Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
File: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft (raw, json)
Hash identifier: Gp6znWrEM4kr/CvAiBZzVQMcGw8f5CeO+8K0AJwEl4Y=
Subject key identifier: 87:29:1F:30:38:FD:FB:66:66:8E:DE:83:E4:A7:1F:9C:1E:31:D2:38
Authority key identifier: 6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06
Certificate issuer: /CN=6ccc7137704b26301917563f2a84671ef6758006
Certificate serial: 0198D515EFF015ED42BAC9A24550EFC5707E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
Manifest number: 0530
Signing time: Sat 23 Aug 2025 04:00:41 +0000
Manifest this update: Sat 23 Aug 2025 04:00:41 +0000
Manifest next update: Sun 24 Aug 2025 04:00:41 +0000
Files and hashes: 1: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl (hash: lF54Zl319/LelDJPnPSzJE2CgY7qcDCnxtA/EFh+yBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ef:f0:15:ed:42:ba:c9:a2:45:50:ef:c5:70:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccc7137704b26301917563f2a84671ef6758006
Validity
Not Before: Aug 23 04:00:41 2025 GMT
Not After : Aug 24 04:00:41 2025 GMT
Subject: CN=87291f3038fdfb66668ede83e4a71f9c1e31d238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:0d:a6:54:7e:17:65:4c:e7:74:05:80:85:
41:39:21:6f:75:70:ce:b8:9f:80:23:c7:dc:e7:a7:
8b:89:07:08:01:e8:a3:59:8e:1d:58:7e:f7:1c:e1:
f5:b0:a8:cf:a0:7e:27:34:32:29:b9:61:59:94:3c:
8d:c8:19:1d:96:05:ef:0f:a4:e0:9c:82:ed:be:e6:
9f:9d:47:3a:3b:52:5d:2e:be:f4:f9:0e:f8:a0:22:
7d:35:25:63:75:a1:03:a7:d9:6c:e6:f6:8c:e4:60:
68:af:0f:c1:60:a7:45:e1:90:df:4f:ca:e5:31:fd:
a1:ce:0a:4c:7a:f6:65:fd:8d:c9:41:8e:9e:d7:74:
68:41:9a:8d:82:fb:14:63:c3:7d:30:b2:7e:65:5b:
6a:63:1f:a3:5f:28:5b:01:e2:0d:cc:1e:e6:2b:8e:
d6:8a:d7:ef:9f:f5:ff:0d:00:51:e1:6c:48:36:91:
02:8b:e5:1a:4a:ea:28:4a:76:89:e8:f1:aa:ed:98:
5a:ba:4c:5b:0f:ab:37:1c:86:cd:69:f0:23:7a:c9:
9f:51:9f:ce:30:f2:d1:e1:f0:74:02:6c:61:52:aa:
0a:a5:c0:9e:f0:57:39:79:10:3c:f8:e8:33:27:67:
26:3b:76:fa:89:b9:4b:59:fa:bc:c7:b5:e6:de:75:
85:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:29:1F:30:38:FD:FB:66:66:8E:DE:83:E4:A7:1F:9C:1E:31:D2:38
X509v3 Authority Key Identifier:
keyid:6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e9:55:07:1e:32:19:f0:76:40:fe:b2:2f:86:6b:2e:34:b8:
28:c9:7a:32:af:ee:12:94:0d:81:b9:ec:d0:45:c8:73:ea:21:
09:c7:8a:b3:24:b9:c0:f4:f0:ee:3d:3d:18:86:21:08:61:78:
de:f6:b2:0f:be:eb:70:2e:d6:cc:84:95:52:90:38:6e:8b:f5:
1d:3c:de:af:35:8e:81:bf:05:c2:37:11:a5:09:96:91:d2:46:
9c:56:a0:dd:9d:26:bc:77:29:12:bb:74:16:70:2c:cd:88:66:
66:47:6d:36:60:79:bb:9d:e1:60:27:ff:fe:b7:88:1b:9a:8b:
36:5a:79:30:c0:fe:74:bc:bc:23:75:05:d0:96:4b:0a:37:e4:
a5:68:d7:5e:38:9a:ee:8a:74:02:c0:c9:28:e1:ff:3e:ec:05:
38:c6:0e:d2:04:ba:72:ae:2a:6d:a2:eb:c7:05:f2:c8:03:9a:
3b:79:3b:06:d0:30:4c:0a:06:93:f8:3c:60:5e:fe:85:a2:09:
d3:0f:a0:d1:86:99:30:19:40:32:6a:a4:b0:ab:5b:f7:d4:ef:
91:9b:8c:fc:94:52:5a:01:28:59:b0:2f:c8:af:fa:37:fb:6a:
ae:6e:9d:04:8b:88:97:db:ba:40:77:95:5c:99:1e:06:46:88:
5b:61:47:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:31 2025 by rpki-client