Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
File: Mb9CyzMks4trh4t81W9pk263w9M.mft (raw, json)
Hash identifier: nPjemCGpF4L4gF1IlBJtpmo/8Sjt1JuznhBzCZzwUSg=
Subject key identifier: 31:DD:E8:AD:6B:CA:CA:0E:B1:BC:AB:AA:E5:24:D9:BE:18:40:09:60
Authority key identifier: 31:BF:42:CB:33:24:B3:8B:6B:87:8B:7C:D5:6F:69:93:6E:B7:C3:D3
Certificate issuer: /CN=31bf42cb3324b38b6b878b7cd56f69936eb7c3d3
Certificate serial: 0199FB0F1C11096300202C426C600ACC7972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mb9CyzMks4trh4t81W9pk263w9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
Manifest number: 0526
Signing time: Sun 19 Oct 2025 06:01:35 +0000
Manifest this update: Sun 19 Oct 2025 06:01:35 +0000
Manifest next update: Mon 20 Oct 2025 06:01:35 +0000
Files and hashes: 1: Mb9CyzMks4trh4t81W9pk263w9M.crl (hash: 0mWDO+R1ELm948XniRada/ocVdDFtQq2fsZtxg+n560=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mb9CyzMks4trh4t81W9pk263w9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:1c:11:09:63:00:20:2c:42:6c:60:0a:cc:79:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31bf42cb3324b38b6b878b7cd56f69936eb7c3d3
Validity
Not Before: Oct 19 06:01:35 2025 GMT
Not After : Oct 20 06:01:35 2025 GMT
Subject: CN=31dde8ad6bcaca0eb1bcabaae524d9be18400960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:eb:6c:18:3d:78:4f:a9:cf:bf:80:f4:93:e2:
c8:aa:a0:dc:f7:cd:41:ae:5a:f9:01:16:cf:1d:cc:
cc:7c:66:14:7b:71:8b:1b:e3:59:c7:a5:a4:62:5b:
40:1b:bf:34:e8:ae:34:9d:99:d6:b2:b6:31:ec:62:
c3:4c:af:19:fa:01:c7:c6:5f:b6:f8:7d:be:85:3b:
f1:37:65:1b:cd:e3:5c:7c:17:b0:a6:7a:af:5c:d6:
f5:6e:58:4d:a9:b7:f7:94:de:b0:e4:24:bd:4d:d7:
8f:5f:39:f9:75:97:2e:74:33:f0:80:13:de:e5:38:
9a:cb:48:f7:5d:56:c6:f0:67:59:f6:e8:a2:74:92:
6f:e1:65:e7:d4:e8:ad:81:08:12:ef:58:d0:cc:a5:
5a:9b:be:d9:64:8c:4f:62:8a:2d:f6:11:67:4c:a2:
c5:45:ee:34:0f:32:92:15:ae:1f:10:21:87:4e:2a:
83:8f:4a:7d:36:3c:bd:9d:20:04:6c:28:70:95:9d:
e0:ef:69:04:62:3d:dc:0f:83:0b:ae:62:a8:9e:cd:
11:ad:ff:11:c9:af:c3:47:fb:af:7d:77:50:ca:07:
8a:d7:90:c2:15:0d:d0:8b:e2:ab:6e:09:ee:bd:ae:
18:16:fe:28:03:b1:f5:6c:96:ce:4c:f7:83:62:e6:
9d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DD:E8:AD:6B:CA:CA:0E:B1:BC:AB:AA:E5:24:D9:BE:18:40:09:60
X509v3 Authority Key Identifier:
keyid:31:BF:42:CB:33:24:B3:8B:6B:87:8B:7C:D5:6F:69:93:6E:B7:C3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mb9CyzMks4trh4t81W9pk263w9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ba68bd-93a8-47d3-9c48-491cb485432d/1/Mb9CyzMks4trh4t81W9pk263w9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ef:c8:8c:51:0f:ee:71:9b:fc:b0:6d:92:34:3c:ff:12:63:
f0:6b:41:10:6b:e2:01:fc:1a:33:e6:39:82:46:78:3f:cc:86:
b6:25:51:d3:33:05:aa:84:73:cf:e6:ea:5a:e7:c2:a6:6a:1c:
e0:35:67:f9:d1:03:cc:24:ff:fe:0c:9f:0f:a6:4a:47:c9:20:
84:2c:30:af:16:9b:f5:25:aa:e6:6e:77:88:98:aa:10:48:24:
7b:6f:75:c4:ec:d4:78:13:e3:aa:1c:f3:d2:26:14:1d:a3:80:
ea:72:a3:ef:19:2e:de:34:6a:47:68:05:d0:8f:28:66:6c:ed:
4f:1e:aa:6a:a0:59:a1:a2:40:bf:60:46:3e:b0:24:f4:4c:06:
85:fb:ea:2e:46:03:de:82:5b:e0:e1:03:c9:89:76:3a:ec:6d:
3c:66:ec:ae:b0:83:f2:1c:b5:74:99:7d:d8:c8:28:a2:da:a3:
8b:78:1b:66:8d:7b:4f:21:1e:dd:bb:de:16:9c:39:28:f9:d2:
b6:7d:c6:eb:c2:1e:e3:35:5e:a1:f7:d9:a6:69:3c:10:39:40:
e3:6b:23:4e:d1:dc:4f:2b:ec:3f:47:55:bc:fc:a3:f5:69:d1:
d1:05:61:ae:ec:22:0d:ab:69:81:3f:30:72:4f:47:61:85:41:
8e:16:48:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:18 2025 by rpki-client