Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
File: mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft (raw, json)
Hash identifier: 0HI1Vjvz3GKGcoAP+fpDMYND6aPH9hip19DFk3QbXY0=
Subject key identifier: A9:13:8A:C5:85:ED:8E:0D:33:08:6C:C4:88:93:41:1E:38:BD:47:3D
Authority key identifier: 9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9
Certificate issuer: /CN=9ab571b69af85650affedcefe57d2a73fd6e6ca9
Certificate serial: 0199FBEAA4BCC1541662B705A2F607C57F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
Manifest number: 0CCE
Signing time: Sun 19 Oct 2025 10:01:22 +0000
Manifest this update: Sun 19 Oct 2025 10:01:22 +0000
Manifest next update: Mon 20 Oct 2025 10:01:22 +0000
Files and hashes: 1: mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl (hash: uXtIDhYGdps4OjiQ3OPX+CljfI1/G5GZIjiuxCmB6r0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a4:bc:c1:54:16:62:b7:05:a2:f6:07:c5:7f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab571b69af85650affedcefe57d2a73fd6e6ca9
Validity
Not Before: Oct 19 10:01:22 2025 GMT
Not After : Oct 20 10:01:22 2025 GMT
Subject: CN=a9138ac585ed8e0d33086cc48893411e38bd473d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:95:cc:6a:a2:af:a2:b4:aa:7c:0a:ca:03:e8:
a5:7d:bf:c3:99:1f:50:33:9d:ec:27:2a:3d:c3:fc:
cd:48:96:cd:03:4e:e5:b9:f5:4a:d7:da:e2:f7:1d:
f0:46:ee:bb:69:6e:74:5e:e1:ab:5e:08:10:33:f9:
cc:e0:f2:d3:d0:c7:a1:06:d4:86:42:8d:e2:c1:19:
03:1d:d8:37:5f:cf:4a:81:8a:89:e6:24:25:7c:f0:
1c:f5:c3:3a:37:56:31:a8:c6:34:35:24:a5:e7:da:
22:f1:41:67:f3:02:e9:5d:5b:68:69:6e:38:a0:0d:
ab:83:e2:1e:4a:99:49:02:6e:74:69:ac:19:95:54:
3d:18:e8:02:2a:ff:a0:e0:69:91:91:c6:5b:9e:96:
74:64:1e:86:9a:be:6d:ff:ec:d1:28:a3:7d:14:09:
ca:4a:80:31:63:fd:73:01:4c:d7:d0:57:ba:04:15:
5b:9b:54:c9:4d:77:18:bd:b0:87:37:0e:ff:c6:eb:
03:75:d5:43:51:dd:48:65:17:cf:bc:02:cf:57:40:
4d:eb:c8:74:3d:f4:78:72:c3:ea:e0:74:37:c5:74:
82:d9:9c:60:0e:12:3d:a0:b2:18:ff:3a:fe:62:1d:
0b:59:ea:de:8b:78:c7:0c:a9:d1:8a:45:bc:7f:a3:
1f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:13:8A:C5:85:ED:8E:0D:33:08:6C:C4:88:93:41:1E:38:BD:47:3D
X509v3 Authority Key Identifier:
keyid:9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:18:c8:21:e0:a6:8c:13:8a:fa:5b:ac:b3:e2:f6:15:8d:21:
dc:d8:2a:0b:ae:9e:6b:15:58:fe:c4:0a:77:34:5d:ca:2f:63:
