Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
File: MIVZam3hzL6mZbRWxNLM0JZJmx8.mft (raw, json)
Hash identifier: f9ks/tcKonLZuWD5ZdYQSVK1lkG2mPCIuFfRme5BSys=
Subject key identifier: 80:51:78:D0:BE:AD:98:72:5C:BF:9F:C8:61:D9:87:6D:16:B5:A7:B5
Authority key identifier: 30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F
Certificate issuer: /CN=3085596a6de1ccbea665b456c4d2ccd096499b1f
Certificate serial: 019A4EF5122865BC83A5570EB467D1FF83AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
Manifest number: 0AF3
Signing time: Tue 04 Nov 2025 13:01:15 +0000
Manifest this update: Tue 04 Nov 2025 13:01:15 +0000
Manifest next update: Wed 05 Nov 2025 13:01:15 +0000
Files and hashes: 1: MIVZam3hzL6mZbRWxNLM0JZJmx8.crl (hash: oLE5vvegCpTxzD4cl+5EFo5N8a+g93hV12/WvdjW3MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:12:28:65:bc:83:a5:57:0e:b4:67:d1:ff:83:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3085596a6de1ccbea665b456c4d2ccd096499b1f
Validity
Not Before: Nov 4 13:01:15 2025 GMT
Not After : Nov 5 13:01:15 2025 GMT
Subject: CN=805178d0bead98725cbf9fc861d9876d16b5a7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:18:33:a3:3b:aa:5c:16:0b:cf:3d:54:23:9f:
ab:e6:53:af:df:1a:b8:54:f2:bb:43:9a:b6:10:92:
2d:96:37:52:b5:12:c4:e9:f0:b8:b4:21:99:f5:52:
d2:6a:48:6e:fd:94:3d:61:23:6b:c9:ed:33:1c:4d:
1e:45:96:bb:c4:66:a7:a9:57:35:f4:95:ec:5a:0a:
34:27:26:fe:13:d1:e2:ae:61:d6:ea:f0:5d:fe:32:
93:5e:c6:f7:b7:75:1e:c3:19:4f:cd:48:35:01:4a:
93:e1:42:68:bc:74:7a:52:66:2e:d9:a1:07:a9:0a:
65:23:58:7b:3f:2b:e4:0f:9f:bd:7e:93:01:0d:b8:
aa:2f:80:86:11:ab:7b:70:07:f8:7b:a6:fe:d5:04:
5f:81:84:53:9e:e7:bf:64:bf:f4:10:01:84:aa:cb:
a2:0b:8a:b7:23:be:f8:61:6e:fc:53:f7:05:32:28:
cf:ba:61:cc:d5:56:b6:e5:48:39:95:88:d8:96:f4:
f9:20:f5:fe:8a:dc:7f:c4:c8:9e:db:d9:5d:18:64:
5f:69:7e:97:c7:5d:c7:aa:04:f5:34:de:92:4b:df:
d5:f5:f0:d3:76:1f:6a:08:d0:27:13:c0:da:e2:96:
2c:a9:b7:bc:fc:be:43:a7:cc:55:59:3c:e9:d4:ab:
2d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:51:78:D0:BE:AD:98:72:5C:BF:9F:C8:61:D9:87:6D:16:B5:A7:B5
X509v3 Authority Key Identifier:
keyid:30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:10:1c:2f:05:3c:b4:4a:f6:5c:ef:28:6f:70:35:96:b1:69:
f9:6a:8c:47:c0:a0:6a:b7:6b:2a:80:13:2c:fd:ff:9c:2e:57:
b4:6a:c1:46:dd:6f:ac:1f:70:01:4b:31:b8:4c:c6:1e:04:ec:
73:04:98:ba:e7:0e:0a:c6:ff:e3:5b:89:be:f6:b6:11:f9:c5:
b1:e4:a7:a2:0a:17:42:1d:d6:32:f3:82:a5:d1:ff:4c:79:70:
84:4d:8d:b8:de:98:6c:30:27:20:a7:e0:b7:e0:83:7e:b8:59:
53:0c:90:50:e5:f6:d1:07:e8:0b:8c:b4:75:a9:8f:04:a5:b7:
c7:78:c4:1f:1d:86:8d:d0:39:1c:60:04:05:29:54:b1:6c:fc:
af:79:ba:9f:ee:0e:c5:54:01:76:ae:73:1d:f4:56:80:21:4f:
aa:3a:f3:ac:27:75:43:8a:21:6a:7a:26:5a:5b:63:e0:d9:24:
12:7c:53:d9:c8:e0:85:5b:c8:2e:a9:95:7e:f6:eb:d1:59:d3:
6d:db:ca:a3:10:be:2a:28:2f:37:d4:40:b1:1e:b0:6c:b0:c4:
d5:4a:30:d9:fc:e2:be:3b:2f:ba:72:d2:a6:2b:2b:7d:d7:98:
a1:24:25:b3:14:f0:19:b3:df:62:30:29:aa:88:ca:69:a4:77:
24:17:2a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:17 2025 by rpki-client