Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.mft
File: mpVYgYJyucVAD8XaGIE6zOkXWI0.mft (raw, json)
Hash identifier: Zr+ZwKWrjqAFLhnaPKU0IhMmmWLRYZ38vLdQADM4rVk=
Subject key identifier: 2E:33:20:1B:CC:6B:78:4A:04:15:0B:DE:8F:56:ED:AF:4E:52:87:6C
Authority key identifier: 9A:95:58:81:82:72:B9:C5:40:0F:C5:DA:18:81:3A:CC:E9:17:58:8D
Certificate issuer: /CN=9a9558818272b9c5400fc5da18813acce917588d
Certificate serial: 0197B6A1C1F2B3E5885CD9D0E5EA529F63A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpVYgYJyucVAD8XaGIE6zOkXWI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:02:23 +0000
Manifest this update: Sat 28 Jun 2025 13:02:23 +0000
Manifest next update: Sun 29 Jun 2025 13:02:23 +0000
Files and hashes: 1: mpVYgYJyucVAD8XaGIE6zOkXWI0.crl (hash: D+x8r+SL17ZXNYgW510FcMJZ4iDzCDgYzwRLAiuH5KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpVYgYJyucVAD8XaGIE6zOkXWI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:c1:f2:b3:e5:88:5c:d9:d0:e5:ea:52:9f:63:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a9558818272b9c5400fc5da18813acce917588d
Validity
Not Before: Jun 28 13:02:23 2025 GMT
Not After : Jun 29 13:02:23 2025 GMT
Subject: CN=2e33201bcc6b784a04150bde8f56edaf4e52876c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:66:e8:4d:a3:85:cf:3d:38:58:3b:ce:60:97:
4d:65:ac:e1:ce:66:15:44:32:df:3b:35:8d:bf:61:
68:4c:db:d3:37:47:04:17:ba:60:79:2a:39:1a:93:
86:6e:1b:e3:0b:8d:66:c1:ea:49:32:ba:24:80:27:
18:42:6f:43:49:eb:a1:52:c0:9a:8e:43:b2:17:c7:
bf:f1:34:a1:95:49:cf:85:53:55:c4:41:63:6a:a5:
56:e1:64:82:71:66:6c:d8:08:9a:33:c8:7f:e4:b4:
8b:6f:fd:42:f1:e1:34:dc:27:aa:c6:3a:a3:92:8f:
e1:49:d0:98:11:86:dd:b2:5e:4e:87:e4:71:a3:1d:
46:ca:65:20:96:1e:75:69:40:bd:22:11:02:64:07:
02:8b:b6:70:6a:f4:72:3f:3c:d0:95:a1:26:25:e1:
06:59:f0:0d:2e:1f:ac:73:4b:10:00:e8:b4:28:77:
02:c1:89:eb:83:47:57:3d:a2:ec:25:0c:2b:52:8d:
b1:6a:d9:ec:35:94:26:6b:6c:1b:f0:45:05:02:35:
b8:68:b0:d7:34:74:06:97:b5:5f:9b:e6:74:b2:06:
d7:99:c1:ff:4a:71:52:9b:18:15:4a:11:ce:5b:73:
e5:6d:f2:21:93:17:f2:ba:12:61:5a:0c:81:a1:c1:
73:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:33:20:1B:CC:6B:78:4A:04:15:0B:DE:8F:56:ED:AF:4E:52:87:6C
X509v3 Authority Key Identifier:
keyid:9A:95:58:81:82:72:B9:C5:40:0F:C5:DA:18:81:3A:CC:E9:17:58:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpVYgYJyucVAD8XaGIE6zOkXWI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e7:38:8c:4c:e1:63:65:2a:8e:96:7b:76:eb:ee:73:39:90:
ec:b3:64:4c:14:7f:36:6a:ef:28:9d:06:41:87:7f:0f:d6:c9:
2e:83:fb:b5:e3:9e:5e:27:50:be:5d:83:b5:68:d3:ac:71:27:
bb:47:4a:02:68:35:8e:bd:df:ed:b4:94:7c:16:bb:9a:8e:39:
72:fc:b3:7c:36:af:32:8f:ae:33:ee:79:3b:35:2a:37:2e:b6:
6a:ac:e2:6a:36:ff:9b:0c:f0:ae:bc:b3:a0:65:2b:98:72:b7:
89:2f:e4:74:57:1e:2f:fe:c0:bc:5b:82:3b:18:e1:d5:21:f1:
c9:1a:bc:5a:5a:06:32:f0:79:21:80:1a:8f:23:8d:d7:a1:f1:
1a:e1:f7:37:66:1f:b2:25:0f:47:9b:fa:e7:a4:98:16:17:1e:
49:86:6f:78:b3:e1:40:00:66:04:db:9f:a8:50:8b:47:5e:94:
8f:e9:30:35:fd:23:d2:27:f6:7b:da:d7:f0:c1:39:46:98:45:
03:c7:d9:ec:8a:04:f0:0c:03:d3:53:37:e4:86:09:aa:32:43:
70:8b:5c:88:f6:36:49:e1:06:21:60:9f:83:65:10:ad:5c:4a:
35:ea:61:37:2b:72:71:98:7c:89:57:4c:56:c1:28:e6:7f:73:
18:49:82:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:41:45 2025 by rpki-client