e4:05:ed:c6:c1:0f:8e:69:17:68:96:fe:2a:ad:62:c6:11:00:
1b:02:f6:15:ba:a4:11:ff:ed:3f:49:9c:d0:e6:72:b3:16:55:
3f:4e:f4:30:61:42:54:9e:d5:06:55:51:56:32:48:1b:df:d4:
fc:4b:e9:c4:b7:d6:21:18:76:77:8c:ed:ed:1f:bd:0b:7f:0b:
99:14:58:d9:73:2c:de:ca:f8:37:0c:23:aa:57:87:a6:7a:60:
49:e5:e5:b6:33:8a:60:c1:b0:26:da:8e:88:fd:a0:b6:ae:9c:
c7:6a:42:9f:de:41:d5:31:ca:f1:53:be:a8:41:6c:04:62:6e:
47:f6:b6:2d:a0:42:42:53:61:84:d3:8e:c9:85:4e:d0:cb:4e:
1a:30:69:80:1f:0c:08:b0:d1:a7:2a:b4:b6:d2:a8:c2:c2:10:
e7:28:49:28:ee:64:f0:85:6e:f6:3f:20:17:01:1d:f3:55:42:
b5:f8:39:0d:57:2a:49:a3:6d:22:ec:9f:75:d9:12:12:46:26:
b7:1c:11:f2:85:8c:f6:67:21:07:87:b3:0c:28:ba:a2:45:fb:
f3:bb:c6:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76qS8wVQWYrcFovYHxX9jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhYjU3MWI2OWFmODU2NTBhZmZlZGNlZmU1N2QyYTczZmQ2
ZTZjYTkwHhcNMjUxMDE5MTAwMTIyWhcNMjUxMDIwMTAwMTIyWjAzMTEwLwYDVQQD
EyhhOTEzOGFjNTg1ZWQ4ZTBkMzMwODZjYzQ4ODkzNDExZTM4YmQ0NzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65XMaqKvorSqfArKA+ilfb/DmR9Q
M53sJyo9w/zNSJbNA07lufVK19ri9x3wRu67aW50XuGrXggQM/nM4PLT0MehBtSG
Qo3iwRkDHdg3X89KgYqJ5iQlfPAc9cM6N1YxqMY0NSSl59oi8UFn8wLpXVtoaW44
oA2rg+IeSplJAm50aawZlVQ9GOgCKv+g4GmRkcZbnpZ0ZB6Gmr5t/+zRKKN9FAnK
SoAxY/1zAUzX0Fe6BBVbm1TJTXcYvbCHNw7/xusDddVDUd1IZRfPvALPV0BN68h0
PfR4csPq4HQ3xXSC2ZxgDhI9oLIY/zr+Yh0LWerei3jHDKnRikW8f6MfQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkTisWF7Y4NMwhsxIiTQR44vUc9MB8GA1UdIwQY
MBaAFJq1cbaa+FZQr/7c7+V9KnP9bmypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXJWeHRwcjRWbEN2X3R6djVYMHFjXzF1YktrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mYzI1MWUtMjU5Yy00N2Y1LWFlMzAt
MzcyNDUzNWVjYzFhLzEvbXJWeHRwcjRWbEN2X3R6djVYMHFjXzF1YktrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mYzI1MWUtMjU5Yy00N2Y1LWFlMzAtMzcyNDUzNWVjYzFh
LzEvbXJWeHRwcjRWbEN2X3R6djVYMHFjXzF1YktrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxjIIeCm
jBOK+luss+L2FY0h3NgqC66eaxVY/sQKdzRdyi9j5AXtxsEPjmkXaJb+Kq1ixhEA
GwL2FbqkEf/tP0mc0OZysxZVP070MGFCVJ7VBlVRVjJIG9/U/EvpxLfWIRh2d4zt
7R+9C38LmRRY2XMs3sr4NwwjqleHpnpgSeXltjOKYMGwJtqOiP2gtq6cx2pCn95B
1THK8VO+qEFsBGJuR/a2LaBCQlNhhNOOyYVO0MtOGjBpgB8MCLDRpyq0ttKowsIQ
5yhJKO5k8IVu9j8gFwEd81VCtfg5DVcqSaNtIuyfddkSEkYmtxwR8oWM9mchB4ez
DCi6okX787vGAA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:38 2025 by rpki-client