Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
File: MvrPXQJzAmjTsedslrD4WI2Zi08.mft (raw, json)
Hash identifier: oDCIs3m27PoOJvEF0R4SoqihYXvhTGPVgBcZXG8UK7M=
Subject key identifier: 04:8C:6F:D3:7E:A7:EF:1C:48:AA:98:DC:F1:2E:13:C5:A4:32:3F:CF
Authority key identifier: 32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
Certificate issuer: /CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Certificate serial: 019A4F2B49019B4AF286D56ED0C9217CA282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
Manifest number: 145C
Signing time: Tue 04 Nov 2025 14:00:28 +0000
Manifest this update: Tue 04 Nov 2025 14:00:28 +0000
Manifest next update: Wed 05 Nov 2025 14:00:28 +0000
Files and hashes: 1: MvrPXQJzAmjTsedslrD4WI2Zi08.crl (hash: gpVO5gKHSpqqWqguIohVMzlzvJcPBcDXxAB0VTDgqKM=)
2: kZhmU11AcLMU9j0H5R4zLY4tMkU.roa (hash: 4zjf1YfmBA/3a2ksRPti6rOa+1AdjV5zlhfDUSPHUS4=)
3: macgBtbCg5Mxhslrz0OHJiQKlew.roa (hash: GBS8E51Gp7YKQrT0Z2MAz5xnX4MGpebSlxO7yoAgVFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:49:01:9b:4a:f2:86:d5:6e:d0:c9:21:7c:a2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Validity
Not Before: Nov 4 14:00:28 2025 GMT
Not After : Nov 5 14:00:28 2025 GMT
Subject: CN=048c6fd37ea7ef1c48aa98dcf12e13c5a4323fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:79:6f:b3:b3:2b:06:31:e6:ab:0a:4a:e3:ae:
10:13:2c:d3:9b:80:24:75:ba:a4:63:f8:30:64:64:
be:e0:68:9b:ba:40:e7:ce:9a:b2:d1:c1:40:86:b6:
c6:7f:ce:9a:af:2c:bc:f5:43:7c:0c:c3:e6:79:79:
d6:28:35:02:fd:91:88:35:d3:c5:8d:c5:d4:49:68:
84:6e:cc:6c:81:50:a5:58:23:33:d9:ea:82:cd:4c:
3a:b4:57:f8:18:bd:04:6a:6d:55:66:1a:42:72:48:
f5:8e:14:ac:1b:67:ac:82:28:1e:dc:7e:57:85:ae:
26:26:84:92:96:e9:b3:93:87:0f:d6:1a:a8:d9:7c:
f7:26:68:dc:a4:d1:e1:97:47:b2:75:e8:84:e9:f0:
26:21:47:d9:69:d5:4b:b3:9a:ab:f6:3b:e1:8f:16:
b0:e2:6a:38:68:cb:68:c1:a5:81:d6:0d:e4:d2:bc:
ed:c8:f8:6c:ab:02:fc:e0:55:2a:5d:e9:e0:67:f0:
34:3b:fb:c2:a6:23:d9:ec:67:26:40:db:de:fd:31:
54:23:cf:90:be:27:d3:c7:64:0d:f1:0a:8f:25:d0:
6d:93:36:f9:4d:03:b2:60:42:69:62:12:aa:77:ec:
3b:04:4f:33:f1:25:f8:34:ef:c8:24:4b:2c:b1:22:
fe:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8C:6F:D3:7E:A7:EF:1C:48:AA:98:DC:F1:2E:13:C5:A4:32:3F:CF
X509v3 Authority Key Identifier:
keyid:32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:cf:a9:ea:f9:22:74:03:77:90:af:6c:fd:fc:7c:ba:74:96:
7a:5c:9e:56:28:11:87:57:e2:42:50:63:83:be:d1:f6:ac:2f:
e1:8f:e4:80:33:1d:82:dd:8e:17:7a:19:a4:37:c8:7e:16:24:
07:13:9b:4a:99:9d:52:18:9f:c2:95:af:b5:01:2e:6e:11:32:
e8:8f:12:41:c1:22:81:c3:35:f4:1b:27:e8:a7:0f:41:b2:8f:
d4:d2:a9:91:5e:55:42:46:bf:9d:07:46:40:62:9d:72:02:b5:
16:44:c2:06:ce:fd:0b:e5:66:0f:25:40:5c:0a:01:f1:84:13:
49:1b:4d:d4:dc:ca:5f:60:f4:77:db:b4:5c:83:ed:d3:ec:2b:
d2:55:5b:fe:6f:21:cd:84:01:ba:3b:e0:41:e3:7a:61:6e:9b:
fc:d9:ce:0f:05:fd:26:62:e7:15:c0:14:82:a7:e6:e5:6d:b3:
59:f8:29:d8:cd:72:a9:85:bb:d0:76:39:72:11:30:48:62:22:
c2:c1:ab:3e:34:bf:f9:0c:fa:32:fc:02:f0:41:e5:0a:0d:49:
38:29:2d:ea:54:a4:34:3a:30:d7:db:85:32:6d:d3:b4:0e:3b:
74:77:17:94:01:44:06:b9:82:ac:59:ad:4a:dd:c9:6b:b4:6e:
f2:5c:ef:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:29:06 2025 by rpki-client