Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.mft
File: mvVxMWwmKI4O1BawE3ofZIp9IAI.mft (raw, json)
Hash identifier: nYVnegQZ7WuIdMIPmcEGhMCGTEbj2+6MtqVelLCu/cQ=
Subject key identifier: 81:DE:96:62:4B:27:5A:AF:37:83:82:29:FD:0B:8A:D4:3B:18:BB:03
Authority key identifier: 9A:F5:71:31:6C:26:28:8E:0E:D4:16:B0:13:7A:1F:64:8A:7D:20:02
Certificate issuer: /CN=9af571316c26288e0ed416b0137a1f648a7d2002
Certificate serial: 019A71B76E97D670B69066B5E9646EF7B93F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvVxMWwmKI4O1BawE3ofZIp9IAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.mft
Manifest number: 0260
Signing time: Tue 11 Nov 2025 07:00:37 +0000
Manifest this update: Tue 11 Nov 2025 07:00:37 +0000
Manifest next update: Wed 12 Nov 2025 07:00:37 +0000
Files and hashes: 1: mvVxMWwmKI4O1BawE3ofZIp9IAI.crl (hash: A6sr1QzrQEpKpM9gEaJf4K4fUI5eiTydotwVk81fpA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mvVxMWwmKI4O1BawE3ofZIp9IAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:6e:97:d6:70:b6:90:66:b5:e9:64:6e:f7:b9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af571316c26288e0ed416b0137a1f648a7d2002
Validity
Not Before: Nov 11 07:00:37 2025 GMT
Not After : Nov 12 07:00:37 2025 GMT
Subject: CN=81de96624b275aaf37838229fd0b8ad43b18bb03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:32:f6:62:83:14:eb:4d:29:24:69:97:fa:f0:
87:77:86:bd:f9:4f:6c:60:cb:2d:95:78:8b:aa:ba:
38:0e:9f:82:c1:b2:e8:cf:d2:f3:fb:d6:bc:c7:2b:
55:f9:8b:66:10:6b:80:59:00:ef:9b:1e:e5:eb:47:
be:2f:bc:db:10:d8:36:01:66:e2:7b:c4:6f:97:a7:
45:5d:40:39:24:3c:bf:13:b0:d0:71:50:ba:78:9b:
77:26:c8:57:a0:1a:bc:ca:43:99:f0:a4:75:dd:30:
ac:ab:49:f1:e5:cd:2d:6a:b7:bf:c8:a2:95:35:26:
9b:ff:c3:53:70:1d:f5:96:fb:2f:a8:44:fe:eb:20:
4f:cf:a0:94:5f:ec:89:02:b7:ed:46:d6:0b:a9:12:
8f:28:93:07:dc:17:ea:65:e9:00:c3:43:8a:f2:03:
3b:78:b1:db:0a:d1:e4:2a:48:11:cd:29:c1:8f:a7:
1d:2b:18:73:51:a7:ec:9e:70:52:93:cf:30:cc:3c:
ee:50:66:d6:12:99:04:6b:0a:4b:d0:93:2e:06:16:
86:51:c2:d8:ec:ea:a6:5c:69:e0:0e:7f:47:8b:52:
d7:a3:cc:b8:74:0c:c9:42:cd:f1:71:ef:58:7d:8c:
c9:65:1d:3a:af:37:f9:85:48:55:c1:cc:9b:46:6e:
95:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DE:96:62:4B:27:5A:AF:37:83:82:29:FD:0B:8A:D4:3B:18:BB:03
X509v3 Authority Key Identifier:
keyid:9A:F5:71:31:6C:26:28:8E:0E:D4:16:B0:13:7A:1F:64:8A:7D:20:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvVxMWwmKI4O1BawE3ofZIp9IAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:33:de:8d:e3:d8:c2:f0:c1:3f:83:9f:20:c2:54:4a:9e:cc:
9d:7d:a0:ac:6b:99:0b:b5:66:e0:db:32:2b:e7:26:8d:1c:5b:
02:85:e0:4e:de:0a:1d:6c:8d:af:fb:f9:c3:bb:be:f3:ad:70:
2a:60:8d:62:29:de:0e:e2:c9:38:fe:86:4c:6f:20:98:92:2b:
74:99:ad:2c:ac:0d:20:94:16:40:68:a3:ab:e9:f1:55:eb:9e:
79:11:43:21:11:86:d2:78:c6:65:b8:38:67:d4:09:a5:c6:07:
98:2b:5f:7d:75:ec:d0:6c:9d:53:f8:9a:04:59:f7:0a:e0:3b:
e2:16:ba:e8:f2:32:7b:47:a7:f6:ea:73:a5:da:10:33:ef:a2:
d2:92:3d:6d:53:6c:04:95:56:7f:04:3e:29:59:39:8c:55:d8:
37:79:be:d7:29:bc:5a:58:a5:1d:01:2c:ba:53:95:dc:84:90:
00:59:72:4e:d0:fd:d9:5a:b3:f4:47:55:be:e8:3d:fa:12:18:
40:25:08:3b:a5:70:c2:b9:37:c7:9d:cd:65:65:3d:d2:e5:f5:
56:3a:37:87:9f:4f:8d:ac:50:9f:bc:42:5a:1c:d7:b6:7c:83:
45:1e:0a:e0:ff:b7:68:27:b7:14:23:46:11:ac:92:c9:18:2f:
2c:73:d7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:09 2025 by rpki-client