Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
File: MIVZam3hzL6mZbRWxNLM0JZJmx8.mft (raw, json)
Hash identifier: 3cNzO1AC5lhrPH0oEalqNFHh/CLDS0PofgkC5E2q4OM=
Subject key identifier: D3:94:27:E0:82:6E:31:C1:5D:A2:1D:6D:A1:E8:0B:E9:35:33:16:9F
Authority key identifier: 30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F
Certificate issuer: /CN=3085596a6de1ccbea665b456c4d2ccd096499b1f
Certificate serial: 0199FBEB431A547CF7F9A5EA1E516955CF4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
Manifest number: 0AC8
Signing time: Sun 19 Oct 2025 10:02:03 +0000
Manifest this update: Sun 19 Oct 2025 10:02:03 +0000
Manifest next update: Mon 20 Oct 2025 10:02:03 +0000
Files and hashes: 1: MIVZam3hzL6mZbRWxNLM0JZJmx8.crl (hash: fhmwlxSOfggFAGI4PM+QwXPfT+VCzbpG/u/k3tEGGXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:43:1a:54:7c:f7:f9:a5:ea:1e:51:69:55:cf:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3085596a6de1ccbea665b456c4d2ccd096499b1f
Validity
Not Before: Oct 19 10:02:03 2025 GMT
Not After : Oct 20 10:02:03 2025 GMT
Subject: CN=d39427e0826e31c15da21d6da1e80be93533169f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:ee:78:d3:e8:37:13:c6:71:32:07:cf:18:
08:de:3c:58:ff:28:71:fd:df:c5:90:5a:96:b9:42:
b9:29:f3:a9:c1:4c:2d:4a:4e:8f:08:c4:68:8c:40:
22:bf:db:19:f9:67:7f:db:fb:2a:20:ff:ee:5f:56:
47:d6:13:e5:2b:ad:02:76:9c:d2:27:2a:02:27:42:
e2:19:8f:fa:d4:8d:6d:d2:92:7e:94:99:59:20:f8:
b9:8d:44:eb:ba:b0:b5:66:fe:8f:4b:dd:21:ea:d1:
f4:21:07:ea:a8:96:2f:8d:d2:76:88:bc:69:b6:a9:
32:53:1e:46:d1:78:d6:f0:a7:14:f2:2b:8e:d7:0e:
16:31:7f:40:0d:98:7c:8f:a1:0d:76:12:bb:c9:cf:
4f:76:4e:b0:b6:c1:f9:ec:f9:a2:2e:f2:df:d6:22:
84:0c:f6:52:c1:15:1f:18:b5:48:03:0b:45:a5:0c:
59:38:4f:37:1d:53:d7:ef:6a:51:0f:70:4d:ec:b9:
4e:5c:d6:29:cc:15:79:a7:da:c0:8c:59:57:fa:20:
37:06:4f:db:57:98:2c:c3:73:aa:94:41:e0:c2:fa:
f7:cd:84:21:1e:0e:59:4d:02:f2:bb:21:4e:f2:d8:
fd:7b:2d:b2:c3:bb:c3:68:83:ed:57:c7:a6:f9:a2:
93:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:94:27:E0:82:6E:31:C1:5D:A2:1D:6D:A1:E8:0B:E9:35:33:16:9F
X509v3 Authority Key Identifier:
keyid:30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f5:32:e4:f2:2c:a8:4e:d5:a6:b4:23:6a:fd:dc:f0:96:a3:
a5:b4:1c:d8:3c:7a:54:cb:ad:75:4a:f2:ab:61:e5:79:ed:76:
a5:e1:97:e4:ee:3e:c1:07:ca:9e:38:e4:40:9c:5d:57:75:dd:
c3:85:6b:1c:03:33:7a:95:43:d0:91:46:91:ae:f0:3f:ce:4f:
0e:16:51:de:bb:98:4b:89:69:2b:1b:77:50:ad:d7:88:13:b1:
2f:7c:eb:61:fb:3e:b3:57:11:a1:20:af:91:a7:7a:05:d0:de:
13:d5:8c:2f:05:b3:0d:ed:6f:81:89:b5:3f:d4:a1:f4:91:4b:
ba:45:e9:d8:04:3e:ba:97:7c:a2:6c:1f:40:75:eb:b5:58:b2:
0d:16:f3:6d:41:fc:e7:d2:60:0e:bd:3b:0f:15:f4:69:da:d4:
9b:6a:f0:7b:d5:b4:cd:58:8f:fd:79:7f:26:a8:91:52:bb:25:
15:48:e2:a8:22:ab:fb:5f:8e:d5:eb:10:13:ad:47:ad:e3:b8:
eb:21:a3:ee:2e:16:a5:42:9d:b1:d5:30:bd:95:e8:ba:a1:86:
f5:c6:a3:33:ee:fd:cd:f2:23:ad:77:a5:cc:95:68:3e:c4:7e:
63:e9:0b:ac:77:42:53:e9:e5:78:28:ee:15:2e:0f:e1:6e:fd:
31:d3:71:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:28 2025 by rpki-client