Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.mft
File: mvVxMWwmKI4O1BawE3ofZIp9IAI.mft (raw, json)
Hash identifier: A3foD69tOIkbtkIIbUCXTcvFndVUSNXMAw3VRG6bkz0=
Subject key identifier: 40:FE:5A:15:76:3C:A3:7F:39:74:66:60:AA:1D:44:F1:D4:3D:3D:33
Authority key identifier: 9A:F5:71:31:6C:26:28:8E:0E:D4:16:B0:13:7A:1F:64:8A:7D:20:02
Certificate issuer: /CN=9af571316c26288e0ed416b0137a1f648a7d2002
Certificate serial: 01984965E361C46EC4EECD9A5D6B6DA6290A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvVxMWwmKI4O1BawE3ofZIp9IAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.mft
Manifest number: 0142
Signing time: Sun 27 Jul 2025 01:01:10 +0000
Manifest this update: Sun 27 Jul 2025 01:01:10 +0000
Manifest next update: Mon 28 Jul 2025 01:01:10 +0000
Files and hashes: 1: mvVxMWwmKI4O1BawE3ofZIp9IAI.crl (hash: gJK6SP69frEv2Ym7V13BRIIY2WVeZFWG8G7Uluw4D6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mvVxMWwmKI4O1BawE3ofZIp9IAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:e3:61:c4:6e:c4:ee:cd:9a:5d:6b:6d:a6:29:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af571316c26288e0ed416b0137a1f648a7d2002
Validity
Not Before: Jul 27 01:01:10 2025 GMT
Not After : Jul 28 01:01:10 2025 GMT
Subject: CN=40fe5a15763ca37f39746660aa1d44f1d43d3d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1a:bf:3d:cb:81:57:87:79:5e:c1:fd:2a:c8:
d3:ca:12:5b:b9:ec:94:e7:8d:2b:1b:43:da:80:84:
20:57:47:34:d7:97:75:bb:16:ec:72:c8:69:a2:fa:
0a:ce:7b:1b:05:09:b7:8b:2e:76:0f:2a:f1:8c:5e:
02:09:14:9f:72:68:b5:49:c0:5f:5d:3b:5c:bd:de:
8f:5e:27:c2:49:1e:91:8f:e1:fa:b3:50:01:5d:b6:
fc:07:60:f7:fe:c5:c4:de:3b:a3:d2:07:cc:02:5d:
89:c9:1f:a1:39:9c:78:b5:a3:0c:3a:b1:3b:f3:00:
88:51:a6:29:33:13:d5:d1:30:0a:99:83:95:a8:28:
6f:66:8f:58:11:43:11:62:d1:ae:58:b7:d2:9d:fa:
7d:cf:1e:e7:41:67:dc:84:17:88:23:03:ec:f3:37:
b7:26:aa:fc:c4:4b:5f:a0:2b:ca:00:2c:78:2f:7c:
df:16:6d:46:fa:d4:26:99:15:2a:b4:a9:89:56:86:
97:60:64:8a:af:2b:17:b8:d6:e3:1d:5e:47:79:43:
a0:d5:12:ed:85:20:f0:58:a8:01:d5:dd:b3:02:d1:
8d:4d:03:e7:b9:e7:a4:97:ee:7a:67:d2:b1:f7:93:
81:a7:c5:c2:0a:d2:8e:4e:41:ca:05:12:d3:c3:88:
b0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FE:5A:15:76:3C:A3:7F:39:74:66:60:AA:1D:44:F1:D4:3D:3D:33
X509v3 Authority Key Identifier:
keyid:9A:F5:71:31:6C:26:28:8E:0E:D4:16:B0:13:7A:1F:64:8A:7D:20:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvVxMWwmKI4O1BawE3ofZIp9IAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:f5:07:70:23:72:33:1c:ea:75:d8:4b:5c:33:d9:5f:fb:54:
05:92:79:f7:1d:a3:14:8c:d0:cb:12:bc:64:03:a0:d7:e8:a9:
dc:35:64:56:93:69:a7:11:35:24:ef:91:6e:f9:c7:f7:0a:b7:
78:f4:c4:ca:44:7a:f6:3b:88:b7:ed:c5:7f:6b:1e:22:3e:bd:
56:ee:ba:3b:32:cd:8b:5f:ce:5a:f4:c6:62:cb:42:b4:93:d6:
72:7f:44:81:74:0f:41:8a:76:97:c5:de:48:7d:d3:fd:87:39:
0e:48:94:cf:1b:e8:68:70:3f:f5:54:c8:28:d4:9a:55:ec:fc:
0f:1e:3a:35:1f:31:a9:4c:73:10:34:7f:45:65:46:c7:76:1d:
b9:39:dd:49:bf:00:1f:2f:6a:b1:3a:e1:8c:d1:d1:8d:fd:cc:
d0:94:5c:97:1a:11:1c:9a:1a:d2:97:80:04:e6:cd:e7:4a:64:
50:0a:74:76:e7:3e:75:b0:6c:6a:ca:9a:70:3a:6a:64:8c:f2:
00:d8:96:af:60:10:32:6e:bf:11:2c:ab:d8:f2:72:e3:43:72:
ac:c6:e9:0d:16:b7:dc:17:d7:86:12:95:58:0e:51:24:7f:af:
17:8b:aa:a7:90:92:5c:f0:7e:56:c7:ca:eb:08:82:30:bc:7e:
9c:35:b8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:51:08 2025 by rpki-client