Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
File: MVGMe1S0QScIP2JtPhUY9EVM4FU.mft (raw, json)
Hash identifier: RzQSP7UEtnImh3ZLAlBCxReVRntP2J2owJRvaputays=
Subject key identifier: 5A:75:73:B9:9C:D1:F7:82:5A:E9:C4:54:27:E1:E1:96:34:D8:D2:71
Authority key identifier: 31:51:8C:7B:54:B4:41:27:08:3F:62:6D:3E:15:18:F4:45:4C:E0:55
Certificate issuer: /CN=31518c7b54b44127083f626d3e1518f4454ce055
Certificate serial: 019922FAF2E6C379AEA5CAE2CFBF4BBD715A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
Manifest number: 0342
Signing time: Sun 07 Sep 2025 07:01:35 +0000
Manifest this update: Sun 07 Sep 2025 07:01:35 +0000
Manifest next update: Mon 08 Sep 2025 07:01:35 +0000
Files and hashes: 1: MVGMe1S0QScIP2JtPhUY9EVM4FU.crl (hash: 2rKe8+8aakHaIm6LwetO6WCK3sRO0FGCl6WcHL7mJ6A=)
2: Z8_72VViKIEya-8jYQ4foPa8uyM.roa (hash: VfRJSQVqCqPZi9LVFFlh6oeMG2gSmAPtA9TzAjDBjm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:f2:e6:c3:79:ae:a5:ca:e2:cf:bf:4b:bd:71:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31518c7b54b44127083f626d3e1518f4454ce055
Validity
Not Before: Sep 7 07:01:35 2025 GMT
Not After : Sep 8 07:01:35 2025 GMT
Subject: CN=5a7573b99cd1f7825ae9c45427e1e19634d8d271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:03:65:01:c9:b5:9f:e2:ff:6d:e0:1d:a9:db:
1e:25:74:df:4f:09:da:e0:e6:e5:40:d1:ab:99:36:
2e:93:f0:6f:60:13:dc:1e:57:9f:d9:55:ec:12:72:
61:a9:1e:96:30:17:0d:bf:59:09:e2:4c:04:42:f4:
a9:98:c2:26:6e:ad:0f:5c:e5:09:a8:2b:e2:97:52:
d8:51:7c:d6:cf:64:59:3b:ce:88:1d:32:4c:95:07:
41:3b:9b:35:6c:9b:cc:65:ce:8d:ce:ae:f5:c5:41:
80:b1:6a:01:8e:a0:2d:36:07:d9:98:78:e0:6f:25:
d9:78:a9:ae:32:45:8a:49:5c:5e:fe:1a:71:d9:00:
f3:61:6b:9e:d5:e8:ef:ea:e8:d2:97:97:a6:6d:e7:
b1:12:64:71:e0:62:95:31:41:df:65:ef:54:54:1c:
bc:cb:40:cb:2e:fd:be:ec:e3:05:49:96:12:15:d2:
54:4e:ef:42:6f:7b:3e:98:ee:5f:00:97:f0:bc:ec:
98:36:de:84:e8:6e:bf:89:28:93:f2:62:61:06:ca:
52:0f:6e:f7:29:c1:7e:21:ad:65:f2:06:d7:15:d2:
14:7f:39:ad:d0:01:df:9d:af:8d:cd:74:94:77:86:
c3:11:52:0b:de:54:ae:da:6e:ca:e5:fa:67:8d:be:
16:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:75:73:B9:9C:D1:F7:82:5A:E9:C4:54:27:E1:E1:96:34:D8:D2:71
X509v3 Authority Key Identifier:
keyid:31:51:8C:7B:54:B4:41:27:08:3F:62:6D:3E:15:18:F4:45:4C:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVGMe1S0QScIP2JtPhUY9EVM4FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/51d4b5-c27d-4b7c-9070-721175d65eb8/1/MVGMe1S0QScIP2JtPhUY9EVM4FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:6c:bd:83:5d:56:e8:d5:fe:a4:26:bd:9e:47:75:58:76:f0:
94:a1:73:08:21:07:d6:7e:6d:84:4f:85:3e:65:17:55:02:2a:
5e:d2:1c:44:c4:15:db:30:b1:23:66:08:b7:2e:45:ea:4f:85:
62:1f:51:b2:bc:3f:93:a3:89:24:98:16:5d:95:a3:75:9e:72:
ec:31:7f:58:a9:60:74:8e:ec:f7:81:48:8c:fd:0e:0b:73:73:
a1:60:0a:44:4c:e9:f0:6e:06:63:fd:b9:8d:86:31:51:9b:7d:
b3:f1:53:05:88:63:9b:63:93:30:1a:9f:27:b1:39:0d:e0:12:
fd:d1:74:1d:f7:52:c2:8f:55:8d:0d:dd:cb:d1:9d:1c:34:97:
91:f2:af:eb:10:27:0e:eb:be:67:6f:69:47:4d:9f:96:58:e8:
e7:8e:c9:cb:28:1d:de:c7:89:d0:95:dd:d5:37:27:7c:cb:98:
da:53:9d:6c:b2:de:71:6a:a6:22:e8:c2:b7:a4:db:de:b9:f7:
53:9c:66:70:e4:05:00:b2:8f:4d:3a:e4:04:46:c2:87:d9:6e:
a0:2d:d5:e2:ec:69:5b:72:a2:fc:c9:1f:7c:2b:fe:8d:79:29:
75:6e:59:f5:f3:3e:5b:e4:f8:84:80:35:3a:78:fb:27:b3:d7:
2f:e5:c1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:38:59 2025 by rpki-client