Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft
File: MvacygDXMkCpbJMio-lzeQ8vYcQ.mft (raw, json)
Hash identifier: VEQrnm8L2KlfNELgr789sYkWGx/hEWo8rnVHQvIAT2E=
Subject key identifier: 45:8B:D1:71:68:CD:83:91:90:C1:C5:48:B0:03:40:09:AF:E3:05:53
Authority key identifier: 32:F6:9C:CA:00:D7:32:40:A9:6C:93:22:A3:E9:73:79:0F:2F:61:C4
Certificate issuer: /CN=32f69cca00d73240a96c9322a3e973790f2f61c4
Certificate serial: 0198D4733D1A36E89873181A3DEAB2B6CE98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvacygDXMkCpbJMio-lzeQ8vYcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft
Manifest number: FD
Signing time: Sat 23 Aug 2025 01:02:58 +0000
Manifest this update: Sat 23 Aug 2025 01:02:58 +0000
Manifest next update: Sun 24 Aug 2025 01:02:58 +0000
Files and hashes: 1: MvacygDXMkCpbJMio-lzeQ8vYcQ.crl (hash: SQXAw5WdzDfBp29YupsqQdVPpPUBwoumQfeza5pkP8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvacygDXMkCpbJMio-lzeQ8vYcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:3d:1a:36:e8:98:73:18:1a:3d:ea:b2:b6:ce:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f69cca00d73240a96c9322a3e973790f2f61c4
Validity
Not Before: Aug 23 01:02:58 2025 GMT
Not After : Aug 24 01:02:58 2025 GMT
Subject: CN=458bd17168cd839190c1c548b0034009afe30553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:19:2a:9b:9a:92:f4:4e:84:b4:ae:ad:11:1c:
82:b9:bb:44:c2:ec:02:bb:df:2e:3b:64:63:ac:56:
0d:d4:42:59:c0:8a:a1:d7:30:53:cb:87:6d:1e:98:
e2:c9:3c:aa:08:58:40:07:61:8a:25:0e:c0:51:48:
af:72:3c:a4:a7:d0:af:45:77:ef:54:ce:5d:16:14:
5d:5c:b5:32:68:56:c3:d9:21:28:b0:6c:60:74:f0:
34:b4:c3:68:1b:b0:1c:ba:b1:4e:5e:3d:d9:c6:5d:
18:ac:ea:ec:d0:c1:f7:0e:dc:32:b6:04:fa:d9:ff:
58:c8:79:83:a4:17:65:03:df:2f:27:78:c9:db:27:
2e:f9:dd:40:6b:b2:4e:ad:a8:bd:42:16:c0:2a:45:
05:db:b2:f0:11:c8:e4:2a:bc:5e:2b:c4:fd:34:72:
ed:ad:4f:a6:d3:4f:df:ac:0d:d9:c8:19:30:c6:0c:
6f:4f:21:c4:e4:e8:af:a7:ac:06:42:72:5e:8c:0b:
ad:dc:fa:3e:64:14:a5:d3:98:52:00:36:24:63:67:
42:ad:c3:3b:a4:6c:5d:2b:50:1c:5e:47:e2:b3:b5:
cc:5d:d2:58:6d:3d:2e:da:97:6b:91:f8:39:5f:47:
d1:50:50:8b:08:87:45:6c:0c:a4:14:83:45:ab:f4:
1f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8B:D1:71:68:CD:83:91:90:C1:C5:48:B0:03:40:09:AF:E3:05:53
X509v3 Authority Key Identifier:
keyid:32:F6:9C:CA:00:D7:32:40:A9:6C:93:22:A3:E9:73:79:0F:2F:61:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvacygDXMkCpbJMio-lzeQ8vYcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:59:00:c1:e4:d1:ff:62:2b:38:bd:78:b7:fa:c1:68:21:db:
af:47:73:40:3b:2e:dc:d9:5d:a2:fa:90:6d:61:ee:46:09:77:
2c:c7:eb:15:98:14:93:4c:20:84:9a:21:99:28:1a:fa:91:5b:
1c:a2:fc:4d:03:1e:c4:1e:40:0b:50:b2:76:96:fd:0d:be:ca:
bf:66:34:8b:87:18:5b:b9:38:a5:56:0d:8c:90:96:0d:36:52:
03:5f:5d:e8:12:d1:d9:44:e8:f9:eb:5c:6d:75:cf:ed:c5:54:
da:86:5d:b5:1f:a0:72:d5:7f:e4:55:e6:b0:32:13:2a:96:9e:
e2:9d:d2:2c:1e:37:e7:e6:b1:5d:72:7b:6c:50:f7:c4:bd:bf:
3d:21:71:29:f4:ed:75:2f:86:5a:4b:2b:0d:be:d8:94:9b:38:
c0:34:17:f6:b1:91:8c:b0:dd:7f:0d:6a:2a:d9:c5:84:28:9b:
f7:16:ad:54:85:a1:b2:4c:9a:39:99:42:0d:a2:1e:ea:a4:80:
90:68:b7:75:0c:f3:eb:7e:5a:cb:c7:8c:31:64:43:a5:82:cf:
ff:c2:0a:4f:85:3b:ca:20:a2:d5:c8:92:f9:84:c9:cd:1a:30:
ea:c9:89:82:28:26:7a:06:fe:48:0b:b1:da:2b:06:84:cc:df:
2f:4b:fd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:03 2025 by rpki-client