Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft
File: MvacygDXMkCpbJMio-lzeQ8vYcQ.mft (raw, json)
Hash identifier: TslLfAA85WkjMNyo7Syl90PnvADBTi0/eLctTcAKkrA=
Subject key identifier: 48:21:96:D2:2D:68:16:9A:F7:27:9B:B1:70:AF:76:7D:18:F9:FB:95
Authority key identifier: 32:F6:9C:CA:00:D7:32:40:A9:6C:93:22:A3:E9:73:79:0F:2F:61:C4
Certificate issuer: /CN=32f69cca00d73240a96c9322a3e973790f2f61c4
Certificate serial: 019A71B7921094F871700163739C5B6F31C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvacygDXMkCpbJMio-lzeQ8vYcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft
Manifest number: 01D3
Signing time: Tue 11 Nov 2025 07:00:47 +0000
Manifest this update: Tue 11 Nov 2025 07:00:47 +0000
Manifest next update: Wed 12 Nov 2025 07:00:47 +0000
Files and hashes: 1: MvacygDXMkCpbJMio-lzeQ8vYcQ.crl (hash: mXzmgGviDvwOYj9VlvPRYUkbBXlXyuop2bfjvcFdEBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvacygDXMkCpbJMio-lzeQ8vYcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:92:10:94:f8:71:70:01:63:73:9c:5b:6f:31:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f69cca00d73240a96c9322a3e973790f2f61c4
Validity
Not Before: Nov 11 07:00:47 2025 GMT
Not After : Nov 12 07:00:47 2025 GMT
Subject: CN=482196d22d68169af7279bb170af767d18f9fb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:74:88:da:38:07:bf:54:b1:9d:d6:cb:02:f8:
26:84:2f:4c:96:e7:0b:45:e0:93:af:1b:d5:bb:95:
e7:5a:7a:89:5b:19:83:02:b9:fd:c1:41:48:6d:0c:
a1:49:86:97:64:22:b9:14:e3:58:cf:9f:43:18:14:
09:19:82:4e:13:55:0a:46:cb:a1:76:d6:ff:aa:e5:
8e:ea:76:7b:e0:20:bd:0d:5a:80:d4:41:6a:e0:a6:
1c:18:b1:a7:89:16:f6:23:ef:6b:7d:de:1c:60:e9:
02:01:73:95:56:68:c7:14:c0:fe:76:6f:6e:4e:3a:
84:f1:d7:f4:35:29:21:6d:33:07:54:f6:e8:8c:d0:
b4:73:5f:a7:b9:16:06:b8:c4:48:ea:4d:81:c4:51:
63:3b:30:41:7b:97:e1:29:a5:32:a4:71:05:e9:82:
e0:53:a7:64:39:a8:12:22:a1:db:51:3a:4e:db:28:
f9:ff:b9:08:80:b2:26:d2:71:47:89:f8:92:4b:cb:
81:ad:da:c9:0e:65:db:91:61:8d:cf:a2:31:36:d8:
56:49:e6:33:e1:fc:16:b8:4b:bc:92:cf:8f:b3:4c:
dd:2d:91:91:1a:f4:ba:7f:b9:29:a8:42:07:f9:5e:
9e:c4:94:e0:41:de:02:11:f5:ff:9f:bc:ee:fd:07:
2b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:21:96:D2:2D:68:16:9A:F7:27:9B:B1:70:AF:76:7D:18:F9:FB:95
X509v3 Authority Key Identifier:
keyid:32:F6:9C:CA:00:D7:32:40:A9:6C:93:22:A3:E9:73:79:0F:2F:61:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvacygDXMkCpbJMio-lzeQ8vYcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b199bd-03fe-4734-b799-9879d68728c9/1/MvacygDXMkCpbJMio-lzeQ8vYcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:8d:67:a3:d2:ae:47:5e:62:04:5d:82:c5:77:fd:dc:b2:dd:
d3:6f:d6:41:0d:55:06:a3:bd:56:11:1c:45:a2:09:8e:6a:da:
3c:6c:9f:5c:b6:89:9e:97:d6:54:7e:63:46:5b:a1:f5:ed:c7:
0f:e4:f9:ed:8f:9a:06:81:44:f3:32:80:4e:ae:29:a0:8e:18:
35:8f:9c:77:44:e7:5e:72:0a:64:01:4d:95:6e:13:64:4a:9c:
17:2b:7e:ac:5b:d1:35:ff:6a:a7:0b:51:25:17:8b:89:6b:45:
ce:7e:5d:6f:ec:10:54:c0:13:9b:85:8d:a3:a1:ff:87:d2:bf:
07:66:68:c0:29:1f:4f:16:d0:00:bd:30:dc:cb:6e:46:d7:dc:
f4:85:66:17:7e:e5:5b:27:61:c5:ad:78:5f:45:76:28:df:37:
a8:1d:ed:37:63:6f:fe:9a:ca:68:04:5b:23:5b:f1:14:12:78:
33:15:f8:59:c6:79:a7:8c:b6:14:e2:e0:ed:3c:0d:e9:ed:11:
5a:ff:5f:a0:aa:89:61:c5:17:b0:19:13:bd:d5:24:93:83:51:
5b:58:76:13:97:3e:d8:09:d0:47:04:32:1f:db:39:47:20:fe:
89:b7:96:68:c9:26:62:c4:1d:4f:cf:6c:09:3d:3f:fd:2a:51:
7b:3c:52:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:53:01 2025 by rpki-client