Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.mft
File: mpVYgYJyucVAD8XaGIE6zOkXWI0.mft (raw, json)
Hash identifier: MIga0Qy5KBmqDPjJgla5PNaOoXojMb9sCM7H/3dWJD0=
Subject key identifier: 6B:26:31:E8:FA:E4:5F:D3:06:3B:7C:DA:64:E6:E4:98:B0:29:7C:F7
Authority key identifier: 9A:95:58:81:82:72:B9:C5:40:0F:C5:DA:18:81:3A:CC:E9:17:58:8D
Certificate issuer: /CN=9a9558818272b9c5400fc5da18813acce917588d
Certificate serial: 0198D65F3632C7322DB4E0148A3AEAAC9FAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpVYgYJyucVAD8XaGIE6zOkXWI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:00:20 +0000
Manifest this update: Sat 23 Aug 2025 10:00:20 +0000
Manifest next update: Sun 24 Aug 2025 10:00:20 +0000
Files and hashes: 1: mpVYgYJyucVAD8XaGIE6zOkXWI0.crl (hash: 2rZUtNLmVYYjYTumICC3xiWwIuss721wvh0LcchKT9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpVYgYJyucVAD8XaGIE6zOkXWI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:36:32:c7:32:2d:b4:e0:14:8a:3a:ea:ac:9f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a9558818272b9c5400fc5da18813acce917588d
Validity
Not Before: Aug 23 10:00:20 2025 GMT
Not After : Aug 24 10:00:20 2025 GMT
Subject: CN=6b2631e8fae45fd3063b7cda64e6e498b0297cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ba:00:b5:da:b3:f0:f3:94:d1:f5:85:d9:fd:
5d:94:e3:46:37:4f:38:8a:41:be:5e:94:f7:dd:b5:
26:64:e2:eb:00:b8:98:94:21:8f:8c:65:c6:d5:64:
c0:91:f0:20:54:9a:e1:da:ca:eb:c5:e4:3f:7c:bf:
bc:89:f2:0a:28:93:98:34:ad:d3:c1:6a:75:2a:75:
41:f7:96:79:d9:a3:9e:13:d5:c9:f4:18:c4:b7:03:
e4:e3:89:f7:b0:bc:ad:4a:fb:5a:26:f2:4b:d3:22:
39:00:8e:f3:14:e0:22:81:97:c1:b9:b5:35:ce:cb:
b0:bf:06:f0:d2:cb:ee:3b:98:7a:42:1b:19:78:0b:
95:c0:e4:d2:5c:fa:b3:50:a8:9a:b7:c0:5e:a5:f4:
c8:07:5f:32:6a:25:b7:7d:04:47:e7:2d:73:11:42:
2b:ea:13:28:1e:72:85:70:fc:57:6e:3e:6a:40:84:
b7:8a:63:0c:f6:54:32:0b:64:e5:a3:b4:1e:81:e1:
1b:b1:1d:40:c6:ef:b6:35:a7:58:67:5e:be:5a:47:
26:8f:f5:b0:fa:c1:a7:d1:89:ed:00:fe:03:45:6e:
dc:e7:d5:ba:85:13:ba:03:97:44:cf:b8:1a:2f:f7:
71:38:43:0d:f9:ab:55:b0:87:4f:6e:63:49:68:0c:
26:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:26:31:E8:FA:E4:5F:D3:06:3B:7C:DA:64:E6:E4:98:B0:29:7C:F7
X509v3 Authority Key Identifier:
keyid:9A:95:58:81:82:72:B9:C5:40:0F:C5:DA:18:81:3A:CC:E9:17:58:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpVYgYJyucVAD8XaGIE6zOkXWI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a9:62:51:df:78:ea:d0:10:55:e4:e8:41:5a:34:32:db:a9:
de:cf:cc:10:2b:4d:c8:22:ac:92:38:77:15:19:cd:c8:e5:a1:
e2:2e:89:ca:a8:79:be:82:fa:70:47:95:52:db:9e:9c:a2:2b:
c4:16:6e:61:17:f6:ea:ae:4b:b3:1b:61:51:28:1c:6a:9e:65:
0d:69:db:76:b1:49:f6:2c:c8:5a:b2:e4:ae:11:66:ee:8e:29:
92:a1:58:e4:43:4c:0f:c4:9d:f8:de:24:b8:bf:47:22:10:d9:
64:e3:ea:24:c1:65:89:77:f7:57:b8:72:bb:6b:62:0d:bc:f5:
2a:d7:1f:29:e4:c6:67:14:37:37:a8:49:4d:2d:cd:a0:9f:16:
f7:53:be:e6:c2:3c:43:06:1b:7b:41:72:e6:08:30:a0:ad:44:
57:69:bc:d1:4b:32:ed:73:16:c6:8d:a5:46:49:d2:64:67:0d:
83:90:d0:e2:72:04:4c:51:0f:73:c5:50:f3:a4:31:ce:b0:b9:
69:49:40:8b:74:7d:8a:b9:b2:f9:68:49:1a:25:1a:b6:99:0c:
a6:07:d4:e4:3a:60:62:79:0e:14:5e:8a:44:c0:06:fd:b4:27:
fd:1e:66:4f:66:6e:7c:b9:54:38:ba:a5:1f:4f:fb:18:35:f7:
3f:bb:a4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:29:13 2025 by rpki-client