Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft
File: mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft (raw, json)
Hash identifier: bXUpWUgcrz8D5EVdPUY/oYpTl4QC85TUjDGoMByu3f4=
Subject key identifier: F5:B1:02:EA:DF:D9:6A:81:16:28:1C:8E:EC:42:A8:27:98:41:B5:57
Authority key identifier: 9A:B0:24:01:50:AC:0D:9D:F3:BB:9C:57:2E:31:C8:75:85:88:20:69
Certificate issuer: /CN=9ab0240150ac0d9df3bb9c572e31c87585882069
Certificate serial: 0199FF22C6D2FC6DADADEB97938580AE74C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft
Manifest number: 0723
Signing time: Mon 20 Oct 2025 01:01:33 +0000
Manifest this update: Mon 20 Oct 2025 01:01:33 +0000
Manifest next update: Tue 21 Oct 2025 01:01:33 +0000
Files and hashes: 1: mrAkAVCsDZ3zu5xXLjHIdYWIIGk.crl (hash: eQo+7xTtoq/RzqQnwTE/2rLLMQovBEqVvJ+n8FJ4m10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:c6:d2:fc:6d:ad:ad:eb:97:93:85:80:ae:74:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab0240150ac0d9df3bb9c572e31c87585882069
Validity
Not Before: Oct 20 01:01:33 2025 GMT
Not After : Oct 21 01:01:33 2025 GMT
Subject: CN=f5b102eadfd96a8116281c8eec42a8279841b557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:a5:84:07:a8:ba:3d:ed:97:15:e5:75:ee:
ee:68:1d:34:56:8e:5a:79:a3:3b:dd:4f:21:a5:dc:
f3:39:3b:a7:6e:20:db:79:70:d4:70:dc:f9:bd:5e:
65:ac:4c:4b:45:21:e6:f5:0d:3c:69:0a:25:51:51:
37:5d:64:f5:20:49:95:8d:44:73:e5:50:c2:e7:47:
0d:af:bd:27:4b:c0:89:e1:a8:49:14:b6:50:19:9e:
7f:fb:11:43:86:0e:6a:4d:c2:d8:4c:38:59:9d:fc:
9a:5f:b0:35:53:09:5c:5d:06:82:33:3d:d1:1d:ff:
90:aa:4d:b8:92:83:13:1e:da:02:12:07:ab:8a:1e:
3f:ec:55:00:b3:f3:4d:89:c6:bb:46:06:6b:90:a5:
25:93:88:5f:c0:00:97:11:39:f9:48:84:8f:56:89:
63:f6:58:da:40:6e:dc:25:8c:f8:a0:c4:a0:7c:3d:
3b:f1:4b:6f:f4:de:b4:23:2f:a8:b6:9d:c6:e6:3b:
c8:7f:ee:38:57:c4:e8:cf:7f:e0:5d:83:0f:8a:13:
28:dc:1c:57:a7:53:97:6a:07:61:3e:aa:b1:c2:e5:
b5:ed:e5:9b:5a:da:f0:aa:71:dc:71:cd:26:e1:b5:
36:27:90:2f:69:77:42:5c:f5:4e:70:5e:e2:cc:17:
69:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B1:02:EA:DF:D9:6A:81:16:28:1C:8E:EC:42:A8:27:98:41:B5:57
X509v3 Authority Key Identifier:
keyid:9A:B0:24:01:50:AC:0D:9D:F3:BB:9C:57:2E:31:C8:75:85:88:20:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:70:be:c3:12:56:f4:9a:f4:e8:18:d0:1a:6d:8a:63:b9:0c:
82:de:77:e4:b1:be:0e:16:d1:b2:bc:9e:60:d0:f6:4b:71:ac:
