Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
File: MvG4X6XeV6X-Ej3jqQXzyzariv4.mft (raw, json)
Hash identifier: schGnOdi5u0ruSVo8K3Cxe/3BddljLSSQJ98/B9DiIU=
Subject key identifier: 61:50:6F:46:A3:21:93:05:92:81:58:63:DC:47:D0:57:AD:87:15:9D
Authority key identifier: 32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE
Certificate issuer: /CN=32f1b85fa5de57a5fe123de3a905f3cb36ab8afe
Certificate serial: 019A71B7C088B924E85A04F3CE72483DB970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
Manifest number: 0632
Signing time: Tue 11 Nov 2025 07:00:59 +0000
Manifest this update: Tue 11 Nov 2025 07:00:59 +0000
Manifest next update: Wed 12 Nov 2025 07:00:59 +0000
Files and hashes: 1: MvG4X6XeV6X-Ej3jqQXzyzariv4.crl (hash: 95p5T1i5Gb8F8OzTOaVOymYfEfvo2VULFRdgsUB2eWM=)
2: NYziV-NFGGqBIoJkJemWo5QRXPo.roa (hash: NJwrl3v2N6LA2BTkuAAr9JlSloYvfxRMFpbHdjPuE8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c0:88:b9:24:e8:5a:04:f3:ce:72:48:3d:b9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f1b85fa5de57a5fe123de3a905f3cb36ab8afe
Validity
Not Before: Nov 11 07:00:59 2025 GMT
Not After : Nov 12 07:00:59 2025 GMT
Subject: CN=61506f46a321930592815863dc47d057ad87159d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:df:a1:b0:f4:4a:95:c5:3e:9f:93:97:6b:40:
db:d1:7c:8c:bf:76:c1:a4:8f:9f:72:e6:54:de:21:
09:05:c8:a0:1c:bd:34:51:c8:89:a3:bd:90:ea:7e:
2e:cb:71:79:8c:88:d6:bc:6b:4a:e5:ab:e7:23:99:
76:42:d3:41:6a:16:84:5b:0b:c8:92:e3:d3:d6:6e:
7b:46:99:40:81:3b:38:3b:c5:d0:9d:9b:8b:18:e1:
60:24:9d:e1:73:c7:7e:53:78:4b:e5:31:49:9b:70:
d1:99:df:f5:23:29:49:3d:af:8f:9b:9a:55:35:c6:
fc:27:3d:62:a5:9c:df:0e:b4:19:dd:7d:28:40:ea:
c6:ed:71:0e:2e:ea:38:a7:a9:de:4a:21:21:46:fe:
61:af:68:94:80:4b:3f:9f:dd:10:db:fc:98:46:85:
8b:fb:fc:8f:e0:69:b4:f2:fc:4a:bc:c6:68:fe:4d:
9e:a1:d5:bf:48:fd:9a:e1:54:79:20:1c:04:a4:e7:
ce:78:e1:12:af:0b:a2:58:dc:d8:9f:a2:ff:dd:0e:
9b:79:67:70:f2:19:14:79:25:e1:cc:58:0a:85:74:
71:d3:80:9e:77:17:01:d5:1c:54:09:91:85:88:aa:
8b:99:81:c3:71:81:ac:76:7f:68:9e:8a:85:2c:91:
84:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:50:6F:46:A3:21:93:05:92:81:58:63:DC:47:D0:57:AD:87:15:9D
X509v3 Authority Key Identifier:
keyid:32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:00:02:80:da:87:4c:b5:0f:8d:89:3c:81:d9:e7:61:70:63:
2f:97:ad:8d:bd:a5:ff:3c:c5:a3:03:68:c3:a5:15:c3:24:5e:
44:b5:49:88:8f:b8:15:f6:70:81:97:07:03:e0:ad:2e:19:f6:
79:b5:cf:8d:74:ee:c3:3e:37:a5:4c:68:c3:e7:ed:f5:d4:a1:
e8:25:6c:9f:c7:f8:31:0b:c3:a2:46:22:18:bd:39:e5:12:bb:
67:6d:0b:b7:f8:eb:c2:86:0e:0b:ef:25:1c:c4:aa:fe:b6:cf:
96:8c:27:83:5e:e0:06:d0:2e:fb:cf:17:0f:a5:6f:5b:80:7c:
09:e1:ac:05:e7:8c:9d:ff:85:28:86:a3:56:ae:0f:bd:c3:73:
8f:16:98:7d:8c:b9:1f:6a:f9:ec:8f:90:ef:17:a3:a5:fa:d5:
bb:a6:17:c7:71:2d:27:40:c9:38:5f:b3:cf:1c:a6:17:cb:83:
a9:6b:6e:6c:76:ef:c6:8e:9f:9b:dc:1f:35:8f:36:85:5b:cc:
a3:2a:90:f2:65:f5:0d:d5:c4:c9:ad:36:13:d9:0e:46:79:6d:
dd:1c:58:00:60:65:e6:b6:13:63:2a:ff:d3:78:2a:a1:83:da:
ae:8b:80:b1:e9:a4:9c:08:8f:1f:39:fd:0d:93:33:e8:11:05:
1e:cf:9e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:00 2025 by rpki-client