Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.mft
File: mvVxMWwmKI4O1BawE3ofZIp9IAI.mft (raw, json)
Hash identifier: PmuFdweOgwZltjraScRGzj5R+NqB9t/0daMEzO2yqNM=
Subject key identifier: 90:56:F6:B5:71:2B:8C:3B:23:F5:1F:31:E6:2B:F4:73:96:B2:78:CE
Authority key identifier: 9A:F5:71:31:6C:26:28:8E:0E:D4:16:B0:13:7A:1F:64:8A:7D:20:02
Certificate issuer: /CN=9af571316c26288e0ed416b0137a1f648a7d2002
Certificate serial: 01988EED4B3A50785B41EA919928642365C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvVxMWwmKI4O1BawE3ofZIp9IAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.mft
Manifest number: 0166
Signing time: Sat 09 Aug 2025 13:02:52 +0000
Manifest this update: Sat 09 Aug 2025 13:02:52 +0000
Manifest next update: Sun 10 Aug 2025 13:02:52 +0000
Files and hashes: 1: mvVxMWwmKI4O1BawE3ofZIp9IAI.crl (hash: yaqiSLhQJ59zYilVeWFfl9K08nyPIrETCL7rUAn0AZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mvVxMWwmKI4O1BawE3ofZIp9IAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ed:4b:3a:50:78:5b:41:ea:91:99:28:64:23:65:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af571316c26288e0ed416b0137a1f648a7d2002
Validity
Not Before: Aug 9 13:02:52 2025 GMT
Not After : Aug 10 13:02:52 2025 GMT
Subject: CN=9056f6b5712b8c3b23f51f31e62bf47396b278ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6b:3b:91:4b:25:65:4c:bf:70:a1:40:08:ce:
c8:06:40:69:fb:41:87:a7:71:28:5b:d2:45:68:08:
1f:76:22:00:fe:6c:61:f0:7c:24:63:55:10:ee:e4:
62:2d:1f:7e:4e:b0:7b:30:b8:62:9a:72:01:1b:06:
fe:85:1b:3f:30:af:e7:45:cc:38:30:ec:03:35:85:
20:09:27:34:e4:90:42:66:5f:29:9e:e7:c8:06:02:
c1:d4:59:29:c8:96:27:8b:19:6c:aa:8b:2e:4d:4f:
70:cf:71:42:c8:24:37:b4:b2:38:85:11:b5:eb:0a:
7f:c6:fa:1a:8a:50:47:8e:24:57:99:b1:5c:91:1f:
4f:76:f4:48:0f:0e:7f:e8:14:d8:10:b5:99:7d:d1:
0b:92:22:bd:aa:21:69:c1:ec:5a:81:89:7b:f5:32:
5c:0b:89:36:0c:b0:84:f1:b2:cc:56:71:cc:a3:9e:
d5:5b:bf:5d:e1:1b:5c:7b:27:4d:a2:8c:8a:88:f4:
38:b5:d0:6f:9a:1a:93:1c:73:e9:48:c8:d6:61:49:
cc:b2:dc:c3:02:cb:31:08:06:fd:9f:dd:92:af:a4:
97:31:5b:33:0c:3f:b7:a4:a9:a2:e1:8f:07:5e:76:
a5:87:48:47:78:14:cd:de:32:2f:87:76:9c:f4:b9:
2a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:56:F6:B5:71:2B:8C:3B:23:F5:1F:31:E6:2B:F4:73:96:B2:78:CE
X509v3 Authority Key Identifier:
keyid:9A:F5:71:31:6C:26:28:8E:0E:D4:16:B0:13:7A:1F:64:8A:7D:20:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvVxMWwmKI4O1BawE3ofZIp9IAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/257008-da5b-4081-aaf7-403366984c5a/1/mvVxMWwmKI4O1BawE3ofZIp9IAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:0e:82:82:f8:4d:da:7b:79:98:6f:7b:ee:98:c4:03:23:9d:
af:bb:a9:7c:fd:49:4c:04:4c:d2:dd:3c:c1:ee:bb:ba:2d:14:
1e:ae:8f:fa:80:38:f0:42:d0:2d:2b:2b:f2:ac:df:82:7c:67:
3d:1b:eb:9d:01:11:4f:6b:00:a8:73:1b:32:dd:0f:ac:51:f6:
65:16:7d:c1:2f:d2:40:53:80:7d:47:4d:45:9d:43:ff:6b:ee:
d3:68:bd:16:0b:3b:21:db:40:43:ae:9e:5a:9c:1a:73:3f:32:
71:5c:38:3b:4f:30:a4:98:b2:50:19:dc:35:5c:94:f6:aa:3b:
0c:b4:06:36:23:a1:6d:f8:ec:6e:29:ab:6d:57:22:00:2d:d0:
c0:3b:a5:2f:81:02:f7:f4:89:ab:d5:2e:f3:73:e6:16:a2:60:
c4:03:54:dc:69:a6:f7:be:97:e0:e6:3d:9d:6f:ff:c9:c0:f6:
47:24:7f:a1:54:78:93:36:1d:d5:60:6e:b6:4e:c4:75:b2:0d:
39:31:d9:19:e9:99:59:97:c7:37:c6:38:5f:c1:5b:5d:3e:17:
4d:64:03:ec:d1:aa:19:57:1f:06:a4:86:03:70:24:c7:84:07:
79:bd:6c:8a:fb:6e:8a:5d:fc:8d:02:83:31:26:fa:ed:52:ba:
e1:2a:d1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:48:32 2025 by rpki-client