Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
File: MIVZam3hzL6mZbRWxNLM0JZJmx8.mft (raw, json)
Hash identifier: 8/xd/H7m9I6D/ohYWOKLbnW/Uz/RN4UnAMGBKhTylYo=
Subject key identifier: F2:1D:72:98:E9:25:D7:11:CE:EB:3B:2B:D1:D7:23:43:60:80:F3:BD
Authority key identifier: 30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F
Certificate issuer: /CN=3085596a6de1ccbea665b456c4d2ccd096499b1f
Certificate serial: 0198D660B3C48AD19C19548792CADC2F3685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
Manifest number: 0A30
Signing time: Sat 23 Aug 2025 10:01:58 +0000
Manifest this update: Sat 23 Aug 2025 10:01:58 +0000
Manifest next update: Sun 24 Aug 2025 10:01:58 +0000
Files and hashes: 1: MIVZam3hzL6mZbRWxNLM0JZJmx8.crl (hash: dt1xp1YZiUDK8VScfkIso1qmgqcrra/cwVpuOD0qd+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:b3:c4:8a:d1:9c:19:54:87:92:ca:dc:2f:36:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3085596a6de1ccbea665b456c4d2ccd096499b1f
Validity
Not Before: Aug 23 10:01:58 2025 GMT
Not After : Aug 24 10:01:58 2025 GMT
Subject: CN=f21d7298e925d711ceeb3b2bd1d723436080f3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bc:2c:05:35:ec:cd:88:70:1e:40:c1:e4:98:
45:ea:5b:dc:9d:ba:f8:9e:6d:37:05:2a:bc:77:30:
28:f7:ed:8d:79:38:2c:6b:c5:a7:1c:c5:79:68:72:
94:9a:3f:fb:04:7a:bb:a9:67:a0:91:83:8d:3d:68:
64:ef:77:f1:60:2f:66:c8:d1:be:c3:92:eb:d6:b7:
cb:46:3b:ed:5f:10:f0:85:d0:48:ad:13:69:e7:37:
26:a5:b1:b9:5f:3f:f9:64:f6:72:a8:5a:ff:9b:84:
10:d3:00:0c:0c:52:5b:93:3a:3d:c9:07:1e:82:ba:
7a:84:da:b6:fc:b8:83:af:b0:5c:22:0f:45:e9:d8:
bd:41:4b:de:dc:2b:c3:bf:bd:47:ee:50:5c:ed:5f:
15:d4:a3:e6:e4:ec:76:fc:97:49:74:b8:3c:ef:42:
4b:5e:d8:ea:1a:4a:85:a9:de:fb:25:d9:48:30:fd:
7f:bb:92:7f:52:f9:ee:34:ae:d9:75:aa:65:da:34:
67:df:47:c2:91:10:a3:c1:48:56:fa:7b:a1:67:c1:
82:3b:0f:6e:f0:c3:65:b7:76:03:36:63:6d:58:5d:
46:bc:00:89:a8:f8:21:e6:9d:15:54:48:50:97:4a:
06:23:ef:1c:00:36:91:7b:2a:5a:a4:ef:97:e3:78:
75:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1D:72:98:E9:25:D7:11:CE:EB:3B:2B:D1:D7:23:43:60:80:F3:BD
X509v3 Authority Key Identifier:
keyid:30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:7f:a3:f5:52:f1:05:b1:fe:10:28:bf:22:20:52:fd:fb:de:
d8:2f:39:cd:1d:2c:77:92:91:6d:c9:58:a2:b1:59:a7:b6:4e:
04:f6:af:bb:2f:f8:e4:01:78:ef:20:b9:eb:c6:5e:ea:05:7a:
b8:0f:52:74:63:8a:c1:15:fd:c9:08:aa:07:a9:5c:79:92:38:
fe:29:39:bd:7b:5e:15:30:eb:77:67:61:dc:41:aa:f6:af:8e:
e5:be:04:f3:31:12:5a:30:f8:26:a8:78:e0:05:d6:16:e1:46:
a0:af:ad:19:c7:17:97:ce:60:2b:3c:1f:b6:e2:96:bd:f8:1e:
95:36:16:06:4d:f6:c5:46:47:4b:02:0e:a6:69:d7:01:0d:80:
50:95:d0:d9:5a:d5:c8:23:72:63:1a:73:af:8b:95:bc:7e:69:
7b:ca:25:83:a9:d8:1b:e9:d6:4d:af:cb:dc:c5:18:ee:58:f3:
e7:e6:01:8d:e5:30:8a:60:81:29:8e:a6:57:3f:d2:68:b4:9e:
34:52:86:23:f5:56:64:0a:42:40:c7:d2:b8:bd:1a:5c:40:f1:
eb:82:21:4a:30:93:34:b2:cf:cc:43:3f:ee:ce:22:9c:a6:19:
ad:80:95:bc:51:b7:c9:47:98:d4:d7:1f:91:46:64:f6:6f:54:
b6:7b:69:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:50:07 2025 by rpki-client