Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.mft
File: mvVxMWwmKI4O1BawE3ofZIp9IAI.mft (raw, json)
Hash identifier: 2naFvgO9hFh7iNDdteZv0fVwc42JJ81knqOSv3qO7b0=
Subject key identifier: 73:B5:F3:87:24:5D:55:C9:5F:E9:98:07:1F:CA:BE:C3:3E:27:E0:E4
Authority key identifier: 9A:F5:71:31:6C:26:28:8E:0E:D4:16:B0:13:7A:1F:64:8A:7D:20:02
Certificate issuer: /CN=9af571316c26288e0ed416b0137a1f648a7d2002
Certificate serial: 0199FBEAAF6E1365C249DCE92014F836F21F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvVxMWwmKI4O1BawE3ofZIp9IAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.mft
Manifest number: 0223
Signing time: Sun 19 Oct 2025 10:01:25 +0000
Manifest this update: Sun 19 Oct 2025 10:01:25 +0000
Manifest next update: Mon 20 Oct 2025 10:01:25 +0000
Files and hashes: 1: mvVxMWwmKI4O1BawE3ofZIp9IAI.crl (hash: QXUO9h2otcVWUT1ChD6lJJRbrH2PvfaK49kMfGWa2UE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mvVxMWwmKI4O1BawE3ofZIp9IAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:af:6e:13:65:c2:49:dc:e9:20:14:f8:36:f2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af571316c26288e0ed416b0137a1f648a7d2002
Validity
Not Before: Oct 19 10:01:25 2025 GMT
Not After : Oct 20 10:01:25 2025 GMT
Subject: CN=73b5f387245d55c95fe998071fcabec33e27e0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3d:02:1f:28:8e:1e:86:ef:7c:af:75:d4:f1:
1b:92:dc:a8:fd:4b:01:a4:c5:ad:4e:bd:31:d7:40:
44:77:dd:2b:c8:c9:aa:a8:4b:57:46:36:09:b8:c4:
67:54:ca:7d:1a:d3:ea:87:2d:bb:89:bc:5f:54:72:
2b:cd:b8:53:4a:9b:19:7c:3c:bf:a3:66:2f:9b:b4:
61:a7:aa:36:77:34:87:b6:c5:c6:18:24:77:ef:8c:
4a:c4:15:64:b8:9c:44:9d:85:f7:27:c5:91:e9:a8:
06:cc:a8:3b:ac:51:a2:6f:8b:69:c7:37:54:82:34:
e0:3f:cc:b4:70:13:dc:84:17:18:04:bf:ce:df:b6:
7d:bb:bb:0e:db:c9:c0:3a:3a:de:6d:ad:bc:c4:35:
96:c5:f0:85:87:c4:7a:f1:b1:22:a3:83:d8:b7:14:
b1:50:c6:06:3a:44:5a:a1:fd:3c:b5:59:ff:4a:da:
c0:e4:90:b1:02:cd:f0:84:e0:40:46:c0:98:da:7e:
54:5f:eb:88:0f:37:7e:77:3a:37:de:46:e4:d3:5e:
5d:2c:7a:ee:ef:bd:59:f7:40:e9:30:a4:17:08:8d:
b7:0e:52:53:95:06:43:fd:fc:7d:ac:e4:eb:ca:27:
f5:48:2c:ba:48:9c:a5:85:68:cd:3a:69:9a:6f:ad:
19:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B5:F3:87:24:5D:55:C9:5F:E9:98:07:1F:CA:BE:C3:3E:27:E0:E4
X509v3 Authority Key Identifier:
keyid:9A:F5:71:31:6C:26:28:8E:0E:D4:16:B0:13:7A:1F:64:8A:7D:20:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvVxMWwmKI4O1BawE3ofZIp9IAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:3a:36:b1:a1:67:dd:1e:34:d8:8e:4e:91:c2:50:0c:bc:62:
