Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.mft
File: mpVYgYJyucVAD8XaGIE6zOkXWI0.mft (raw, json)
Hash identifier: mCmxhaH5fDQsT0u48b8L+k3WO0HzDS2/XfDfPdgakTU=
Subject key identifier: 7D:1B:EC:47:C8:00:92:12:28:E2:16:B6:52:3F:77:74:A7:40:E0:C9
Authority key identifier: 9A:95:58:81:82:72:B9:C5:40:0F:C5:DA:18:81:3A:CC:E9:17:58:8D
Certificate issuer: /CN=9a9558818272b9c5400fc5da18813acce917588d
Certificate serial: 0199FDDA474EBFC67C0E267CB5A0B52A27CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpVYgYJyucVAD8XaGIE6zOkXWI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 19:02:44 +0000
Manifest this update: Sun 19 Oct 2025 19:02:44 +0000
Manifest next update: Mon 20 Oct 2025 19:02:44 +0000
Files and hashes: 1: mpVYgYJyucVAD8XaGIE6zOkXWI0.crl (hash: I5Lj16IqySHT+KqTNupKNGPtezWf6SEKw2HoJHbBWEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpVYgYJyucVAD8XaGIE6zOkXWI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:47:4e:bf:c6:7c:0e:26:7c:b5:a0:b5:2a:27:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a9558818272b9c5400fc5da18813acce917588d
Validity
Not Before: Oct 19 19:02:44 2025 GMT
Not After : Oct 20 19:02:44 2025 GMT
Subject: CN=7d1bec47c800921228e216b6523f7774a740e0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f3:38:b7:b1:cc:59:ec:c3:6b:4c:f5:46:47:
cc:8c:da:d7:9f:b7:50:f4:ec:dc:75:7a:29:d8:65:
7d:13:6b:87:af:20:0d:e3:80:9a:29:24:2a:5b:0e:
d7:1b:6d:eb:2d:22:c2:29:aa:08:c0:d9:34:ad:56:
11:90:54:4b:9b:f1:13:1a:da:1f:e0:d2:c2:4c:e1:
61:b4:c6:f4:53:66:66:15:d1:2a:a7:34:7a:c1:13:
61:31:28:da:c9:a6:22:3d:c6:e1:91:d5:cf:92:66:
01:54:a8:72:a2:b4:ff:75:dd:f5:cf:60:30:9a:97:
d6:31:1b:ee:ce:a1:69:83:2a:f7:c2:e1:8f:e1:f4:
04:53:75:39:ca:2a:49:c4:38:4d:c4:25:ec:f6:e5:
4c:fd:46:6d:28:34:46:7c:d0:3a:2d:91:3b:01:ad:
de:22:29:c3:48:11:76:d8:bb:6d:e7:04:2c:2c:0e:
ce:7c:c6:92:9a:6f:ba:d3:fc:27:c9:a0:5a:7f:c6:
87:79:a9:b1:c9:ac:e0:a1:30:f8:dc:30:ae:e6:55:
c6:a1:ec:ec:2b:8a:4c:0a:5d:64:e3:af:8d:08:eb:
38:e8:6d:0e:90:82:ab:fc:c5:c0:f9:8d:0d:18:bb:
99:68:f9:68:24:07:33:69:29:d4:1e:3d:26:c1:d5:
fa:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1B:EC:47:C8:00:92:12:28:E2:16:B6:52:3F:77:74:A7:40:E0:C9
X509v3 Authority Key Identifier:
keyid:9A:95:58:81:82:72:B9:C5:40:0F:C5:DA:18:81:3A:CC:E9:17:58:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpVYgYJyucVAD8XaGIE6zOkXWI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:2f:be:5f:55:a1:ce:6a:48:bf:38:08:bc:f9:51:5a:77:b5:
