Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
File: MvrPXQJzAmjTsedslrD4WI2Zi08.mft (raw, json)
Hash identifier: HzG2yCQOuiV8pUha9YibZs1rS5SOEOSiuPHKtzXssgA=
Subject key identifier: 46:07:2E:DD:9C:87:35:AC:E3:05:8D:B6:6C:5A:A3:A0:10:2F:D1:1B
Authority key identifier: 32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
Certificate issuer: /CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Certificate serial: 0199315AB45BCBD7E6C46AB13FC4BF98328C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
Manifest number: 13C8
Signing time: Wed 10 Sep 2025 02:00:51 +0000
Manifest this update: Wed 10 Sep 2025 02:00:51 +0000
Manifest next update: Thu 11 Sep 2025 02:00:51 +0000
Files and hashes: 1: MvrPXQJzAmjTsedslrD4WI2Zi08.crl (hash: fA006EzxoPv0WYEgSoUH83PjAd7S0fCn2xVL18QvF0Y=)
2: kZhmU11AcLMU9j0H5R4zLY4tMkU.roa (hash: 4zjf1YfmBA/3a2ksRPti6rOa+1AdjV5zlhfDUSPHUS4=)
3: macgBtbCg5Mxhslrz0OHJiQKlew.roa (hash: GBS8E51Gp7YKQrT0Z2MAz5xnX4MGpebSlxO7yoAgVFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:5a:b4:5b:cb:d7:e6:c4:6a:b1:3f:c4:bf:98:32:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Validity
Not Before: Sep 10 02:00:51 2025 GMT
Not After : Sep 11 02:00:51 2025 GMT
Subject: CN=46072edd9c8735ace3058db66c5aa3a0102fd11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7a:3f:c1:d0:93:5a:78:19:dc:bf:cc:34:43:
54:2c:31:57:6b:30:7b:21:a0:86:e5:50:15:dc:aa:
ae:a5:89:38:0c:aa:67:11:b6:b7:09:d4:01:0f:22:
b9:96:99:f9:50:a1:b6:20:52:ee:c2:9f:76:9b:5b:
c1:48:43:a2:f5:2e:bd:2d:d3:37:29:f3:f5:26:a3:
a2:8f:ee:73:61:c6:a3:73:bd:a5:4c:7e:c2:bc:84:
5d:14:2a:03:38:68:bb:cc:46:84:8e:5c:73:c5:56:
ea:e5:63:d6:39:c5:2a:c3:0b:65:29:b8:9d:3c:78:
2a:79:36:6d:49:a9:72:d8:e7:0e:8b:17:21:4c:11:
9a:62:70:00:74:10:00:01:ec:19:97:cf:35:9c:9c:
1a:85:29:1a:9d:d2:3a:88:1f:f0:42:62:43:31:93:
bb:ca:68:41:92:56:c9:eb:cf:8d:93:5b:8a:cd:4b:
1b:20:b4:9c:c2:70:97:d0:ec:7a:46:47:f6:24:77:
85:a0:c1:5d:95:04:d0:6b:c7:0f:db:ae:e3:cb:27:
d6:48:3c:f2:fb:7a:dd:7b:23:d0:38:b3:84:90:ce:
72:22:92:d1:49:44:98:e5:53:c1:db:c9:34:2c:3e:
b7:d2:92:1a:bf:49:65:e2:8e:02:03:2f:a2:95:ce:
8f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:07:2E:DD:9C:87:35:AC:E3:05:8D:B6:6C:5A:A3:A0:10:2F:D1:1B
X509v3 Authority Key Identifier:
keyid:32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:9c:c6:73:46:7d:ab:33:49:e4:db:15:f8:a7:bf:0f:42:06:
0d:65:45:9d:8e:b0:04:0e:2b:31:fc:6c:01:fc:49:3c:e7:4e:
b3:ed:68:1f:f8:b7:f7:c7:1c:a6:95:2d:2b:d8:80:6a:3f:c1:
3d:74:f7:c7:51:0c:56:4e:14:02:e9:2a:ea:c9:bf:4d:79:35:
05:1f:1b:70:61:c9:f5:ec:44:84:4e:9a:26:a3:19:27:e8:ae:
d9:70:0b:2f:63:93:bb:9d:9b:2a:da:80:23:28:be:e7:8c:2a:
56:9d:f3:4e:c6:8b:31:b2:0d:e1:ba:54:8b:dd:9c:3c:9d:d5:
85:d9:e0:7b:5d:c2:ec:9d:63:0d:51:10:a4:77:2b:1b:3a:94:
c2:d0:79:7a:9a:f9:c6:4c:75:a9:ce:80:cb:1d:f3:3b:96:9f:
99:57:3c:7f:92:b4:b4:e3:9c:00:6e:07:f2:57:b6:30:b1:16:
7f:ab:37:09:72:e5:88:4c:09:ad:4c:78:47:52:43:71:63:e5:
8a:b6:3b:95:96:c2:58:be:e9:4e:9b:0e:3b:e4:d9:b7:30:e9:
92:6d:8f:0c:16:25:07:dd:9b:80:29:02:a8:a4:8d:66:89:53:
49:ca:72:18:67:d4:04:22:a6:a1:3b:2f:1b:c6:ab:65:04:e8:
fd:b7:28:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:09:00 2025 by rpki-client