Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.mft
File: mpVYgYJyucVAD8XaGIE6zOkXWI0.mft (raw, json)
Hash identifier: pH3pyt4b//np0cogklBP/SN8+noDWwLLcWaagIN9S+I=
Subject key identifier: 16:36:95:67:C1:54:83:2D:C3:0F:BE:81:45:F6:7C:34:EC:F2:C2:25
Authority key identifier: 9A:95:58:81:82:72:B9:C5:40:0F:C5:DA:18:81:3A:CC:E9:17:58:8D
Certificate issuer: /CN=9a9558818272b9c5400fc5da18813acce917588d
Certificate serial: 019A4D0724B42204561BA5C53B323A334684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpVYgYJyucVAD8XaGIE6zOkXWI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 04:01:44 +0000
Manifest this update: Tue 04 Nov 2025 04:01:44 +0000
Manifest next update: Wed 05 Nov 2025 04:01:44 +0000
Files and hashes: 1: mpVYgYJyucVAD8XaGIE6zOkXWI0.crl (hash: P9J4SbbZ4tTWZ3nj9OZUIl9M2M53SAXzl3e7Dukk3zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpVYgYJyucVAD8XaGIE6zOkXWI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:24:b4:22:04:56:1b:a5:c5:3b:32:3a:33:46:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a9558818272b9c5400fc5da18813acce917588d
Validity
Not Before: Nov 4 04:01:44 2025 GMT
Not After : Nov 5 04:01:44 2025 GMT
Subject: CN=16369567c154832dc30fbe8145f67c34ecf2c225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:19:85:2f:08:9e:7f:b3:88:0a:f4:c1:d5:8a:
63:92:be:ce:ca:a3:2b:3c:46:5f:22:a9:4c:23:59:
4c:74:24:e7:bc:7e:95:01:8e:50:94:61:ac:c5:75:
c5:f9:ba:81:f4:cb:3d:6f:f0:15:35:af:10:9d:eb:
81:e4:b3:9c:fe:f5:49:b9:f2:09:6c:5e:94:77:13:
7b:86:ba:89:7e:b0:f0:08:a1:4e:6b:1c:e9:e5:47:
28:06:65:04:f7:bb:0b:05:22:b7:52:f5:1e:94:56:
c2:16:f0:cf:4c:0e:9d:33:dd:a9:c5:94:07:eb:46:
69:24:f5:e8:85:c6:ca:dd:0a:7a:5c:bc:6d:56:23:
ac:b7:24:1c:16:cc:ea:98:bb:ec:5e:a9:e1:9b:b5:
40:3e:e2:c0:ab:cd:80:2e:a6:74:34:70:8f:a0:6a:
72:ac:ca:de:99:7e:ea:b5:be:3b:fb:d2:1c:18:88:
0f:45:a1:15:0c:e6:f4:47:a6:2b:8c:e7:36:25:dd:
f4:d4:10:b4:1f:3c:8a:7a:59:1d:d6:2c:71:cd:d2:
2a:ce:be:a3:9e:34:3c:bb:2e:29:cb:0b:a8:3f:8f:
2c:f2:31:3f:05:e0:ed:8a:72:ff:d6:6c:a4:af:ef:
f6:d6:41:1d:15:05:6d:b0:8c:f0:ae:de:9e:26:af:
14:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:36:95:67:C1:54:83:2D:C3:0F:BE:81:45:F6:7C:34:EC:F2:C2:25
X509v3 Authority Key Identifier:
keyid:9A:95:58:81:82:72:B9:C5:40:0F:C5:DA:18:81:3A:CC:E9:17:58:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpVYgYJyucVAD8XaGIE6zOkXWI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/233d82-938e-4f35-aa48-d4e9cf26ee10/1/mpVYgYJyucVAD8XaGIE6zOkXWI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:12:66:68:58:66:2a:da:58:68:a4:2b:0c:17:e2:2d:45:c3:
