Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft
File: mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft (raw, json)
Hash identifier: sBU4wM0NjizuehvX58XJgoWZSo+wl0Xtuq57Nn2PiZo=
Subject key identifier: 5D:9B:71:B5:3C:B5:9E:CF:D3:0A:F9:D3:0E:C4:D0:1C:5C:9A:5F:DA
Authority key identifier: 9A:F9:D1:E5:5F:43:E4:FD:D6:D2:4F:B4:B0:ED:A6:E9:D1:28:AA:51
Certificate issuer: /CN=9af9d1e55f43e4fdd6d24fb4b0eda6e9d128aa51
Certificate serial: 0199FDDA16426869B3B2F98B3DC41176743A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvnR5V9D5P3W0k-0sO2m6dEoqlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft
Manifest number: 1185
Signing time: Sun 19 Oct 2025 19:02:32 +0000
Manifest this update: Sun 19 Oct 2025 19:02:32 +0000
Manifest next update: Mon 20 Oct 2025 19:02:32 +0000
Files and hashes: 1: mvnR5V9D5P3W0k-0sO2m6dEoqlE.crl (hash: 0i2o7qCMZjfIpsHiVe2KQsIzDCC1dqv33dYicZiF31E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mvnR5V9D5P3W0k-0sO2m6dEoqlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:16:42:68:69:b3:b2:f9:8b:3d:c4:11:76:74:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af9d1e55f43e4fdd6d24fb4b0eda6e9d128aa51
Validity
Not Before: Oct 19 19:02:32 2025 GMT
Not After : Oct 20 19:02:32 2025 GMT
Subject: CN=5d9b71b53cb59ecfd30af9d30ec4d01c5c9a5fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:7a:5b:fb:38:d1:b2:22:12:7f:07:af:4f:
59:2c:2a:94:48:3b:c6:f4:8d:5e:2d:2d:2a:a8:5f:
aa:b1:48:18:dd:2c:33:8a:c1:16:39:25:a1:ac:3c:
9c:17:4c:b2:13:d2:fa:70:46:14:ac:46:48:de:22:
e7:6a:fc:0a:8c:da:16:4b:70:9e:4d:ec:45:6f:9a:
c6:a6:e4:49:94:1f:04:30:20:5a:68:b3:c2:7b:63:
38:e6:0a:45:80:51:7c:43:81:c7:dd:25:53:2f:33:
9b:bd:1b:85:b7:47:e0:2c:82:bc:9c:ac:e1:38:62:
c6:15:7c:a8:19:b1:39:73:23:bc:0f:7f:51:14:8e:
4a:05:d5:5d:59:dd:c2:54:b3:f3:0d:52:f3:a4:23:
50:0c:2f:25:76:eb:eb:33:72:d6:ef:7c:bc:ff:04:
17:42:04:e8:5f:48:1d:27:3f:ee:c1:84:b3:be:49:
10:77:f0:2a:79:86:34:8e:28:46:01:cb:89:c8:2a:
36:62:f6:84:53:43:55:f2:f5:20:51:ab:80:8e:e7:
02:1c:2a:b2:78:1c:cc:c4:1a:5f:47:ce:1e:41:ad:
71:4f:d9:c7:0a:55:30:ce:c6:d3:dc:ba:d1:80:f0:
25:80:45:87:2b:2d:b8:4e:2d:c8:7b:ad:59:cc:62:
f2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9B:71:B5:3C:B5:9E:CF:D3:0A:F9:D3:0E:C4:D0:1C:5C:9A:5F:DA
X509v3 Authority Key Identifier:
keyid:9A:F9:D1:E5:5F:43:E4:FD:D6:D2:4F:B4:B0:ED:A6:E9:D1:28:AA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnR5V9D5P3W0k-0sO2m6dEoqlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:73:71:28:aa:51:0c:c6:0e:a5:ba:7e:23:c6:3d:51:8f:ae:
47:61:f5:2d:b3:c9:62:99:13:f1:c0:c8:02:a1:03:7c:a9:d4:
f2:7b:78:67:9d:0f:a4:26:df:9a:cc:d7:3b:7e:01:d7:28:d7:
cc:33:6b:c1:12:45:cf:65:78:42:ce:72:4c:0a:5c:0b:22:97:
04:23:86:bb:be:42:0f:07:c7:f5:65:ef:f4:77:a3:52:6c:59:
4b:c4:ea:72:6b:d6:89:8e:55:c0:d7:b6:4c:4c:cd:dc:05:1f:
dc:af:f2:33:a9:08:7a:05:84:7c:ef:3e:b9:80:2b:f0:a3:50:
be:57:23:a1:af:87:4a:db:81:11:ba:e2:18:0c:9d:28:3f:d5:
0c:57:28:1d:cc:3d:d4:82:eb:a9:20:9e:08:c1:6e:a3:2c:7e:
f6:77:c2:de:fc:58:53:1b:0e:74:c0:67:cb:ab:8e:ad:cf:27:
f8:c8:eb:63:35:a3:b4:6f:3f:38:53:0a:1c:6d:30:54:d2:ea:
2d:e5:7d:9d:cf:ae:dc:45:3b:91:5f:65:e9:ed:2a:49:be:09:
8e:c9:96:66:25:ee:5c:e7:47:9e:c7:cd:c8:70:a1:19:6e:e0:
a3:a3:e5:3d:78:63:f7:aa:7f:a1:69:a2:ec:e0:e8:6c:de:a6:
cb:cf:d8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:58 2025 by rpki-client