Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
File: MvrPXQJzAmjTsedslrD4WI2Zi08.mft (raw, json)
Hash identifier: 5RZsGuTYwJ//9Kh409BcgOClLlsFlRIgAGnwCYJAr7w=
Subject key identifier: 24:27:B7:FC:85:E8:E7:24:FA:51:92:E1:16:FC:05:CE:63:95:21:38
Authority key identifier: 32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
Certificate issuer: /CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Certificate serial: 0198D698420603FDF04A733E0667A38B3B9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
Manifest number: 1399
Signing time: Sat 23 Aug 2025 11:02:39 +0000
Manifest this update: Sat 23 Aug 2025 11:02:39 +0000
Manifest next update: Sun 24 Aug 2025 11:02:39 +0000
Files and hashes: 1: MvrPXQJzAmjTsedslrD4WI2Zi08.crl (hash: OWAHWXDvmD6gFjsvBYF+RmYNt2UigR+hkIYsKtAjYMo=)
2: kZhmU11AcLMU9j0H5R4zLY4tMkU.roa (hash: 4zjf1YfmBA/3a2ksRPti6rOa+1AdjV5zlhfDUSPHUS4=)
3: macgBtbCg5Mxhslrz0OHJiQKlew.roa (hash: GBS8E51Gp7YKQrT0Z2MAz5xnX4MGpebSlxO7yoAgVFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:42:06:03:fd:f0:4a:73:3e:06:67:a3:8b:3b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Validity
Not Before: Aug 23 11:02:39 2025 GMT
Not After : Aug 24 11:02:39 2025 GMT
Subject: CN=2427b7fc85e8e724fa5192e116fc05ce63952138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:75:20:7d:fb:2f:ae:98:52:72:26:00:fb:d2:
e5:7a:e2:7f:51:5d:53:3b:25:98:63:79:3e:b0:d1:
c2:77:50:5f:81:94:2d:44:0c:ec:15:fd:74:0e:3a:
c4:f4:70:28:f3:ea:68:7e:43:98:64:ec:1b:3f:65:
1a:5c:28:ca:95:4a:2f:72:7a:42:27:e6:86:a1:47:
c4:d0:4b:ac:7e:43:e0:af:39:e3:46:50:b1:cd:cc:
c9:33:1b:ee:44:2e:a0:5b:67:64:10:d4:1a:6d:d1:
6c:94:63:42:bb:6d:57:37:f2:31:ba:f8:38:80:33:
39:6a:25:c7:e3:54:5b:e1:ef:8f:19:c9:27:53:2a:
1e:fd:a4:a3:91:62:90:10:ef:ae:86:b8:ea:d9:b8:
ca:7c:6f:b8:c0:40:9b:8c:6c:b3:68:63:c4:19:9f:
00:40:1f:af:f1:93:04:6c:0a:40:0e:1f:c4:7d:74:
dd:69:60:10:3d:ed:83:42:e3:7b:d8:b0:79:90:6c:
3e:73:d1:9b:bd:23:04:01:b7:0e:61:83:29:2d:f4:
db:13:13:2b:96:ba:8b:c3:a0:0d:80:d4:fd:ef:41:
d3:38:86:54:d0:23:b4:b5:90:ef:64:42:48:89:a2:
5e:80:2c:60:a7:cb:60:df:7d:59:4b:63:eb:82:cd:
db:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:27:B7:FC:85:E8:E7:24:FA:51:92:E1:16:FC:05:CE:63:95:21:38
X509v3 Authority Key Identifier:
keyid:32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:0b:53:24:5d:5d:54:91:be:93:f5:1a:65:85:08:08:de:f9:
5a:34:4e:e1:67:43:b3:db:97:72:bb:4f:75:3a:42:81:d7:7d:
f8:ea:62:3a:18:5e:f3:bf:74:27:02:6e:e8:25:ab:6a:26:ba:
2d:03:0f:77:05:09:a1:40:14:46:6e:f4:f2:bf:9c:8a:18:22:
5f:e8:f4:b7:f3:83:61:3c:6c:65:a6:e3:5e:2b:bb:22:06:18:
dd:78:b5:1c:6e:2f:9c:c9:82:ea:db:28:47:b2:02:07:34:6f:
98:60:c4:eb:9a:3d:e9:be:36:2b:af:50:04:e1:ef:f6:15:63:
54:32:14:2f:04:98:65:03:04:8c:f4:0e:84:eb:17:a9:2c:f9:
1f:b5:94:57:28:2f:58:49:95:b0:b9:c4:39:46:13:ac:ff:7c:
e5:1e:d3:7a:03:b4:cf:2b:19:db:0f:dc:07:23:46:32:d6:f7:
98:63:5b:54:2d:62:ca:48:a7:f3:59:20:72:60:e1:95:56:72:
a2:f2:80:0b:47:4c:8b:6c:14:7e:b6:ce:29:57:78:8e:74:f3:
32:fb:47:06:49:02:54:22:32:ea:77:28:25:68:66:39:e4:bd:
b7:34:d6:da:da:22:26:3d:d1:98:f3:9e:c6:6e:e0:c1:aa:ec:
6d:5c:5a:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmEIGA/3wSnM+BmejizufMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZmFjZjVkMDI3MzAyNjhkM2IxZTc2Yzk2YjBmODU4OGQ5
OThiNGYwHhcNMjUwODIzMTEwMjM5WhcNMjUwODI0MTEwMjM5WjAzMTEwLwYDVQQD
EygyNDI3YjdmYzg1ZThlNzI0ZmE1MTkyZTExNmZjMDVjZTYzOTUyMTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnUgffsvrphSciYA+9LleuJ/UV1T
OyWYY3k+sNHCd1BfgZQtRAzsFf10DjrE9HAo8+pofkOYZOwbP2UaXCjKlUovcnpC
J+aGoUfE0EusfkPgrznjRlCxzczJMxvuRC6gW2dkENQabdFslGNCu21XN/Ixuvg4
gDM5aiXH41Rb4e+PGcknUyoe/aSjkWKQEO+uhrjq2bjKfG+4wECbjGyzaGPEGZ8A
QB+v8ZMEbApADh/EfXTdaWAQPe2DQuN72LB5kGw+c9GbvSMEAbcOYYMpLfTbExMr
lrqLw6ANgNT970HTOIZU0CO0tZDvZEJIiaJegCxgp8tg331ZS2Prgs3bTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQnt/yF6Ock+lGS4Rb8Bc5jlSE4MB8GA1UdIwQY
MBaAFDL6z10CcwJo07HnbJaw+FiNmYtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXZyUFhRSnpBbWpUc2Vkc2xyRDRXSTJaaTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hNGNiOTUtOTEyNy00ODY5LThmOTAt
OWU0ZTQ2ZjYwYTY4LzEvTXZyUFhRSnpBbWpUc2Vkc2xyRDRXSTJaaTA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9hNGNiOTUtOTEyNy00ODY5LThmOTAtOWU0ZTQ2ZjYwYTY4
LzEvTXZyUFhRSnpBbWpUc2Vkc2xyRDRXSTJaaTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaAtTJF1d
VJG+k/UaZYUICN75WjRO4WdDs9uXcrtPdTpCgdd9+OpiOhhe8790JwJu6CWraia6
LQMPdwUJoUAURm708r+cihgiX+j0t/ODYTxsZabjXiu7IgYY3Xi1HG4vnMmC6tso
R7ICBzRvmGDE65o96b42K69QBOHv9hVjVDIULwSYZQMEjPQOhOsXqSz5H7WUVygv
WEmVsLnEOUYTrP985R7TegO0zysZ2w/cByNGMtb3mGNbVC1iykin81kgcmDhlVZy
ovKAC0dMi2wUfrbOKVd4jnTzMvtHBkkCVCIy6ncoJWhmOeS9tzTW2toiJj3RmPOe
xm7gwarsbVxaUw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:46:19 2025 by rpki-client