
cf:0d:0a:d3:1b:bf:b2:2e:c7:e4:c7:d3:e8:d8:81:
00:8a:27:c3:02:57:c2:26:42:ef:c6:e7:16:75:fa:
7d:3d:f5:76:e9:0c:aa:d7:8e:87:08:68:d1:e9:73:
49:6b:fa:d8:c7:49:ca:5e:24:25:68:e3:84:dc:da:
f8:8e:44:85:12:1b:26:28:6f:47:c9:fe:84:35:29:
32:b1:ef:ae:9f:b6:91:d8:c4:60:71:42:ed:5b:26:
dd:0d:de:a7:28:05:0a:24:37:34:2c:e0:29:ef:96:
3a:be:9d:c2:c6:e3:c6:9c:b0:e5:3c:c7:30:e6:e4:
0c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DB:F7:36:1E:27:54:9E:75:A1:5F:26:77:73:4A:66:CD:0D:61:0D
X509v3 Authority Key Identifier:
keyid:31:BF:42:CB:33:24:B3:8B:6B:87:8B:7C:D5:6F:69:93:6E:B7:C3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mb9CyzMks4trh4t81W9pk263w9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:10:5d:85:84:7b:a8:94:26:bb:1c:b4:a1:3a:34:99:20:49:
8d:d2:05:40:f7:df:54:8d:02:a1:91:ee:30:f6:b5:9c:ae:83:
27:ab:20:f7:4c:a5:c8:d8:ad:ba:51:c3:f9:4e:99:8d:5a:45:
9c:12:dd:76:c7:67:2d:f9:5f:71:ae:93:23:62:ca:5a:fb:fc:
bf:19:f4:3c:75:ab:6a:d3:2e:72:ce:01:8d:a4:42:78:5e:2c:
3f:c5:d0:65:b6:92:41:2a:7d:c3:ae:82:b5:c8:75:37:2c:58:
c5:08:10:60:50:cd:be:7a:90:5e:f4:27:a8:fd:d7:c7:83:9f:
01:f8:e6:85:a0:2c:4d:dc:75:c1:fc:b2:82:a5:d3:9a:fa:5f:
5a:7a:c7:ce:e4:e2:11:a7:b2:7f:2b:ff:3a:a8:60:a3:33:8a:
60:ce:38:61:85:14:51:1d:4a:ca:31:8b:59:69:1a:eb:f4:96:
21:d5:06:8e:d1:70:09:31:a3:ac:5b:74:22:9d:cc:00:2a:3b:
eb:79:be:1e:3b:d0:e7:a6:e9:c7:ab:1b:11:0a:20:5b:93:6e:
b3:15:f1:46:a7:95:87:1b:e8:d7:54:96:ea:88:47:75:1b:0d:
01:b0:b0:a2:8d:a4:32:41:33:0f:39:52:2e:a7:54:18:d7:14:
9d:c1:3f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:27:30 2025 by rpki-client