Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
File: MVipNBic8FiR-MTlmdC5iVfplyk.mft (raw, json)
Hash identifier: oMlugKz323UIwUB4N5cDhLidKmDkndKvr+lQYI4rXLw=
Subject key identifier: 70:32:E9:46:3E:CD:75:BA:AA:30:1D:3F:D8:F9:B6:1A:AB:69:BB:0A
Authority key identifier: 31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29
Certificate issuer: /CN=3158a934189cf05891f8c4e599d0b98957e99729
Certificate serial: 019849662939A7A81766E147B2D57DC98F08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
Manifest number: 04BB
Signing time: Sun 27 Jul 2025 01:01:28 +0000
Manifest this update: Sun 27 Jul 2025 01:01:28 +0000
Manifest next update: Mon 28 Jul 2025 01:01:28 +0000
Files and hashes: 1: E6PiWh5H-D0KGmuTQkSUfsmPFuo.roa (hash: WPWFC02WG9+/fnlvASK2CjILK+QtibLHbpj7hF8B1Rs=)
2: MVipNBic8FiR-MTlmdC5iVfplyk.crl (hash: BL2MpzkZyuAA8jhiYocKsl1/wStV/Pm/27p1uXnwYw0=)
3: N16JeWvOmOgFnFHegC3uE95HfCM.roa (hash: 32qO2DybZ3HcGDezcyBjiOrTiisCqB6PajByDF+SQr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:29:39:a7:a8:17:66:e1:47:b2:d5:7d:c9:8f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3158a934189cf05891f8c4e599d0b98957e99729
Validity
Not Before: Jul 27 01:01:28 2025 GMT
Not After : Jul 28 01:01:28 2025 GMT
Subject: CN=7032e9463ecd75baaa301d3fd8f9b61aab69bb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:38:8b:47:d9:89:6a:0a:64:f1:da:3d:90:1d:
c8:c4:60:51:86:b7:2e:09:4e:61:d8:91:a8:5d:13:
13:7d:4a:b8:1a:fa:c0:a1:33:d9:c0:e0:24:18:ac:
aa:b0:22:66:39:2a:ad:1e:3a:07:b4:d2:d8:d8:d5:
f0:11:da:a1:ac:bd:02:ca:7f:d5:a1:a2:94:6c:7b:
e4:a6:72:48:65:16:13:5c:c5:b4:02:ad:84:c1:95:
9c:59:82:8d:f4:c2:dd:7e:af:65:96:30:de:f3:33:
f9:b7:30:5a:2a:3e:ff:ef:93:06:ef:ed:3d:1d:f5:
58:fb:36:42:f6:79:ee:e6:6c:73:10:21:0d:47:40:
55:ba:16:ea:e4:32:74:9f:37:8a:a6:8f:67:c0:a7:
df:aa:ba:b4:80:4d:3f:ae:25:91:54:b9:22:23:f3:
05:be:ca:71:9d:52:e1:df:b0:1e:d1:0a:ac:af:ec:
ba:55:d1:f0:74:d6:de:60:44:75:3e:b5:a0:c9:f3:
0e:bf:e9:03:54:f0:6a:e7:39:e7:ea:1f:e7:ae:16:
42:16:20:47:f0:f6:00:5b:30:d9:c2:00:5e:84:9d:
ef:c5:bc:c3:d8:ea:8a:75:60:b2:68:5a:eb:1b:6f:
4c:b2:c8:51:9e:26:08:7b:f8:df:33:19:3a:80:59:
bf:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:32:E9:46:3E:CD:75:BA:AA:30:1D:3F:D8:F9:B6:1A:AB:69:BB:0A
X509v3 Authority Key Identifier:
keyid:31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b1:16:4b:70:42:d7:9f:00:9d:a3:2a:50:91:4e:b3:9b:17:
c6:5c:c0:94:41:69:99:1e:be:2a:b3:fe:5e:d4:26:ce:f3:39:
7a:4c:8d:31:d6:e4:4e:a9:46:cf:89:9c:00:b5:f5:ca:f3:1f:
99:b9:7b:23:60:3b:5c:c7:24:13:e2:89:ce:bc:0e:c0:23:65:
91:57:6a:6e:a5:b4:ef:98:17:d0:22:21:03:58:42:e5:22:43:
cf:8c:89:7b:9d:de:2e:e7:1c:00:cb:a6:43:a4:c5:00:eb:b2:
93:4b:93:4c:ad:1d:3d:9a:1d:13:e2:3a:df:4c:ab:a4:16:ec:
b8:f9:0e:5f:42:5d:19:b4:4f:99:05:33:ab:20:52:50:19:c5:
a4:15:8c:ce:63:aa:55:41:b8:e2:41:7d:0e:32:eb:c1:cc:ee:
e0:08:b8:dc:83:4c:d9:17:d0:8e:3e:77:ee:5d:6b:0d:1d:42:
f6:e6:00:2b:7a:ee:90:74:54:8a:75:5f:57:c4:8d:32:ec:96:
42:87:31:61:eb:b1:b7:c9:52:83:3c:41:6b:20:1c:97:ca:d3:
91:4c:db:f4:71:09:8b:bd:9c:4b:0b:b5:30:9a:a7:17:a8:01:
3e:07:36:3e:9e:1f:69:30:1a:d1:7e:2d:68:85:65:f8:41:6c:
b0:33:22:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:26:19 2025 by rpki-client