Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft
File: MvacygDXMkCpbJMio-lzeQ8vYcQ.mft (raw, json)
Hash identifier: jypK9RJV2I5XdXX6i77o4l77AC24yu2mRZy/yqi10Ig=
Subject key identifier: 35:C8:7B:6C:22:0C:DE:23:01:13:20:CB:45:4F:67:E3:B1:5E:BF:87
Authority key identifier: 32:F6:9C:CA:00:D7:32:40:A9:6C:93:22:A3:E9:73:79:0F:2F:61:C4
Certificate issuer: /CN=32f69cca00d73240a96c9322a3e973790f2f61c4
Certificate serial: 0199FBEB1B1504BCE7AFDD1DBCB6CBB3B376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvacygDXMkCpbJMio-lzeQ8vYcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft
Manifest number: 0196
Signing time: Sun 19 Oct 2025 10:01:52 +0000
Manifest this update: Sun 19 Oct 2025 10:01:52 +0000
Manifest next update: Mon 20 Oct 2025 10:01:52 +0000
Files and hashes: 1: MvacygDXMkCpbJMio-lzeQ8vYcQ.crl (hash: FVEwoNzZV0mfA6aSeAhYN1sUYWvl6MNinpVbDoXpmyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvacygDXMkCpbJMio-lzeQ8vYcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:1b:15:04:bc:e7:af:dd:1d:bc:b6:cb:b3:b3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f69cca00d73240a96c9322a3e973790f2f61c4
Validity
Not Before: Oct 19 10:01:52 2025 GMT
Not After : Oct 20 10:01:52 2025 GMT
Subject: CN=35c87b6c220cde23011320cb454f67e3b15ebf87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:73:3f:0d:f4:ab:63:29:91:68:0b:b0:65:d5:
3e:c9:cb:d9:ce:26:27:75:8e:f4:e5:bd:6a:e6:a7:
25:df:5b:92:cc:4e:f7:25:41:08:69:52:7f:7e:84:
28:48:0f:06:43:e5:28:c4:aa:30:ea:ba:3b:b2:1e:
7d:1c:e0:d2:ee:c4:35:d8:b7:14:a6:8a:f5:21:18:
ae:07:00:f0:28:79:d5:7f:ce:ac:c2:cc:f9:f3:11:
77:25:84:1a:ac:bc:03:d0:32:98:ef:f1:e7:53:fc:
55:56:29:74:13:9f:ed:6f:93:cc:e6:c4:a1:e7:91:
01:d0:b8:ea:de:d6:06:9f:90:9f:10:dc:e3:c5:fb:
83:af:54:ae:13:db:9e:17:89:1a:a3:4d:e1:b8:05:
fc:03:7c:d5:c3:88:48:04:f3:0a:ff:a7:3f:d5:da:
ab:3a:cd:5a:b4:61:50:59:a3:5d:d5:3e:41:7f:5b:
cc:2c:70:6a:ab:30:52:ab:ad:46:db:6c:a3:cc:eb:
ba:39:ed:3b:fd:9c:9a:26:26:ed:fc:85:5d:97:e0:
23:41:00:01:db:25:0c:2c:0a:01:3e:1e:8f:8a:ac:
d1:a6:f3:46:a2:30:b2:09:ec:0a:33:29:cc:4f:0e:
ea:fc:03:cb:70:3c:61:63:63:89:11:12:ef:55:b7:
4a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C8:7B:6C:22:0C:DE:23:01:13:20:CB:45:4F:67:E3:B1:5E:BF:87
X509v3 Authority Key Identifier:
keyid:32:F6:9C:CA:00:D7:32:40:A9:6C:93:22:A3:E9:73:79:0F:2F:61:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvacygDXMkCpbJMio-lzeQ8vYcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c6:1e:65:35:aa:83:af:a1:8a:f8:4f:d6:4c:ad:25:ff:34:
e3:6b:91:6c:52:98:7d:81:08:9a:55:32:c0:e1:61:8c:c6:aa:
e5:ec:48:e8:ab:bb:21:ff:62:01:9d:d1:4a:fb:93:20:04:c6:
47:5d:9d:16:d8:d6:5f:31:9e:07:33:e5:51:33:83:58:e6:66:
94:35:d5:4e:5f:d4:c8:3a:1d:26:20:3e:c3:2e:db:9c:fd:99:
94:f0:d3:31:58:df:7d:e6:da:2c:81:d0:d3:4e:ef:71:64:a4:
2d:d8:79:76:9e:b0:46:18:10:b2:03:66:60:c3:a4:29:8d:01:
76:57:52:72:c6:da:67:36:1d:c2:63:51:87:83:3c:1f:fd:c8:
c7:d1:1d:4f:1a:2a:df:1f:9e:e4:9d:63:4e:f9:be:ab:50:03:
d3:8a:67:05:60:64:6e:fc:5e:20:2b:1f:45:9d:a8:12:83:16:
b9:89:4a:71:8f:06:6a:b5:3b:df:18:70:67:1a:e3:03:43:9c:
6d:0e:83:4e:40:b4:a9:ab:40:40:9a:1b:21:0b:20:c7:35:a1:
99:90:90:a0:4d:d0:7a:49:35:65:ae:d9:67:c1:96:6f:56:be:
8e:73:9a:54:d5:c7:d2:b6:ab:55:d2:30:b6:43:83:a8:e9:0f:
16:a5:66:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:35 2025 by rpki-client