Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft
File: mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft (raw, json)
Hash identifier: GJ4FXtqnX7R+u2FnV3pb8T+hWhmyD+GkUmxY8RMpVsI=
Subject key identifier: 7F:05:68:B1:9C:88:0F:48:6B:B5:0A:95:F4:44:F6:77:9B:96:E7:32
Authority key identifier: 9B:13:4B:6E:90:24:06:4B:90:57:28:34:89:BF:2C:43:6F:40:75:E8
Certificate issuer: /CN=9b134b6e9024064b9057283489bf2c436f4075e8
Certificate serial: 0198D6604FE71E2EC78BC557C082F5E2A4A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxNLbpAkBkuQVyg0ib8sQ29Adeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft
Manifest number: 07A5
Signing time: Sat 23 Aug 2025 10:01:32 +0000
Manifest this update: Sat 23 Aug 2025 10:01:32 +0000
Manifest next update: Sun 24 Aug 2025 10:01:32 +0000
Files and hashes: 1: mxNLbpAkBkuQVyg0ib8sQ29Adeg.crl (hash: I89x8OIj+AcrM/sXtz3z+LtBfY2I7PkHDORdv81c3/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mxNLbpAkBkuQVyg0ib8sQ29Adeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:4f:e7:1e:2e:c7:8b:c5:57:c0:82:f5:e2:a4:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b134b6e9024064b9057283489bf2c436f4075e8
Validity
Not Before: Aug 23 10:01:32 2025 GMT
Not After : Aug 24 10:01:32 2025 GMT
Subject: CN=7f0568b19c880f486bb50a95f444f6779b96e732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d1:6d:b2:80:e9:05:9a:56:c6:2f:7b:8e:85:
78:3e:2d:37:45:89:cf:a5:ca:a4:42:b3:98:af:ba:
09:68:83:db:41:1d:3a:cf:cf:17:45:e4:66:aa:04:
2a:4c:f0:d9:a8:1a:1e:c0:69:e7:d7:b0:38:18:fe:
ca:43:69:36:0f:5e:87:48:49:7a:f4:53:da:dd:33:
ef:6b:fb:b9:7b:6d:9e:4a:d4:b6:6e:8c:f5:59:f1:
01:ed:64:a6:ab:bf:65:31:1c:43:91:1d:d3:7c:e0:
0d:9b:be:cb:5b:d6:7c:9b:01:0d:4c:2b:5e:22:e5:
7d:bf:71:04:3a:af:c6:26:f9:f9:0b:f1:9f:fa:de:
31:35:11:b0:27:c1:9c:bc:22:e8:6f:95:de:13:22:
6e:ff:be:e5:52:f8:30:e6:57:46:5e:a4:98:c1:5a:
82:44:a5:32:45:1c:b7:67:e7:f5:56:a8:c5:f9:0f:
85:96:5a:ba:72:4a:3a:8e:fa:3c:17:ab:29:dc:55:
3b:ce:34:cb:1e:96:45:5c:46:18:48:77:f3:75:56:
32:d1:e2:6c:24:d9:a3:73:5a:b4:4d:d0:cd:6e:3c:
9c:26:f7:65:e6:68:29:6a:3c:e2:d5:b5:85:8e:2e:
ca:42:fc:00:11:48:57:77:ac:6e:27:06:9f:19:17:
95:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:05:68:B1:9C:88:0F:48:6B:B5:0A:95:F4:44:F6:77:9B:96:E7:32
X509v3 Authority Key Identifier:
keyid:9B:13:4B:6E:90:24:06:4B:90:57:28:34:89:BF:2C:43:6F:40:75:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxNLbpAkBkuQVyg0ib8sQ29Adeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:08:bb:61:32:9b:14:d7:7a:9b:4f:81:60:b8:60:1b:2b:e2:
fd:05:20:04:5e:2e:a4:6c:c2:b1:e9:6b:21:95:2a:e1:88:30:
52:25:c1:43:2a:bf:77:09:2f:c9:34:4c:18:b5:ce:5d:96:aa:
b4:21:20:e3:43:15:48:aa:41:ad:f5:94:e7:7c:cb:9f:14:65:
f5:b3:7a:92:c6:83:68:9d:58:10:2a:92:27:63:cc:43:29:21:
f6:46:f5:29:f0:d1:06:09:2e:b5:b5:c8:46:ed:bd:73:39:3f:
8b:15:7a:06:d6:fb:30:9f:a8:3c:7a:a9:29:85:fa:30:30:7c:
9b:2d:eb:fd:6d:5e:99:a5:8b:29:67:a5:3f:13:7a:a7:fa:09:
43:8d:26:06:cf:ae:e1:3c:cd:76:77:22:e8:f0:df:a4:c9:e8:
8c:f7:f6:5f:01:19:89:56:22:1e:70:07:06:e6:0f:29:41:9c:
9f:33:19:42:fc:a4:0b:b4:82:24:5c:f2:a9:61:51:2e:92:36:
41:7d:0d:1b:55:48:54:e3:8e:8b:58:98:fc:d4:e4:a4:bd:25:
a2:db:f0:e3:8f:2b:a3:4c:81:fa:de:dd:65:10:df:98:76:b0:
35:b7:5f:bc:91:31:24:62:dc:ec:ee:d3:67:7a:d7:94:78:90:
f2:a1:50:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:28:01 2025 by rpki-client