Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
File: MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft (raw, json)
Hash identifier: kv4YXiCLIJiJ0BpxbSBYqEtO9SjQHWZieTt6Fo+bMio=
Subject key identifier: D4:C6:2B:EE:5F:10:65:C6:03:17:A5:56:D8:20:76:64:71:C4:B3:DC
Authority key identifier: 33:35:8B:45:1E:E0:FE:85:B0:04:A0:56:4F:83:10:FB:21:1C:95:FA
Certificate issuer: /CN=33358b451ee0fe85b004a0564f8310fb211c95fa
Certificate serial: 0198D5160ECC54B711C4ABB7CB33CF5717A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 04:00:49 +0000
Manifest this update: Sat 23 Aug 2025 04:00:49 +0000
Manifest next update: Sun 24 Aug 2025 04:00:49 +0000
Files and hashes: 1: MzWLRR7g_oWwBKBWT4MQ-yEclfo.crl (hash: 8d6aUpoKl+mn06iCwXfktpSRBjMiekSGefbaxDgzGfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:0e:cc:54:b7:11:c4:ab:b7:cb:33:cf:57:17:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33358b451ee0fe85b004a0564f8310fb211c95fa
Validity
Not Before: Aug 23 04:00:49 2025 GMT
Not After : Aug 24 04:00:49 2025 GMT
Subject: CN=d4c62bee5f1065c60317a556d820766471c4b3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bd:81:4a:68:46:81:b2:df:ab:34:6e:7e:ed:
95:81:1e:29:cd:db:d7:60:0f:c9:fa:42:1b:c4:53:
6e:1b:22:c2:74:ee:71:cb:03:db:96:63:cf:b0:47:
b9:92:bd:12:3d:39:92:cb:1d:5d:78:71:05:aa:6b:
16:a4:12:d8:2c:3e:48:67:15:e9:a0:cc:a4:d6:c0:
76:d3:84:e7:9d:50:a7:aa:d5:9b:4c:3c:e8:74:a2:
ae:ef:25:bd:0d:af:fc:29:b3:1b:32:a9:c5:bc:e6:
6e:ad:90:e2:2c:86:ba:8c:64:35:77:7c:0e:66:29:
70:7d:38:3e:cf:b4:28:eb:be:e9:1c:5c:a0:bd:3f:
3a:04:10:b6:3c:95:0b:cc:b4:f5:05:99:bb:83:54:
4f:f7:c1:92:70:74:41:fd:63:bd:97:e6:5d:ba:36:
92:3d:c3:e1:f1:dd:31:42:b2:f4:a3:c7:9a:49:32:
ad:9f:6a:85:e8:8d:56:6e:54:51:de:fb:77:44:ae:
8a:9d:13:6f:23:bb:b7:2b:e0:a5:1e:d7:cb:cc:3a:
f2:85:fd:94:e6:39:9b:52:80:85:9d:f3:6a:d5:f8:
01:c1:1d:4e:88:ff:b4:07:63:cb:78:ff:56:5a:a8:
55:66:7a:09:8d:e2:26:e8:a4:ed:78:d5:03:a5:02:
02:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C6:2B:EE:5F:10:65:C6:03:17:A5:56:D8:20:76:64:71:C4:B3:DC
X509v3 Authority Key Identifier:
keyid:33:35:8B:45:1E:E0:FE:85:B0:04:A0:56:4F:83:10:FB:21:1C:95:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:67:fb:fd:eb:49:fc:79:7d:c0:ee:1b:c5:6d:f4:95:be:25:
93:35:65:e2:38:60:25:dc:a4:99:76:8a:cb:13:4f:ab:a8:5b:
0a:ef:52:4b:d7:22:49:42:54:c3:96:8d:0f:8e:fb:2b:67:24:
76:01:33:8c:d4:2b:ee:0a:72:2f:b7:45:c7:5d:3b:58:d2:c2:
c1:ab:0b:ef:7c:ec:3a:53:f3:4b:d3:91:c7:aa:a2:4c:b5:56:
22:6e:89:0e:d4:fb:6e:c6:79:ff:c1:61:a6:6c:5b:fa:cc:da:
d3:f1:91:c1:2e:b7:5e:e0:0d:22:44:1c:75:13:6d:2b:43:b3:
47:c9:cd:13:ec:c6:83:ff:0c:31:a9:ed:12:20:5d:9e:7c:bb:
2d:ae:4c:68:48:dd:0c:f3:bb:9a:b7:71:67:fc:82:ca:1c:e7:
6a:3a:f8:00:b0:3e:27:bf:ab:fb:56:5d:e8:18:08:73:77:8d:
a5:53:0f:97:00:2f:2c:7b:f8:1d:b7:21:f5:5a:f4:9d:de:93:
1d:66:16:45:ea:65:44:8f:5a:5e:2d:ae:ae:ce:c1:27:db:a7:
27:62:26:47:d9:32:54:be:24:c1:53:79:f8:26:5d:0e:d5:81:
c4:65:3d:ed:1c:3a:7a:26:fb:0a:fb:c6:95:d9:9d:6d:48:ed:
9b:4a:d4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:43 2025 by rpki-client