Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
File: mrlC3a28mskLTs---tsjEyOmcFU.mft (raw, json)
Hash identifier: l4iP+k032rvXTchq+JzwXSCKW78VN5wjOxce6Uux5JE=
Subject key identifier: E1:07:60:25:53:3F:F7:1E:7B:90:80:30:E1:4E:79:96:1D:4C:0E:AB
Authority key identifier: 9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55
Certificate issuer: /CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055
Certificate serial: 0197CA5E1187A07B2A677F37FBC9E983E1F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
Manifest number: 0CA4
Signing time: Wed 02 Jul 2025 09:00:51 +0000
Manifest this update: Wed 02 Jul 2025 09:00:51 +0000
Manifest next update: Thu 03 Jul 2025 09:00:51 +0000
Files and hashes: 1: mrlC3a28mskLTs---tsjEyOmcFU.crl (hash: p5MvKdtoe9cx46jvMEdfLj3TQ0mnwKE1Q3ioWUnfUNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:11:87:a0:7b:2a:67:7f:37:fb:c9:e9:83:e1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055
Validity
Not Before: Jul 2 09:00:51 2025 GMT
Not After : Jul 3 09:00:51 2025 GMT
Subject: CN=e1076025533ff71e7b908030e14e79961d4c0eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ef:c6:d8:85:c7:61:f1:82:57:bc:07:2a:c2:
8b:72:d4:d1:73:99:0c:d7:5d:7a:07:83:0b:0d:43:
75:22:74:e8:3c:56:da:82:db:dc:66:9c:47:ae:b9:
d2:45:b5:82:5d:a6:4b:7d:4b:78:f1:38:35:03:33:
4b:95:59:37:3c:b5:08:1b:be:56:38:02:06:94:ce:
86:e8:9b:95:67:0d:19:5f:9f:f0:f4:c5:fa:09:9e:
bb:f7:db:f5:9c:cf:05:16:9c:e0:9d:3e:6f:97:28:
26:83:d6:90:f2:65:e1:e1:ae:47:74:55:15:4a:96:
1a:36:69:37:e5:7a:41:9e:b3:79:80:91:2b:ff:34:
f0:bb:03:eb:28:15:81:42:98:45:47:6c:89:be:3d:
cd:56:b3:7e:a5:5d:aa:cd:5c:93:61:2d:67:76:61:
49:8e:07:8b:b9:67:82:02:32:78:5f:63:63:32:71:
c2:52:9e:fe:c3:3a:d1:76:aa:e6:47:ed:29:38:a0:
fe:56:6c:68:3b:b5:44:f9:7a:c0:01:67:22:e8:cf:
63:42:24:78:f0:7d:82:91:7c:4e:8c:64:51:04:a4:
f1:be:fb:02:49:9d:c0:f4:7a:a7:5c:cd:82:47:e0:
4a:d0:c7:d1:5b:03:48:e3:7d:52:08:2d:26:30:6e:
12:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:07:60:25:53:3F:F7:1E:7B:90:80:30:E1:4E:79:96:1D:4C:0E:AB
X509v3 Authority Key Identifier:
keyid:9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a8:96:b7:8e:3c:c6:8f:af:ce:68:0c:78:b8:53:e2:c2:a6:
dd:fe:7e:03:ca:73:d2:25:65:10:26:cc:b8:6d:5c:12:ce:4f:
55:db:41:cd:73:68:97:49:cd:f6:35:be:c3:99:74:e0:f3:ad:
5c:69:ce:55:31:90:e6:63:66:ef:0e:c9:59:2f:ae:ef:b4:f8:
80:16:b6:0d:bd:d1:8d:c5:78:4b:24:0e:3c:18:1b:05:79:7f:
cc:3e:c7:18:fc:ff:37:cb:1c:03:71:ad:1f:ee:a9:e3:a2:1c:
7f:0a:fc:05:bc:31:7a:b1:65:f6:83:21:3e:85:1b:53:1b:b9:
6e:57:66:5f:ae:64:b8:9a:30:76:5f:02:d5:c9:4d:7d:bf:34:
13:0e:f5:76:22:d4:0f:2e:4a:87:ae:8d:ec:78:88:b8:54:7d:
04:aa:22:af:b8:03:6a:5b:77:23:4a:23:09:0a:9e:56:a7:43:
a5:ef:09:50:5f:df:54:ba:40:1c:50:de:05:91:6b:cf:b5:d5:
01:e0:07:9e:6b:90:57:8f:c4:94:df:bf:c7:2e:6d:73:a5:45:
3e:2e:67:f7:a1:8e:51:e1:ff:f5:aa:19:94:55:d2:37:20:9b:
67:74:be:b6:d9:0c:f9:61:65:de:6a:9c:fe:ac:3e:4b:ab:b1:
93:15:fb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:08:05 2025 by rpki-client