0c:ed:39:94:85:43:4e:38:c0:ab:d9:05:30:e9:22:66:29:c4:
b7:6a:96:08:30:2d:4b:6b:fe:cc:91:81:55:5a:f4:19:a0:6c:
df:95:ff:80:52:80:50:2f:07:2d:55:e7:72:9d:d1:bb:64:04:
69:1f:51:fa:12:a0:28:0a:e2:3d:f9:d5:30:09:a2:72:d8:a3:
fa:31:58:7e:10:b2:5f:28:c1:6a:6e:2e:78:02:15:5d:ac:18:
45:60:e8:35:d7:1b:e0:58:e4:0e:72:96:d7:69:a0:70:44:fa:
77:15:e9:d7:d1:56:2e:df:9e:9b:3f:cb:27:6d:e9:84:62:9e:
3b:f0:49:5c:06:7a:ca:34:aa:92:18:da:a2:88:0a:80:f2:86:
67:b9:ab:97:60:a9:88:7c:ae:0b:3b:9b:c1:0d:db:f5:13:37:
24:6b:04:02:75:ff:0a:76:d5:2d:84:46:d0:d7:13:63:97:fc:
42:35:37:3e:cb:a2:48:7f:1a:43:b6:99:6f:c4:f5:3c:3b:c4:
b6:7f:a9:2c:66:23:32:d9:5f:b7:0e:59:43:9e:d8:a7:bc:4c:
0d:4a:5f:dc:12:6b:22:ee:de:a3:63:21:06:4c:41:db:10:b1:
df:5f:f8:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76q9uE2XCSdzpIBT4NvIfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZjU3MTMxNmMyNjI4OGUwZWQ0MTZiMDEzN2ExZjY0OGE3
ZDIwMDIwHhcNMjUxMDE5MTAwMTI1WhcNMjUxMDIwMTAwMTI1WjAzMTEwLwYDVQQD
Eyg3M2I1ZjM4NzI0NWQ1NWM5NWZlOTk4MDcxZmNhYmVjMzNlMjdlMGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj0CHyiOHobvfK911PEbktyo/UsB
pMWtTr0x10BEd90ryMmqqEtXRjYJuMRnVMp9GtPqhy27ibxfVHIrzbhTSpsZfDy/
o2Yvm7Rhp6o2dzSHtsXGGCR374xKxBVkuJxEnYX3J8WR6agGzKg7rFGib4tpxzdU
gjTgP8y0cBPchBcYBL/O37Z9u7sO28nAOjreba28xDWWxfCFh8R68bEio4PYtxSx
UMYGOkRaof08tVn/StrA5JCxAs3whOBARsCY2n5UX+uIDzd+dzo33kbk015dLHru
771Z90DpMKQXCI23DlJTlQZD/fx9rOTryif1SCy6SJylhWjNOmmab60ZMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHO184ckXVXJX+mYBx/KvsM+J+DkMB8GA1UdIwQY
MBaAFJr1cTFsJiiODtQWsBN6H2SKfSACMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXZWeE1Xd21LSTRPMUJhd0Uzb2ZaSXA5SUFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8yNTcwMDgtZGE1Yi00MDgxLWFhZjct
NDAzMzY2OTg0YzVhLzEvbXZWeE1Xd21LSTRPMUJhd0Uzb2ZaSXA5SUFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8yNTcwMDgtZGE1Yi00MDgxLWFhZjctNDAzMzY2OTg0YzVh
LzEvbXZWeE1Xd21LSTRPMUJhd0Uzb2ZaSXA5SUFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAezo2saFn
3R402I5OkcJQDLxiDO05lIVDTjjAq9kFMOkiZinEt2qWCDAtS2v+zJGBVVr0GaBs
35X/gFKAUC8HLVXncp3Ru2QEaR9R+hKgKAriPfnVMAmictij+jFYfhCyXyjBam4u
eAIVXawYRWDoNdcb4FjkDnKW12mgcET6dxXp19FWLt+emz/LJ23phGKeO/BJXAZ6
yjSqkhjaoogKgPKGZ7mrl2CpiHyuCzubwQ3b9RM3JGsEAnX/CnbVLYRG0NcTY5f8
QjU3PsuiSH8aQ7aZb8T1PDvEtn+pLGYjMtlftw5ZQ57Yp7xMDUpf3BJrIu7eo2Mh
BkxB2xCx31/4wQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:58 2025 by rpki-client