Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
File: mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft (raw, json)
Hash identifier: wuDnNO8FKKbBdVO8zMkgi1jgqYyZkQYt/k5geyxcSsQ=
Subject key identifier: 21:2D:1A:AA:2E:C6:BE:AD:F3:1D:77:C9:B4:C6:57:80:E9:F2:F9:DE
Authority key identifier: 9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9
Certificate issuer: /CN=9ab571b69af85650affedcefe57d2a73fd6e6ca9
Certificate serial: 0198D4731AB3C24E62C2A1CB89AAA0A8396D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
Manifest number: 0C35
Signing time: Sat 23 Aug 2025 01:02:49 +0000
Manifest this update: Sat 23 Aug 2025 01:02:49 +0000
Manifest next update: Sun 24 Aug 2025 01:02:49 +0000
Files and hashes: 1: mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl (hash: RrzohVKZ1+1hNAKfOiPlS1h8iUthVnTH/1gK6i9BCoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:1a:b3:c2:4e:62:c2:a1:cb:89:aa:a0:a8:39:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab571b69af85650affedcefe57d2a73fd6e6ca9
Validity
Not Before: Aug 23 01:02:49 2025 GMT
Not After : Aug 24 01:02:49 2025 GMT
Subject: CN=212d1aaa2ec6beadf31d77c9b4c65780e9f2f9de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:31:53:40:72:8d:d7:c1:19:10:6f:82:4a:b7:
75:5e:e7:07:00:1e:6f:db:cf:28:6d:ab:a8:73:c5:
b4:c6:5d:81:f5:4e:5d:99:0b:d9:4f:42:1e:42:1c:
a3:0e:34:ed:bf:5d:f3:46:bb:b8:f8:6c:f2:64:24:
8f:05:c3:e1:f6:01:70:bb:7d:cf:c4:4a:49:54:03:
66:e2:44:16:af:8b:11:5e:99:c6:0f:99:fe:e6:0c:
2d:86:a2:f8:55:4f:cc:df:a4:3d:aa:a8:ce:ec:c5:
a5:e6:43:07:4f:11:3a:9b:87:2d:67:65:01:8f:2e:
81:c2:fa:b7:58:94:75:0a:06:d3:de:a1:59:9d:2e:
83:00:9e:16:c6:15:36:8c:a6:8a:83:3d:8b:85:1e:
11:4e:bb:54:e3:96:e0:d8:9d:97:8d:7b:ce:90:4c:
de:24:fd:29:59:23:d1:15:4a:aa:de:07:5b:bd:e1:
3e:ba:34:86:49:ca:5d:7b:e6:a0:1d:1c:d0:0e:ee:
37:1d:cf:22:0f:dc:3b:9f:f6:34:91:e4:41:43:11:
f9:d0:6d:e5:74:12:a8:4b:35:08:b7:3d:c1:10:08:
62:eb:b1:c2:94:fb:4c:c0:99:fe:6f:df:51:29:11:
9f:bf:a0:6c:b7:f9:b5:6b:4c:58:47:b2:15:a1:33:
6c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2D:1A:AA:2E:C6:BE:AD:F3:1D:77:C9:B4:C6:57:80:E9:F2:F9:DE
X509v3 Authority Key Identifier:
keyid:9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:32:81:24:0d:10:03:c2:ac:82:c6:32:d4:b9:4b:ab:42:f3:
84:07:f1:9d:53:2c:11:06:ae:0d:19:3d:7d:ca:f8:0b:49:76:
26:1d:98:ae:cd:af:a0:5c:19:78:e4:3f:75:93:c6:ad:3f:e4:
50:31:4f:7c:79:2b:6e:ea:f4:90:f0:46:c4:ab:d4:a0:53:0d:
2c:18:4c:57:9b:62:a5:68:68:61:5e:99:f2:3e:0d:6f:64:37:
6e:87:75:e7:de:ee:2a:7c:7c:77:2b:43:4c:40:ab:62:fe:77:
b1:8d:4a:b1:97:b9:ca:74:0b:12:e1:41:ee:74:d4:84:de:51:
89:65:c2:be:5d:3a:ed:37:71:da:db:b3:4a:eb:d6:5c:0c:9f:
32:4c:c1:ca:7c:bf:db:4c:35:a7:77:c4:e3:d7:d7:d9:d7:95:
bb:c5:2a:a8:f1:7a:20:60:4c:9f:87:9b:c7:03:28:6d:be:b2:
d6:a2:bd:03:3c:04:77:50:95:86:be:45:67:43:40:ed:e9:cc:
d0:03:e5:d7:8c:c8:9c:2f:8d:b2:50:63:1e:53:85:f6:e6:d1:
7a:17:25:3a:21:20:f4:fc:b6:f5:06:bf:8c:8f:b1:32:60:2f:
1a:61:f5:4e:fe:ed:26:cd:e3:94:11:3d:78:7d:18:c0:a6:e3:
79:e4:10:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:39 2025 by rpki-client