Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
File: r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft (raw, json)
Hash identifier: zgNZKfHleyPQiWtiWgkNeY+9rSQg34cw2/sXQoaWumk=
Subject key identifier: A5:D9:F2:80:E1:29:74:5F:C8:FB:94:A5:FB:9A:30:95:17:19:BB:33
Authority key identifier: AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D
Certificate issuer: /CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d
Certificate serial: 019A4F6299A6D4B49616862C0B08865FEE7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
Manifest number: 0818
Signing time: Tue 04 Nov 2025 15:00:53 +0000
Manifest this update: Tue 04 Nov 2025 15:00:53 +0000
Manifest next update: Wed 05 Nov 2025 15:00:53 +0000
Files and hashes: 1: r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl (hash: SgeWvJIesaE+4nWjOafnBL2mufNQQNb4hlkuyi3Nzsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:99:a6:d4:b4:96:16:86:2c:0b:08:86:5f:ee:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d
Validity
Not Before: Nov 4 15:00:53 2025 GMT
Not After : Nov 5 15:00:53 2025 GMT
Subject: CN=a5d9f280e129745fc8fb94a5fb9a30951719bb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1e:32:74:6a:e9:00:bc:bc:d4:1a:a2:72:c9:
35:4a:20:85:fd:2a:9d:50:4c:e0:c5:cf:b8:22:49:
94:c8:76:4e:16:9c:95:3b:1e:e8:e8:81:e1:d9:71:
06:59:53:95:f8:d6:58:90:80:ab:2f:f6:44:72:5b:
f5:a9:ca:bb:ab:b5:9a:2b:04:b8:f4:cc:00:0d:dc:
3d:ed:29:f6:d1:a1:2a:fb:6c:ed:d8:b8:5f:77:f7:
ab:eb:b5:ca:e0:9f:a3:dc:3c:75:3c:a3:ca:44:73:
bc:db:24:fd:c6:76:4a:87:76:3f:fd:5b:b2:16:f2:
ce:3d:59:dc:b2:ca:96:fe:65:94:c1:63:67:27:19:
25:6b:af:a3:09:65:d4:0c:b1:a3:ec:55:38:c2:30:
cb:35:82:a9:3b:32:4e:34:ac:f6:9d:cb:fc:85:e3:
c1:bb:33:da:08:6f:08:f1:9d:bf:33:c1:18:f9:1f:
66:47:6d:3b:dc:bb:bb:18:17:f5:cb:81:12:fa:61:
79:5b:1f:86:8a:f8:c8:8a:86:69:87:59:11:b6:54:
30:05:f5:e7:17:8f:35:b4:f0:65:90:f4:30:f4:2b:
c9:c8:b8:e6:46:2a:5c:77:85:1d:9c:a8:71:b4:76:
d8:ba:a2:f0:4d:c1:80:f7:03:4d:cc:6b:7f:d6:f1:
6c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D9:F2:80:E1:29:74:5F:C8:FB:94:A5:FB:9A:30:95:17:19:BB:33
X509v3 Authority Key Identifier:
keyid:AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b2:c0:8e:c8:a5:7b:18:cc:4e:f2:06:99:22:d6:51:4d:41:
b1:22:d2:7e:e7:00:60:f4:8c:d0:fb:a1:ef:12:a3:1e:4d:7f:
5c:f6:81:a8:43:f6:64:38:c4:2d:1c:a6:3c:02:96:dc:1d:45:
21:84:97:90:be:af:48:a9:dd:f5:2d:57:e4:d3:ec:2d:5e:d1:
87:2e:a9:28:b8:cb:6b:ad:82:86:4f:67:54:cb:30:66:48:5e:
0a:22:d7:e5:f9:1e:f5:3a:a5:e5:40:4d:cc:10:ce:6b:0b:a2:
af:dd:a7:38:7e:9d:94:6f:e0:8e:ec:d9:fb:a4:c2:d2:82:16:
d4:a4:94:17:c7:30:83:b3:db:a3:90:24:d7:80:07:94:37:44:
3e:85:6a:75:3f:2d:1d:61:59:9f:3e:8a:36:de:5a:ed:2d:f7:
ea:45:1e:e2:95:a1:79:3b:0b:5e:c2:c2:8b:b8:08:be:0d:a7:
23:e1:fb:dd:9c:15:14:40:72:0b:ed:cd:44:9e:60:e7:6b:dc:
d0:fa:4e:1d:2e:b7:ce:00:bb:4f:c7:1b:63:03:ee:d2:46:40:
36:6f:d5:bd:ac:6d:97:2a:95:77:8b:30:d3:46:52:77:f3:e8:
51:07:ca:77:57:40:6e:f7:57:7f:1d:35:38:2d:46:3c:9b:f4:
5c:58:d8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:26:01 2025 by rpki-client