d0:6d:47:cc:6c:ed:5e:23:e3:8b:03:f4:7b:1c:e4:15:e2:aa:
d0:ce:01:92:be:8e:26:ea:47:97:74:2b:f1:dc:1c:6c:fc:c4:
99:d1:c2:25:ba:8f:31:fa:bf:35:e6:a5:b8:bb:f3:ea:43:42:
a0:01:74:8c:72:92:87:70:8b:f4:5d:d7:22:6b:97:ec:03:ce:
ff:11:7c:a2:68:4c:11:2e:5a:8b:f3:aa:fa:98:d9:7a:d0:d0:
73:fd:df:20:be:31:4e:2b:96:31:1d:ba:96:2c:96:ca:bc:68:
24:ab:32:93:8d:ab:88:42:25:42:8c:60:70:16:f8:c2:56:e9:
2d:83:ac:66:8e:47:f7:94:e3:11:97:f7:6c:fa:79:0b:2b:52:
ad:9d:fd:54:d8:aa:86:5b:82:85:dd:05:c8:a7:13:c5:12:48:
d3:f0:7a:8d:a7:3c:56:73:3c:d0:74:e3:c0:4c:45:b8:f6:ff:
20:01:8f:8f:fb:64:2e:98:f9:80:4f:56:e9:82:e5:49:18:fc:
c2:9e:a8:44:c4:ae:a1:98:95:c1:e8:36:23:20:b5:48:63:68:
74:54:fe:f4:63:85:f9:db:63:f6:6e:c1:76:55:db:23:69:e3:
bb:75:30:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNByS0IgRWG6XFOzI6M0aEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOTU1ODgxODI3MmI5YzU0MDBmYzVkYTE4ODEzYWNjZTkx
NzU4OGQwHhcNMjUxMTA0MDQwMTQ0WhcNMjUxMTA1MDQwMTQ0WjAzMTEwLwYDVQQD
EygxNjM2OTU2N2MxNTQ4MzJkYzMwZmJlODE0NWY2N2MzNGVjZjJjMjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBmFLwief7OICvTB1Ypjkr7OyqMr
PEZfIqlMI1lMdCTnvH6VAY5QlGGsxXXF+bqB9Ms9b/AVNa8QneuB5LOc/vVJufIJ
bF6UdxN7hrqJfrDwCKFOaxzp5UcoBmUE97sLBSK3UvUelFbCFvDPTA6dM92pxZQH
60ZpJPXohcbK3Qp6XLxtViOstyQcFszqmLvsXqnhm7VAPuLAq82ALqZ0NHCPoGpy
rMremX7qtb47+9IcGIgPRaEVDOb0R6YrjOc2Jd301BC0HzyKelkd1ixxzdIqzr6j
njQ8uy4pywuoP48s8jE/BeDtinL/1mykr+/21kEdFQVtsIzwrt6eJq8UnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBY2lWfBVIMtww++gUX2fDTs8sIlMB8GA1UdIwQY
MBaAFJqVWIGCcrnFQA/F2hiBOszpF1iNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXBWWWdZSnl1Y1ZBRDhYYUdJRTZ6T2tYV0kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMzNkODItOTM4ZS00ZjM1LWFhNDgt
ZDRlOWNmMjZlZTEwLzEvbXBWWWdZSnl1Y1ZBRDhYYUdJRTZ6T2tYV0kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8yMzNkODItOTM4ZS00ZjM1LWFhNDgtZDRlOWNmMjZlZTEw
LzEvbXBWWWdZSnl1Y1ZBRDhYYUdJRTZ6T2tYV0kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUhJmaFhm
KtpYaKQrDBfiLUXD0G1HzGztXiPjiwP0exzkFeKq0M4Bkr6OJupHl3Qr8dwcbPzE
mdHCJbqPMfq/NealuLvz6kNCoAF0jHKSh3CL9F3XImuX7APO/xF8omhMES5ai/Oq
+pjZetDQc/3fIL4xTiuWMR26liyWyrxoJKsyk42riEIlQoxgcBb4wlbpLYOsZo5H
95TjEZf3bPp5CytSrZ39VNiqhluChd0FyKcTxRJI0/B6jac8VnM80HTjwExFuPb/
IAGPj/tkLpj5gE9W6YLlSRj8wp6oRMSuoZiVweg2IyC1SGNodFT+9GOF+dtj9m7B
dlXbI2nju3Uwiw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:05 2025 by rpki-client