Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
File: mrlC3a28mskLTs---tsjEyOmcFU.mft (raw, json)
Hash identifier: GsWbHPaAXfp2/4uoCc8bdik/ksMdw4mZJKgltR+BrxM=
Subject key identifier: BD:0C:DB:F9:CA:51:0E:D6:17:12:8D:CE:A7:50:6E:73:15:ED:12:5C
Authority key identifier: 9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55
Certificate issuer: /CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055
Certificate serial: 0198D4E0A1E9EAB43DD1A72ADFE80CF1AAA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
Manifest number: 0D2E
Signing time: Sat 23 Aug 2025 03:02:27 +0000
Manifest this update: Sat 23 Aug 2025 03:02:27 +0000
Manifest next update: Sun 24 Aug 2025 03:02:27 +0000
Files and hashes: 1: mrlC3a28mskLTs---tsjEyOmcFU.crl (hash: Im2btBIoftHTt0pCj40KpPWO0a7fXDB9R8T2/DyyqTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:a1:e9:ea:b4:3d:d1:a7:2a:df:e8:0c:f1:aa:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055
Validity
Not Before: Aug 23 03:02:27 2025 GMT
Not After : Aug 24 03:02:27 2025 GMT
Subject: CN=bd0cdbf9ca510ed617128dcea7506e7315ed125c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:40:30:98:17:90:a4:d6:c3:63:9a:af:a9:
98:8f:c5:e5:2d:28:bf:f9:bb:65:0a:88:99:73:be:
1e:1a:d5:8a:b5:fc:0d:ce:95:ba:ef:dd:73:6d:a0:
f4:18:9a:da:1b:82:51:85:95:3e:2f:7b:62:b2:eb:
d8:8a:6e:3b:08:f9:52:f9:aa:84:15:1a:1b:61:fd:
10:ce:4d:07:77:a8:29:c5:7d:cb:0a:4c:37:ad:75:
17:8f:bd:31:a9:c5:3a:e7:65:4d:4b:47:95:c8:68:
86:96:a9:52:d9:f5:9b:58:6d:f7:52:e1:ef:38:ac:
75:bc:9b:b0:34:32:5f:ac:d7:68:e6:5b:0a:0a:e4:
04:f4:b4:94:7d:46:79:70:d9:8c:ad:a9:06:a1:ca:
3d:83:2f:b6:2a:14:01:3e:ff:73:35:db:87:67:ea:
a0:9e:6c:3d:93:6e:46:b4:e9:23:3a:49:0d:06:30:
52:cd:7e:59:37:40:bc:b5:9f:b4:62:41:b9:1a:12:
c7:fe:ed:dc:51:0c:7a:e8:2c:e3:e7:2b:d5:1a:de:
fa:1a:0a:9a:56:a8:1e:37:e7:f1:5c:9c:ac:24:fd:
b3:5e:e6:c7:db:fa:80:b0:d5:f8:e5:c3:a7:29:15:
b1:37:2b:46:eb:5b:a2:e3:80:57:ae:57:59:8e:a8:
0a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0C:DB:F9:CA:51:0E:D6:17:12:8D:CE:A7:50:6E:73:15:ED:12:5C
X509v3 Authority Key Identifier:
keyid:9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d1:9b:2f:ea:0b:a2:a0:48:f1:01:33:90:63:2a:70:df:6c:
17:ec:81:33:29:93:f3:92:b8:d0:0c:b3:5b:53:1e:0a:20:0f:
b6:30:99:1b:96:35:75:96:3f:42:9c:f2:0b:28:1c:ef:94:f4:
61:0a:66:78:e9:8d:f8:81:e3:92:ae:ea:e5:b7:16:73:bb:da:
5f:c9:e8:2b:bb:d5:5a:64:ae:02:39:11:eb:d8:3e:f2:ca:c4:
f4:69:93:45:7f:70:fb:07:77:13:54:57:3e:14:4b:5e:b8:ef:
b4:eb:01:f7:c0:c3:dd:31:b2:3b:ba:d8:50:50:10:a2:55:62:
05:e3:f8:7b:18:f1:5d:ef:16:f9:f8:36:4c:ae:42:45:15:9c:
ff:77:fc:fc:71:1f:09:42:07:cf:32:b8:3d:8d:88:8e:2f:fc:
92:14:b3:12:3c:61:71:5b:dd:8c:64:69:bc:94:91:db:cd:33:
73:2c:f6:fe:12:52:cf:a7:26:25:b5:2d:1c:5d:1b:6c:aa:26:
26:86:bf:43:d5:04:e5:c0:7c:ef:c5:2b:54:39:81:16:bf:81:
d4:65:cb:44:c2:6b:27:58:10:ff:de:54:13:59:04:52:4a:44:
ae:4e:3e:46:e8:9d:70:61:39:c0:a6:ec:0b:c5:0a:bf:f1:2d:
ee:62:2c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:25 2025 by rpki-client