
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
File: MvBHo0IShysLH_gE7gIrAq91_-0.mft (raw, json)
Hash identifier: a0CVNOoA9P/vgptHVtdsC+1yiqkKE/0mk5U5YqbJ204=
Subject key identifier: 85:CA:99:D0:D9:87:5B:E4:97:EB:A7:54:04:34:CC:0C:01:66:20:DB
Authority key identifier: 32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
Certificate issuer: /CN=32f047a34212872b0b1ff804ee022b02af75ffed
Certificate serial: 0198D583AE03CC2D0B0834F99F2B5E906B57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
Manifest number: 05F4
Signing time: Sat 23 Aug 2025 06:00:33 +0000
Manifest this update: Sat 23 Aug 2025 06:00:33 +0000
Manifest next update: Sun 24 Aug 2025 06:00:33 +0000
Files and hashes: 1: MvBHo0IShysLH_gE7gIrAq91_-0.crl (hash: Sxl4lKR1lETRcwmsZBECS0f2qr6Ik/grlQ8KQUxhuVI=)
2: WgGE8SmHkkHtiKjEfowQOh6KXV8.roa (hash: 22fxBEDWF5kPp/e3BDEYhqrTgPBi1KncqCiTSsX2CWM=)
3: pvxgjOK61sSAIjSKXGp9wCqGnds.roa (hash: cyj8Q0roEhc5/yo7oP4F2A5FfhnYWsPzbSEckXutgEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ae:03:cc:2d:0b:08:34:f9:9f:2b:5e:90:6b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f047a34212872b0b1ff804ee022b02af75ffed
Validity
Not Before: Aug 23 06:00:33 2025 GMT
Not After : Aug 24 06:00:33 2025 GMT
Subject: CN=85ca99d0d9875be497eba7540434cc0c016620db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:58:cf:f3:ed:e5:e8:f3:c9:28:38:54:50:fa:
e0:0a:b1:63:c1:9a:12:51:92:4c:4d:09:ab:5e:4e:
03:09:3c:dc:02:96:14:ea:e9:34:f4:aa:e7:42:a2:
57:16:07:16:42:a5:a1:61:e7:a0:45:b7:3b:0e:b5:
61:3f:06:01:e1:e4:8d:4d:40:93:b0:ea:83:71:d7:
16:bc:dd:19:72:5c:50:b1:3b:09:4b:a6:73:3a:ed:
e7:5e:db:18:d4:a9:37:08:51:64:a3:a1:78:8b:3a:
2b:c5:da:19:04:d7:d7:b2:7b:de:f5:36:70:6c:2a:
d6:e2:78:27:09:d9:38:47:9f:3e:8f:36:8f:cf:af:
ea:a1:e0:d9:9f:b3:e0:b6:fa:f8:9a:7b:11:c2:30:
53:2c:69:83:01:40:8d:eb:8c:f1:9e:e9:d1:d5:dc:
f4:d7:3c:50:08:78:b9:ae:f2:c0:a6:11:e0:e2:86:
32:da:80:4c:89:7a:f4:cf:48:26:79:b9:a8:05:a3:
f7:e6:a7:a9:0b:f6:22:dd:1b:2b:75:d9:5c:ea:bc:
2c:5a:15:5d:7e:ca:e9:9c:7a:ce:a6:df:6a:1a:20:
db:75:cf:32:1b:a7:48:9d:92:77:18:87:46:64:c6:
dc:18:17:45:49:ed:aa:7c:e6:64:93:75:06:3f:50:
3b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CA:99:D0:D9:87:5B:E4:97:EB:A7:54:04:34:CC:0C:01:66:20:DB
X509v3 Authority Key Identifier:
keyid:32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d7:45:e7:a2:27:22:c4:22:2b:94:0b:c9:e1:68:51:d2:30:
8f:4b:75:a2:44:c7:f4:7a:93:ee:ed:ad:3d:57:46:67:87:16:
b9:26:19:5d:32:77:aa:17:20:2e:d7:e7:32:23:e2:87:3f:13:
7e:6c:83:30:e2:b4:ca:18:68:1c:70:ce:8e:b4:9c:5b:3a:56:
37:5a:57:94:c5:d5:57:bb:58:89:f4:57:42:7f:bb:96:9a:3e:
d3:67:0e:84:8e:c8:41:ab:a7:4e:9a:2c:8e:ec:78:f2:e3:f1:
48:b7:e2:14:2f:fe:17:86:09:e1:2e:79:b8:20:72:2b:fd:49:
fa:7c:85:83:46:77:be:13:90:e6:82:49:88:fa:de:70:e2:6d:
8e:cc:bb:a3:81:62:5e:d9:af:d4:1f:87:f0:18:de:6c:35:46:
fe:21:23:ef:8e:3e:76:f1:bd:c3:53:2e:2b:5d:d8:2e:36:6f:
44:b9:f6:be:85:84:32:5c:68:7d:6e:27:ff:4c:52:2a:66:94:
85:f2:df:57:ba:8b:b0:c7:62:01:a7:f0:69:ac:d9:5c:d1:49:
44:bd:7f:cd:50:d1:ab:50:45:53:9a:bf:d9:ea:a4:fb:1b:59:
5e:e6:4d:74:a1:a0:ec:cc:fc:9f:91:11:6c:c0:a9:ec:aa:4f:
6b:34:6a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:37 2025 by rpki-client