Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft
File: MvacygDXMkCpbJMio-lzeQ8vYcQ.mft (raw, json)
Hash identifier: TGYpgArOxIP3uyVCz3aEPGJOPUn2B8Wq5nihEAoy6i8=
Subject key identifier: B0:C3:F8:A3:1E:14:AA:C4:22:47:6A:86:D6:74:B0:BA:E6:F1:EB:C0
Authority key identifier: 32:F6:9C:CA:00:D7:32:40:A9:6C:93:22:A3:E9:73:79:0F:2F:61:C4
Certificate issuer: /CN=32f69cca00d73240a96c9322a3e973790f2f61c4
Certificate serial: 01984588524EF41B46AB05A7E1128665B8A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvacygDXMkCpbJMio-lzeQ8vYcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft
Manifest number: B3
Signing time: Sat 26 Jul 2025 07:00:18 +0000
Manifest this update: Sat 26 Jul 2025 07:00:18 +0000
Manifest next update: Sun 27 Jul 2025 07:00:18 +0000
Files and hashes: 1: MvacygDXMkCpbJMio-lzeQ8vYcQ.crl (hash: f8JGmgHpfANavUqNZOxn7JA26oxFrlJkRNqJNqZGKwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvacygDXMkCpbJMio-lzeQ8vYcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:52:4e:f4:1b:46:ab:05:a7:e1:12:86:65:b8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f69cca00d73240a96c9322a3e973790f2f61c4
Validity
Not Before: Jul 26 07:00:18 2025 GMT
Not After : Jul 27 07:00:18 2025 GMT
Subject: CN=b0c3f8a31e14aac422476a86d674b0bae6f1ebc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d5:4d:5e:cb:36:9a:2d:14:ec:04:d5:3c:7f:
78:08:35:a0:72:0f:de:b7:e4:f4:9a:06:28:1a:bf:
c0:ae:10:97:46:e4:0c:5d:46:81:ce:76:ce:30:23:
34:a2:44:8f:ee:2b:a0:2c:d1:56:f5:5f:57:15:e4:
37:cc:f1:b0:a4:72:86:0a:2b:97:f6:1e:df:b1:99:
39:e3:58:71:a4:71:29:c6:ae:11:71:66:02:97:da:
89:3d:d3:cc:61:01:54:67:60:f9:47:1c:e6:4b:25:
9f:b8:33:4d:5c:3a:5c:9b:ce:6d:99:36:71:76:b1:
9d:bc:59:8d:8b:7a:99:fd:1a:63:95:eb:1e:01:63:
9c:1e:e5:2b:71:27:78:2e:6e:5f:40:d6:25:60:2b:
7a:da:ce:29:f8:ef:ea:4c:f8:8e:34:5e:92:25:b5:
1e:7f:c4:ff:9b:50:22:19:a2:95:58:43:38:fd:f4:
e2:39:52:65:89:75:8f:93:d8:41:47:6e:3f:c8:0a:
d4:3f:8c:c7:a1:84:13:62:a8:a7:34:cc:db:67:8f:
fc:51:19:c3:10:36:97:e3:48:ff:15:51:b2:c2:5e:
ef:7b:5f:ad:8a:9c:d0:9c:5b:e7:27:57:b6:c2:40:
42:30:e8:db:eb:d5:aa:c0:f5:c1:e3:d2:b1:a4:5a:
42:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C3:F8:A3:1E:14:AA:C4:22:47:6A:86:D6:74:B0:BA:E6:F1:EB:C0
X509v3 Authority Key Identifier:
keyid:32:F6:9C:CA:00:D7:32:40:A9:6C:93:22:A3:E9:73:79:0F:2F:61:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvacygDXMkCpbJMio-lzeQ8vYcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:90:74:3c:bf:1c:43:2f:04:e5:ab:0a:46:71:79:f4:92:31:
36:ee:0a:6e:18:aa:60:60:4d:97:52:2b:7e:e6:f4:9c:15:70:
7b:d9:37:1a:a0:57:2c:bb:f6:97:b3:cb:db:fb:f3:4d:6b:50:
4a:a2:47:03:df:9d:91:36:6b:38:4e:71:ce:32:07:f1:09:94:
02:66:89:69:7b:1a:a2:55:2b:3e:89:6b:75:04:c7:88:4b:a5:
8b:6e:83:bb:f4:5a:6b:41:ba:85:8f:fa:7c:ee:7d:e1:e6:32:
91:de:c7:af:de:35:20:1c:44:bf:1f:15:67:58:0d:06:00:b0:
1c:ca:0f:6d:77:18:fc:c0:1b:7c:9e:cd:81:c3:cd:4a:a3:37:
2b:87:55:df:a6:c0:c8:62:03:88:3b:12:43:e2:58:73:f9:01:
d6:ef:df:88:1f:1a:91:20:94:ed:4a:72:19:35:36:c4:f2:a2:
82:75:69:d3:86:d5:5a:7d:c7:57:5f:f0:2a:a6:b8:42:53:06:
93:23:57:a5:aa:99:0f:aa:4d:03:22:81:c0:9d:77:db:d6:4a:
0c:a2:ff:ea:69:1e:2a:65:08:7b:73:b5:e8:9f:2d:b9:4a:58:
83:a3:6c:3c:c9:b1:0c:15:e8:a5:65:4b:94:c2:8b:f6:dd:f6:
78:ba:e3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:09:32 2025 by rpki-client