Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft
File: mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft (raw, json)
Hash identifier: WzU+ahH+Ie+5wPr5dJcW91bJ41RrM0GArc2VlAZt2js=
Subject key identifier: 14:1B:E1:E6:EB:AF:E9:96:8B:57:E5:81:CB:2D:E1:D3:CA:5D:3E:BF
Authority key identifier: 9A:F9:D1:E5:5F:43:E4:FD:D6:D2:4F:B4:B0:ED:A6:E9:D1:28:AA:51
Certificate issuer: /CN=9af9d1e55f43e4fdd6d24fb4b0eda6e9d128aa51
Certificate serial: 0197B6A199C19DAECA1DD7048AD4F6CA5D54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvnR5V9D5P3W0k-0sO2m6dEoqlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft
Manifest number: 1057
Signing time: Sat 28 Jun 2025 13:02:13 +0000
Manifest this update: Sat 28 Jun 2025 13:02:13 +0000
Manifest next update: Sun 29 Jun 2025 13:02:13 +0000
Files and hashes: 1: mvnR5V9D5P3W0k-0sO2m6dEoqlE.crl (hash: D1IYgiWzCqtE9IqKUXDRxw+ef0iNONPhjuJ81V69oKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mvnR5V9D5P3W0k-0sO2m6dEoqlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:99:c1:9d:ae:ca:1d:d7:04:8a:d4:f6:ca:5d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af9d1e55f43e4fdd6d24fb4b0eda6e9d128aa51
Validity
Not Before: Jun 28 13:02:13 2025 GMT
Not After : Jun 29 13:02:13 2025 GMT
Subject: CN=141be1e6ebafe9968b57e581cb2de1d3ca5d3ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a7:c8:f7:ba:f8:55:2a:9c:9f:33:b6:59:30:
2f:03:d4:71:f3:03:c3:b9:65:d7:11:85:c9:89:24:
fe:95:0a:43:f1:ff:82:87:af:b4:e4:8d:a2:53:ad:
4d:2e:35:2f:16:cd:e1:42:ce:10:59:4a:e6:4a:85:
55:86:2a:9d:f3:c0:57:a0:0c:eb:25:90:3c:b4:53:
a8:7f:ee:60:ea:42:ca:ab:b0:b6:e9:70:36:0a:c4:
5c:e9:e0:d1:43:26:29:2e:ef:97:b8:16:69:61:d0:
b3:50:9b:f4:b0:bf:35:13:db:79:ab:54:d7:0b:ae:
b9:52:ae:cf:7e:4c:8a:50:f3:c4:fe:38:d7:c7:df:
6e:2a:ca:db:54:23:fd:29:72:dd:a0:c5:30:9e:b9:
6a:d2:fd:b5:63:ae:86:42:92:9b:4c:44:2d:fd:ba:
6b:62:a7:f5:48:23:81:a5:1d:8b:1c:54:0e:db:65:
5d:01:f9:b5:a8:59:d9:cc:a3:a3:df:45:dc:be:18:
e7:52:4f:4b:f0:4c:81:bc:f5:20:30:01:8f:e7:fe:
ab:ce:ef:0a:b5:15:5d:85:8c:d9:d6:01:44:66:4a:
67:91:ba:7d:f4:7f:91:bf:3c:76:ef:ab:bd:c6:8c:
02:1f:02:77:e1:2a:02:3f:07:69:81:b0:98:b2:c6:
62:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1B:E1:E6:EB:AF:E9:96:8B:57:E5:81:CB:2D:E1:D3:CA:5D:3E:BF
X509v3 Authority Key Identifier:
keyid:9A:F9:D1:E5:5F:43:E4:FD:D6:D2:4F:B4:B0:ED:A6:E9:D1:28:AA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnR5V9D5P3W0k-0sO2m6dEoqlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0c5ed7-0e72-4ead-906c-291a3164a0b8/1/mvnR5V9D5P3W0k-0sO2m6dEoqlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:48:b6:51:ed:51:33:64:42:2c:5e:1e:c1:89:a2:cf:31:e9:
