Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft
File: mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft (raw, json)
Hash identifier: V9Dug2DZr8P2iyBoIdGLdcdGbO23U67Mj+3U22sARq8=
Subject key identifier: 57:9A:5E:BE:C1:FE:73:0C:CB:9F:C5:FF:EC:0C:D0:2A:0E:65:3C:98
Authority key identifier: 9A:F9:D1:E5:5F:43:E4:FD:D6:D2:4F:B4:B0:ED:A6:E9:D1:28:AA:51
Certificate issuer: /CN=9af9d1e55f43e4fdd6d24fb4b0eda6e9d128aa51
Certificate serial: 0198D473B3A09B5D4CA0DF97801E2F2331BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvnR5V9D5P3W0k-0sO2m6dEoqlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft
Manifest number: 10EB
Signing time: Sat 23 Aug 2025 01:03:29 +0000
Manifest this update: Sat 23 Aug 2025 01:03:29 +0000
Manifest next update: Sun 24 Aug 2025 01:03:29 +0000
Files and hashes: 1: mvnR5V9D5P3W0k-0sO2m6dEoqlE.crl (hash: Rq/dnA5Oksf7MUnbhAXMmxsClJvkbxL1JyJXa8xqZlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mvnR5V9D5P3W0k-0sO2m6dEoqlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:b3:a0:9b:5d:4c:a0:df:97:80:1e:2f:23:31:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af9d1e55f43e4fdd6d24fb4b0eda6e9d128aa51
Validity
Not Before: Aug 23 01:03:29 2025 GMT
Not After : Aug 24 01:03:29 2025 GMT
Subject: CN=579a5ebec1fe730ccb9fc5ffec0cd02a0e653c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:62:93:11:14:a4:0b:68:9c:1a:8a:30:0d:c1:
de:c8:fc:99:93:1b:16:cd:94:f4:0a:37:01:3e:c8:
d0:60:ee:e1:20:e8:e9:d1:d5:db:3f:23:df:8a:7f:
32:f8:67:70:29:74:ea:06:e1:f4:17:29:7a:94:9b:
a0:3a:4b:83:31:fc:b7:33:1c:17:24:fd:2b:e8:dc:
0c:75:89:b8:99:58:da:eb:93:fc:39:f2:6d:d7:c0:
ba:a2:47:34:02:78:e0:54:8d:fe:1c:6e:79:b0:6a:
34:e6:97:b4:c5:10:50:a6:bd:55:1d:f1:c5:51:5e:
20:ec:02:76:07:57:c6:21:3c:e1:0b:ca:d4:1a:35:
7b:9e:1f:2b:3c:5a:ea:b2:83:9a:b2:cc:42:fc:59:
d8:b3:69:b5:48:6b:47:4c:6a:7f:ac:ad:45:fc:31:
1a:d9:7c:b3:ed:65:14:79:45:64:a1:07:db:ec:74:
e7:d9:e1:b0:d6:59:a2:a4:2f:9d:4e:36:c2:c0:d0:
8f:b7:3c:00:07:3f:1e:6f:8b:d1:41:e6:54:93:37:
54:6d:fa:55:7d:73:09:66:96:41:db:c1:38:3d:13:
10:bb:94:83:99:1b:51:ce:55:73:83:c5:74:72:81:
8f:f4:2d:68:dd:5e:12:08:26:b9:30:e9:42:bb:7c:
f2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9A:5E:BE:C1:FE:73:0C:CB:9F:C5:FF:EC:0C:D0:2A:0E:65:3C:98
X509v3 Authority Key Identifier:
keyid:9A:F9:D1:E5:5F:43:E4:FD:D6:D2:4F:B4:B0:ED:A6:E9:D1:28:AA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnR5V9D5P3W0k-0sO2m6dEoqlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:62:5b:f5:29:53:f9:8e:9b:94:46:67:10:b1:50:6f:71:2b:
07:89:21:cf:12:d8:52:d1:b0:db:20:86:64:78:70:b0:03:5a:
ba:f3:77:75:56:f8:23:22:99:df:06:82:ef:96:16:13:0e:28:
c5:98:10:20:3d:30:88:c7:7b:26:dc:48:4b:4c:34:fd:67:d9:
ae:0c:fa:65:1c:59:01:2e:7a:1e:af:4c:b4:b4:ec:7c:4b:1d:
f2:de:1c:b9:c3:64:cf:ec:af:30:73:84:f1:bc:0a:43:b6:ac:
bf:77:39:6a:19:8d:70:52:a5:2d:33:88:81:22:72:eb:bd:2d:
37:57:f9:26:97:3c:8c:65:95:e9:f3:da:90:67:3f:f1:37:15:
a5:f1:bd:93:d5:3e:19:56:a3:51:96:47:31:55:d1:72:06:7b:
eb:d0:cc:96:c8:2a:09:03:ba:fa:9d:6a:0b:cf:94:5b:f1:81:
db:29:29:8c:8e:a2:19:91:a7:d0:77:28:cd:37:59:77:1e:5f:
c9:83:26:b0:cd:b0:09:4c:e6:67:58:80:75:d2:49:48:12:45:
51:40:3c:07:d3:49:d5:0c:40:37:91:f2:1f:cf:76:9c:25:08:
2e:0f:6f:c5:5c:c0:41:49:e2:23:71:d2:ec:76:c8:e1:50:d1:
9d:f0:4b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:52 2025 by rpki-client