
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
File: MvrPXQJzAmjTsedslrD4WI2Zi08.mft (raw, json)
Hash identifier: KXDB8Gwcmky0Z8zHHLO9BzFnKJMPFYT3HvOTKE7vWXI=
Subject key identifier: 1A:4D:32:EB:F9:2A:96:9A:76:DE:F7:DC:3A:46:45:37:B1:43:10:5E
Authority key identifier: 32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
Certificate issuer: /CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Certificate serial: 0198741952D0EB5CDAD84192DEB034E1DAFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
Manifest number: 1366
Signing time: Mon 04 Aug 2025 08:01:13 +0000
Manifest this update: Mon 04 Aug 2025 08:01:13 +0000
Manifest next update: Tue 05 Aug 2025 08:01:13 +0000
Files and hashes: 1: MvrPXQJzAmjTsedslrD4WI2Zi08.crl (hash: /XWN4a7m6qI1zBZLRt209iyNsBewv+JfHEnGSGW4xds=)
2: kZhmU11AcLMU9j0H5R4zLY4tMkU.roa (hash: 4zjf1YfmBA/3a2ksRPti6rOa+1AdjV5zlhfDUSPHUS4=)
3: macgBtbCg5Mxhslrz0OHJiQKlew.roa (hash: GBS8E51Gp7YKQrT0Z2MAz5xnX4MGpebSlxO7yoAgVFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:52:d0:eb:5c:da:d8:41:92:de:b0:34:e1:da:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Validity
Not Before: Aug 4 08:01:13 2025 GMT
Not After : Aug 5 08:01:13 2025 GMT
Subject: CN=1a4d32ebf92a969a76def7dc3a464537b143105e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:be:f3:2e:46:13:b4:e1:39:3a:52:fc:0c:
12:5c:77:ce:bd:10:19:04:6d:e4:25:66:27:64:1a:
ce:99:4e:52:b7:b1:72:aa:d0:85:ba:ba:42:e1:8d:
41:07:3c:31:15:94:61:22:3f:65:bb:c7:dd:83:af:
41:40:f0:fd:0f:bc:68:7d:07:76:ae:36:87:6e:6b:
80:45:20:5e:82:91:27:48:55:c5:df:21:9a:bf:d4:
b1:e3:2c:ea:58:ec:49:ce:88:e9:ac:bd:e6:ad:05:
3c:3a:28:ac:e7:63:48:a6:cd:bc:c0:df:f6:12:3b:
8f:b2:9a:30:06:c8:cb:b1:90:65:43:f1:26:ef:fb:
62:6c:2f:0b:f6:00:34:84:51:96:d5:64:e6:b6:9b:
d3:c8:11:37:14:50:b1:b3:20:f0:f3:23:a2:dd:8d:
bf:b7:c1:da:8d:ab:23:38:a6:83:cb:e0:30:9e:48:
50:79:64:77:35:99:6e:e2:46:0a:fe:d4:21:23:53:
e6:f7:d0:70:f7:f0:ed:8f:3a:41:47:ea:40:91:cf:
c9:49:e8:7a:fc:b8:23:d0:f5:22:9d:50:88:0d:97:
27:af:ee:95:19:34:ef:35:ef:4c:c8:7b:6d:b5:c5:
08:5f:af:60:5f:ac:1b:56:71:1a:64:c5:8d:bd:53:
8d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4D:32:EB:F9:2A:96:9A:76:DE:F7:DC:3A:46:45:37:B1:43:10:5E
X509v3 Authority Key Identifier:
keyid:32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:57:4c:7b:86:b9:b2:16:5f:7c:e2:78:c4:6a:4e:23:fa:bf:
d6:47:39:fc:7d:9b:21:05:b6:f0:78:48:64:31:c7:41:63:5d:
b3:56:85:49:a3:c3:04:24:4d:5f:da:02:a6:a6:4d:f3:86:c8:
53:75:2b:e5:68:50:d8:f9:83:fd:a1:5f:e3:b1:62:fc:ca:9a:
e4:05:57:1f:00:d9:84:01:77:30:cf:da:74:f0:1d:75:4c:5b:
06:1a:cf:9f:aa:6a:d5:49:77:7c:7c:ba:b2:ac:72:25:c1:0a:
33:0e:1c:03:e0:8a:7c:d6:23:14:89:e9:95:47:76:d3:34:8e:
d9:e7:70:d4:c4:a1:1b:6c:80:cf:4d:17:dd:de:71:d6:93:65:
50:68:0a:f5:8e:84:05:27:b8:04:18:f2:03:2c:6b:37:1c:c5:
61:4a:80:d7:f2:0d:45:b3:cb:9c:af:d6:d8:2d:91:35:fe:3a:
4b:65:01:af:71:55:84:e6:77:a7:e4:eb:cc:50:df:46:e4:ef:
95:be:9e:ab:2d:12:2d:7f:55:bb:a3:7e:95:87:f2:b0:8b:15:
21:4c:64:ad:b1:58:6e:ca:85:64:2c:33:a9:43:1c:5a:65:a4:
56:4b:6c:9e:3c:c2:c4:99:fe:20:6e:0a:0b:9c:8b:dc:f1:2a:
2d:24:15:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GVLQ61za2EGS3rA04dr7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZmFjZjVkMDI3MzAyNjhkM2IxZTc2Yzk2YjBmODU4OGQ5
OThiNGYwHhcNMjUwODA0MDgwMTEzWhcNMjUwODA1MDgwMTEzWjAzMTEwLwYDVQQD
EygxYTRkMzJlYmY5MmE5NjlhNzZkZWY3ZGMzYTQ2NDUzN2IxNDMxMDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+K+8y5GE7ThOTpS/AwSXHfOvRAZ
BG3kJWYnZBrOmU5St7FyqtCFurpC4Y1BBzwxFZRhIj9lu8fdg69BQPD9D7xofQd2
rjaHbmuARSBegpEnSFXF3yGav9Sx4yzqWOxJzojprL3mrQU8Oiis52NIps28wN/2
EjuPspowBsjLsZBlQ/Em7/tibC8L9gA0hFGW1WTmtpvTyBE3FFCxsyDw8yOi3Y2/
t8HajasjOKaDy+AwnkhQeWR3NZlu4kYK/tQhI1Pm99Bw9/DtjzpBR+pAkc/JSeh6
/Lgj0PUinVCIDZcnr+6VGTTvNe9MyHtttcUIX69gX6wbVnEaZMWNvVONQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpNMuv5Kpaadt733DpGRTexQxBeMB8GA1UdIwQY
MBaAFDL6z10CcwJo07HnbJaw+FiNmYtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXZyUFhRSnpBbWpUc2Vkc2xyRDRXSTJaaTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hNGNiOTUtOTEyNy00ODY5LThmOTAt
OWU0ZTQ2ZjYwYTY4LzEvTXZyUFhRSnpBbWpUc2Vkc2xyRDRXSTJaaTA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9hNGNiOTUtOTEyNy00ODY5LThmOTAtOWU0ZTQ2ZjYwYTY4
LzEvTXZyUFhRSnpBbWpUc2Vkc2xyRDRXSTJaaTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe1dMe4a5
shZffOJ4xGpOI/q/1kc5/H2bIQW28HhIZDHHQWNds1aFSaPDBCRNX9oCpqZN84bI
U3Ur5WhQ2PmD/aFf47Fi/Mqa5AVXHwDZhAF3MM/adPAddUxbBhrPn6pq1Ul3fHy6
sqxyJcEKMw4cA+CKfNYjFInplUd20zSO2edw1MShG2yAz00X3d5x1pNlUGgK9Y6E
BSe4BBjyAyxrNxzFYUqA1/INRbPLnK/W2C2RNf46S2UBr3FVhOZ3p+TrzFDfRuTv
lb6eqy0SLX9Vu6N+lYfysIsVIUxkrbFYbsqFZCwzqUMcWmWkVktsnjzCxJn+IG4K
C5yL3PEqLSQVug==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:16 2025 by rpki-client