01:4f:63:a9:d0:91:6e:3b:fe:63:1a:9c:3d:74:62:a4:db:ba:
e8:43:e9:e1:67:89:68:de:f8:60:5e:9f:9e:f5:e9:4b:7b:4f:
12:8e:bf:63:4d:1c:2b:06:c2:0e:e3:e9:9c:28:1c:24:f4:47:
01:bf:54:50:02:9e:9b:a3:46:0e:66:00:0e:f8:98:6b:85:69:
b5:2f:93:95:9e:b3:87:b8:7b:cb:47:f1:04:01:35:e6:b0:e7:
d3:0a:cd:ae:81:9f:85:54:7e:38:7d:cf:c8:21:da:38:8b:aa:
e7:7e:b4:e7:26:09:20:ef:61:49:ad:fd:e7:6b:83:1f:9e:4d:
6d:f2:ed:c8:4b:48:05:ef:d9:05:cf:16:03:ed:07:bf:ca:da:
83:e8:a4:2b:0b:b3:18:f7:67:d9:7b:4c:28:f4:04:16:22:08:
ee:c8:a2:97:3e:5b:36:dc:99:8f:9f:d5:19:12:c7:67:98:34:
a1:be:08:32:25:7a:bc:46:92:bb:3f:ff:a8:22:bc:6b:dc:b8:
4a:44:f1:54:e5:b0:12:d7:db:8f:aa:d8:ac:8a:ef:70:28:7f:
85:32:cd:b0:9f:42:f9:24:d3:00:44:2e:61:d9:66:ad:dd:ac:
60:a1:97:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oZnBna7KHdcEitT2yl1UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZjlkMWU1NWY0M2U0ZmRkNmQyNGZiNGIwZWRhNmU5ZDEy
OGFhNTEwHhcNMjUwNjI4MTMwMjEzWhcNMjUwNjI5MTMwMjEzWjAzMTEwLwYDVQQD
EygxNDFiZTFlNmViYWZlOTk2OGI1N2U1ODFjYjJkZTFkM2NhNWQzZWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxafI97r4VSqcnzO2WTAvA9Rx8wPD
uWXXEYXJiST+lQpD8f+Ch6+05I2iU61NLjUvFs3hQs4QWUrmSoVVhiqd88BXoAzr
JZA8tFOof+5g6kLKq7C26XA2CsRc6eDRQyYpLu+XuBZpYdCzUJv0sL81E9t5q1TX
C665Uq7PfkyKUPPE/jjXx99uKsrbVCP9KXLdoMUwnrlq0v21Y66GQpKbTEQt/bpr
Yqf1SCOBpR2LHFQO22VdAfm1qFnZzKOj30XcvhjnUk9L8EyBvPUgMAGP5/6rzu8K
tRVdhYzZ1gFEZkpnkbp99H+Rvzx276u9xowCHwJ34SoCPwdpgbCYssZihwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQb4ebrr+mWi1flgcst4dPKXT6/MB8GA1UdIwQY
MBaAFJr50eVfQ+T91tJPtLDtpunRKKpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXZuUjVWOUQ1UDNXMGstMHNPMm02ZEVvcWxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8wYzVlZDctMGU3Mi00ZWFkLTkwNmMt
MjkxYTMxNjRhMGI4LzEvbXZuUjVWOUQ1UDNXMGstMHNPMm02ZEVvcWxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8wYzVlZDctMGU3Mi00ZWFkLTkwNmMtMjkxYTMxNjRhMGI4
LzEvbXZuUjVWOUQ1UDNXMGstMHNPMm02ZEVvcWxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAEi2Ue1R
M2RCLF4ewYmizzHpAU9jqdCRbjv+YxqcPXRipNu66EPp4WeJaN74YF6fnvXpS3tP
Eo6/Y00cKwbCDuPpnCgcJPRHAb9UUAKem6NGDmYADviYa4VptS+TlZ6zh7h7y0fx
BAE15rDn0wrNroGfhVR+OH3PyCHaOIuq53605yYJIO9hSa3952uDH55NbfLtyEtI
Be/ZBc8WA+0Hv8rag+ikKwuzGPdn2XtMKPQEFiII7siilz5bNtyZj5/VGRLHZ5g0
ob4IMiV6vEaSuz//qCK8a9y4SkTxVOWwEtfbj6rYrIrvcCh/hTLNsJ9C+STTAEQu
Ydlmrd2sYKGXyw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:08 2025 by rpki-client