8a:a3:77:8d:e3:24:8d:24:8b:32:bd:c9:13:78:10:30:f9:4b:
cf:13:60:f7:d8:73:a6:05:79:0a:37:5f:5b:5a:ab:57:7a:00:
c6:ba:40:4a:69:78:d4:ee:36:4a:b7:25:47:54:73:20:b3:24:
24:77:b9:05:31:78:77:70:14:39:cb:a2:4e:cc:34:e8:71:b4:
00:de:d3:56:66:c0:e6:c5:02:25:e7:1c:46:c0:4c:37:52:f1:
37:44:54:35:ff:a0:28:12:d5:5b:3e:d0:8c:3d:33:85:f7:c7:
99:19:e9:82:db:39:6c:5e:06:07:1f:41:6b:bc:3f:dd:a1:76:
be:a4:d1:b3:c2:ee:a9:0c:e3:35:ad:f0:57:28:c4:5d:64:c8:
cc:99:6f:b3:30:e8:21:2f:f4:8a:fc:4a:55:b4:ce:84:3d:83:
8f:ae:3e:76:65:b4:3f:43:46:3d:a7:cc:4c:2f:87:8c:ed:d7:
b3:99:9d:51:85:6a:88:bb:b6:85:85:81:ac:b5:07:9d:86:e7:
14:18:8f:cd:38:22:33:57:52:ea:c0:eb:23:56:ec:06:a0:28:
7a:68:c8:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/IsbS/G2treuXk4WArnTHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhYjAyNDAxNTBhYzBkOWRmM2JiOWM1NzJlMzFjODc1ODU4
ODIwNjkwHhcNMjUxMDIwMDEwMTMzWhcNMjUxMDIxMDEwMTMzWjAzMTEwLwYDVQQD
EyhmNWIxMDJlYWRmZDk2YTgxMTYyODFjOGVlYzQyYTgyNzk4NDFiNTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr46lhAeouj3tlxXlde7uaB00Vo5a
eaM73U8hpdzzOTunbiDbeXDUcNz5vV5lrExLRSHm9Q08aQolUVE3XWT1IEmVjURz
5VDC50cNr70nS8CJ4ahJFLZQGZ5/+xFDhg5qTcLYTDhZnfyaX7A1UwlcXQaCMz3R
Hf+Qqk24koMTHtoCEgerih4/7FUAs/NNica7RgZrkKUlk4hfwACXETn5SISPVolj
9ljaQG7cJYz4oMSgfD078Utv9N60Iy+otp3G5jvIf+44V8Toz3/gXYMPihMo3BxX
p1OXagdhPqqxwuW17eWbWtrwqnHccc0m4bU2J5AvaXdCXPVOcF7izBdpPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWxAurf2WqBFigcjuxCqCeYQbVXMB8GA1UdIwQY
MBaAFJqwJAFQrA2d87ucVy4xyHWFiCBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXJBa0FWQ3NEWjN6dTV4WExqSElkWVdJSUdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yYjllMWQtM2U4OC00NDhhLTgzNzEt
YTIyNDBmMzg3NjFjLzEvbXJBa0FWQ3NEWjN6dTV4WExqSElkWVdJSUdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8yYjllMWQtM2U4OC00NDhhLTgzNzEtYTIyNDBmMzg3NjFj
LzEvbXJBa0FWQ3NEWjN6dTV4WExqSElkWVdJSUdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnC+wxJW
9Jr06BjQGm2KY7kMgt535LG+DhbRsryeYND2S3GsiqN3jeMkjSSLMr3JE3gQMPlL
zxNg99hzpgV5CjdfW1qrV3oAxrpASml41O42SrclR1RzILMkJHe5BTF4d3AUOcui
Tsw06HG0AN7TVmbA5sUCJeccRsBMN1LxN0RUNf+gKBLVWz7QjD0zhffHmRnpgts5
bF4GBx9Ba7w/3aF2vqTRs8LuqQzjNa3wVyjEXWTIzJlvszDoIS/0ivxKVbTOhD2D
j64+dmW0P0NGPafMTC+HjO3Xs5mdUYVqiLu2hYWBrLUHnYbnFBiPzTgiM1dS6sDr
I1bsBqAoemjIPA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:06:33 2025 by rpki-client