1f:e3:38:cc:f2:7f:c4:f6:8d:58:11:f2:1f:7a:98:9e:3c:24:
81:c2:72:f3:d9:3e:2f:e6:a5:e4:f5:bf:10:fe:d0:12:e3:06:
93:98:8d:f7:40:29:34:d1:ee:02:c8:d1:5e:e5:46:43:31:b7:
a9:50:af:12:db:ee:12:37:ad:14:0a:94:72:52:49:23:b7:f3:
77:6e:66:39:b8:df:72:7d:a8:e4:fe:0f:71:18:0b:7b:a6:3b:
4d:57:4f:39:b3:62:ef:89:22:ae:75:58:cb:a5:e2:6b:06:8f:
e5:07:ce:04:a5:94:c2:44:be:21:39:d0:8e:63:5c:7c:71:b0:
e9:6f:0a:bf:e1:5b:f1:e6:dc:bc:27:c5:71:6e:30:24:66:7f:
20:77:fc:a4:7d:87:53:35:ca:ee:f5:f9:48:17:6e:d9:12:0b:
65:19:69:51:44:04:ab:17:ca:b3:d9:44:67:8a:c9:2f:d2:f8:
43:64:87:17:5a:71:f3:7b:fb:a3:6c:31:85:b5:69:ca:53:c1:
30:41:8e:9f:4b:32:cd:b4:1c:90:23:6e:5c:98:ed:8b:76:18:
a6:92:ac:38:99:dc:a5:ae:03:55:c5:36:fa:b3:ec:da:67:3b:
b1:3f:89:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92kdOv8Z8DiZ8taC1KifKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOTU1ODgxODI3MmI5YzU0MDBmYzVkYTE4ODEzYWNjZTkx
NzU4OGQwHhcNMjUxMDE5MTkwMjQ0WhcNMjUxMDIwMTkwMjQ0WjAzMTEwLwYDVQQD
Eyg3ZDFiZWM0N2M4MDA5MjEyMjhlMjE2YjY1MjNmNzc3NGE3NDBlMGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivM4t7HMWezDa0z1RkfMjNrXn7dQ
9OzcdXop2GV9E2uHryAN44CaKSQqWw7XG23rLSLCKaoIwNk0rVYRkFRLm/ETGtof
4NLCTOFhtMb0U2ZmFdEqpzR6wRNhMSjayaYiPcbhkdXPkmYBVKhyorT/dd31z2Aw
mpfWMRvuzqFpgyr3wuGP4fQEU3U5yipJxDhNxCXs9uVM/UZtKDRGfNA6LZE7Aa3e
IinDSBF22Ltt5wQsLA7OfMaSmm+60/wnyaBaf8aHeamxyazgoTD43DCu5lXGoezs
K4pMCl1k46+NCOs46G0OkIKr/MXA+Y0NGLuZaPloJAczaSnUHj0mwdX6VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0b7EfIAJISKOIWtlI/d3SnQODJMB8GA1UdIwQY
MBaAFJqVWIGCcrnFQA/F2hiBOszpF1iNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXBWWWdZSnl1Y1ZBRDhYYUdJRTZ6T2tYV0kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMzNkODItOTM4ZS00ZjM1LWFhNDgt
ZDRlOWNmMjZlZTEwLzEvbXBWWWdZSnl1Y1ZBRDhYYUdJRTZ6T2tYV0kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8yMzNkODItOTM4ZS00ZjM1LWFhNDgtZDRlOWNmMjZlZTEw
LzEvbXBWWWdZSnl1Y1ZBRDhYYUdJRTZ6T2tYV0kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZy++X1Wh
zmpIvzgIvPlRWne1H+M4zPJ/xPaNWBHyH3qYnjwkgcJy89k+L+al5PW/EP7QEuMG
k5iN90ApNNHuAsjRXuVGQzG3qVCvEtvuEjetFAqUclJJI7fzd25mObjfcn2o5P4P
cRgLe6Y7TVdPObNi74kirnVYy6XiawaP5QfOBKWUwkS+ITnQjmNcfHGw6W8Kv+Fb
8ebcvCfFcW4wJGZ/IHf8pH2HUzXK7vX5SBdu2RILZRlpUUQEqxfKs9lEZ4rJL9L4
Q2SHF1px83v7o2wxhbVpylPBMEGOn0syzbQckCNuXJjti3YYppKsOJncpa4DVcU2
+rPs2mc7sT+JVw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:13:23 2025 by rpki-client