Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
File: MVipNBic8FiR-MTlmdC5iVfplyk.mft (raw, json)
Hash identifier: 9DN6R19Uf1p1SHt9klzwyLnHgJxgBfDnxjOm2PINJTE=
Subject key identifier: 79:81:99:DB:B1:7F:1F:ED:E8:1D:05:19:FB:35:91:8E:D8:40:A0:94
Authority key identifier: 31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29
Certificate issuer: /CN=3158a934189cf05891f8c4e599d0b98957e99729
Certificate serial: 019A0B5CB362DDEE1A4D4C89D9A02C48C41D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
Manifest number: 05A4
Signing time: Wed 22 Oct 2025 10:00:15 +0000
Manifest this update: Wed 22 Oct 2025 10:00:15 +0000
Manifest next update: Thu 23 Oct 2025 10:00:15 +0000
Files and hashes: 1: E6PiWh5H-D0KGmuTQkSUfsmPFuo.roa (hash: WPWFC02WG9+/fnlvASK2CjILK+QtibLHbpj7hF8B1Rs=)
2: MVipNBic8FiR-MTlmdC5iVfplyk.crl (hash: hqJbz0wwcXebUeZA6u2nx0bFWC9OEYzcVt6mf2VBoCE=)
3: N16JeWvOmOgFnFHegC3uE95HfCM.roa (hash: 32qO2DybZ3HcGDezcyBjiOrTiisCqB6PajByDF+SQr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5c:b3:62:dd:ee:1a:4d:4c:89:d9:a0:2c:48:c4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3158a934189cf05891f8c4e599d0b98957e99729
Validity
Not Before: Oct 22 10:00:15 2025 GMT
Not After : Oct 23 10:00:15 2025 GMT
Subject: CN=798199dbb17f1fede81d0519fb35918ed840a094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7f:e3:a9:6c:66:e0:06:97:b6:3c:ef:f2:b4:
65:ad:6b:3a:a6:5f:a2:52:57:6a:4e:19:87:5f:4c:
45:6f:46:92:f8:03:5f:a3:ba:7a:f2:ea:f7:f6:6a:
85:c3:6d:52:18:dc:77:ff:9b:39:0c:8d:8b:fc:76:
43:ed:2c:59:2d:fa:a0:26:96:c4:1d:64:dd:8f:ba:
c0:76:b5:9b:2d:a3:b2:d4:f0:c0:65:59:78:26:ea:
bc:dc:6d:4a:90:5c:8b:40:4d:f5:6c:f8:42:f5:22:
37:5c:06:7b:a0:4c:48:23:8e:9f:b5:c9:e0:47:48:
28:76:42:85:20:8e:ae:e0:fc:e7:9f:1d:8c:d5:af:
3c:97:0f:42:8a:16:ef:92:04:7a:df:49:4d:41:8f:
88:10:62:7b:91:30:d1:c2:cd:2a:18:72:10:fe:16:
5b:4d:4f:7e:c3:74:e2:2b:f4:8d:4d:96:7a:e9:3d:
ac:ad:54:28:55:0c:28:55:f8:66:c5:65:dc:41:fc:
17:71:4b:f8:27:17:de:ef:e9:d3:56:0f:44:49:57:
bb:bc:71:87:f8:4c:b3:2f:64:c0:e1:ef:23:b7:0f:
15:46:70:cd:79:9e:65:ba:d1:99:e2:5b:f2:ca:54:
4f:e0:f6:d4:02:a1:02:e2:62:8c:7b:6c:c7:12:e7:
2a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:81:99:DB:B1:7F:1F:ED:E8:1D:05:19:FB:35:91:8E:D8:40:A0:94
X509v3 Authority Key Identifier:
keyid:31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:61:f5:7e:f5:03:df:45:c5:eb:8f:c4:7c:89:e0:1c:92:4e:
66:93:2a:27:46:b8:e0:62:62:6e:b7:c8:4d:20:19:45:fa:7a:
8e:1b:e5:f8:a4:e0:47:70:9f:1a:3a:ad:75:d6:15:11:a9:df:
14:1a:a4:37:51:d6:21:27:ab:52:bb:b8:9b:9a:22:97:f8:56:
24:f2:9f:0a:5f:81:ff:6c:f4:1c:f2:fc:90:43:61:ca:e3:85:
20:51:f4:52:96:60:f6:ba:f0:5a:34:29:24:07:8b:8e:da:ae:
bd:95:5f:9d:79:4a:9f:69:95:6e:18:8c:7c:b8:3a:70:bc:0a:
f9:a3:ae:9b:29:c9:fe:f9:4f:cf:ee:23:4d:2c:73:fa:32:d7:
b6:77:04:cf:5b:8d:8b:5d:4a:20:62:7e:4c:b2:79:44:4d:d4:
da:7f:68:3f:8b:bb:a4:97:74:da:9f:76:5a:5e:1d:76:3c:ae:
d5:43:9d:59:a8:7d:c2:bb:67:2a:a8:87:02:b1:0d:4b:6e:7e:
24:96:b5:d7:fa:84:10:c1:9f:a2:19:97:d5:cf:c9:1e:b0:0a:
5c:39:93:cc:29:de:a1:0d:87:c8:88:bb:7b:74:c2:61:27:2d:
c0:15:ec:48:8a:e6:2c:e7:d2:ca:50:90:5a:50:7d:3c:d3:47:
06:6e:68:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 11:57:03 2025 by rpki-client