Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
File: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft (raw, json)
Hash identifier: LRu1WspbiHOFNvc+2NrMUsh3vP6ISKauK3AZwqQSI0Y=
Subject key identifier: C9:A0:1D:C9:BC:48:B8:46:29:0F:CC:97:3E:0F:2B:53:60:A5:4F:1B
Authority key identifier: 6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06
Certificate issuer: /CN=6ccc7137704b26301917563f2a84671ef6758006
Certificate serial: 019A006C773D8451E500927BEC064630EAC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
Manifest number: 05CB
Signing time: Mon 20 Oct 2025 07:01:39 +0000
Manifest this update: Mon 20 Oct 2025 07:01:39 +0000
Manifest next update: Tue 21 Oct 2025 07:01:39 +0000
Files and hashes: 1: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl (hash: sHY9vImlBGD4+IDsVRN4iT4lt0fKmL7/SuMsl4OW7PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:77:3d:84:51:e5:00:92:7b:ec:06:46:30:ea:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccc7137704b26301917563f2a84671ef6758006
Validity
Not Before: Oct 20 07:01:39 2025 GMT
Not After : Oct 21 07:01:39 2025 GMT
Subject: CN=c9a01dc9bc48b846290fcc973e0f2b5360a54f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:00:e7:09:30:3c:96:94:9b:d9:93:35:7f:87:
b2:da:5b:4e:b8:37:ec:d6:ab:df:bc:c6:9a:64:2f:
af:02:e4:ab:28:a7:2f:36:e4:e0:ba:e3:f1:ce:36:
6b:e8:2b:25:fc:85:a4:43:3f:cc:6c:97:84:35:b8:
ca:8d:78:92:2a:07:f7:ab:e9:93:e7:26:5c:10:3e:
a7:0d:69:e1:38:44:86:7f:89:ed:11:33:d0:21:e3:
60:5d:7f:0d:6d:e3:1b:ca:87:5c:e1:75:61:50:5c:
4c:b0:29:13:95:75:70:3d:91:b5:c1:1a:f3:91:2a:
a9:07:b1:bc:8c:9f:5f:d0:c1:66:8b:8b:c4:df:9f:
cf:ad:97:98:72:1f:ab:19:75:e4:df:f3:1d:b6:f6:
3a:9c:6b:9b:4f:00:c2:12:5f:39:4d:51:3a:5c:3d:
6e:e1:6e:5e:3e:f0:05:f2:06:c4:6b:5f:7b:11:c7:
6b:a6:dd:16:77:c2:dc:d3:a4:58:25:db:1d:e5:ba:
86:bf:ce:be:67:5d:b6:7f:e5:a5:33:75:87:29:84:
55:c8:18:ef:a0:e0:78:53:9a:b9:b5:0d:08:82:aa:
ed:ac:99:6f:5c:8f:2c:68:bf:1f:9b:60:6e:d2:d3:
4e:16:7b:fb:53:5e:fd:8a:c8:21:11:da:3b:95:6e:
70:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A0:1D:C9:BC:48:B8:46:29:0F:CC:97:3E:0F:2B:53:60:A5:4F:1B
X509v3 Authority Key Identifier:
keyid:6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:33:41:72:c7:c9:ae:32:19:d2:a0:6a:f5:bc:b7:24:45:41:
d9:18:be:98:94:15:af:7c:97:4e:c7:7f:1e:6c:ab:2e:74:e0:
ec:c2:9e:7d:c9:1a:01:2d:f2:10:5d:55:b3:cf:03:4e:e4:9a:
2d:f8:38:5f:59:e8:7f:c7:bb:2f:d0:cd:0c:a0:ee:c8:8d:0f:
44:6b:a1:f0:13:1c:07:e6:b3:72:9e:d6:d0:22:5a:37:2c:39:
56:dd:13:69:2e:8c:bc:7f:41:3c:a8:4d:52:cc:e1:39:aa:08:
b6:17:e2:47:e3:a3:0a:1d:62:e9:6e:1b:66:20:0f:52:e4:db:
02:2d:65:04:18:5b:29:d8:dd:16:84:2e:50:ee:d4:3b:25:09:
3b:45:b9:a2:9b:85:49:88:b7:c7:42:58:18:26:9c:77:25:68:
39:d9:c5:de:30:9a:0f:bc:bb:3a:66:ee:6d:e6:c4:05:ff:4a:
db:e7:bb:45:ff:b9:64:37:79:53:23:c5:1c:86:44:83:80:96:
24:78:c9:22:49:81:0f:9e:f1:4a:b2:29:43:8f:26:a4:f0:2c:
a8:b9:0b:4e:dc:79:ea:9c:95:24:15:87:51:da:72:60:fc:6d:
e8:f5:18:8e:3a:8c:56:e9:26:34:3a:b2:52:9d:c3:10:57:a2:
42:fa:5a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:23:07 2025 by rpki-client