Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
File: MW9DO7TO3XLYbETthZmQNSK15PE.mft (raw, json)
Hash identifier: ZUOqbLmf6YWLvhc+d/C+7NzfDuJN3zC1sBI6lBitoiA=
Subject key identifier: 2F:B3:C2:25:10:B7:5C:48:76:62:AE:2E:29:FF:3F:03:FA:B2:55:BF
Authority key identifier: 31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1
Certificate issuer: /CN=316f433bb4cedd72d86c44ed8599903522b5e4f1
Certificate serial: 0198917EAFAC8DFB8BA10B4D82F8BC049627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
Manifest number: 1106
Signing time: Sun 10 Aug 2025 01:00:55 +0000
Manifest this update: Sun 10 Aug 2025 01:00:55 +0000
Manifest next update: Mon 11 Aug 2025 01:00:55 +0000
Files and hashes: 1: MW9DO7TO3XLYbETthZmQNSK15PE.crl (hash: TR6Fzb6ezGN3D0DA0H6T7OjEW06OifUsWvYH1xztZks=)
2: ueb8jWjZsgheztsTNqHl1-Lrnro.roa (hash: bi/jdKM4OGa/0sgftxqgBQAErRWTNtYfIJIP4pXeceo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:7e:af:ac:8d:fb:8b:a1:0b:4d:82:f8:bc:04:96:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=316f433bb4cedd72d86c44ed8599903522b5e4f1
Validity
Not Before: Aug 10 01:00:55 2025 GMT
Not After : Aug 11 01:00:55 2025 GMT
Subject: CN=2fb3c22510b75c487662ae2e29ff3f03fab255bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:99:53:a5:f9:14:27:ff:e9:09:44:7a:7c:
a9:f9:01:5e:43:7e:f2:c8:d3:a1:ce:9e:37:c0:41:
67:66:70:b4:0a:bb:70:e3:96:18:6b:79:21:5d:a6:
05:49:51:47:45:f3:2d:20:68:34:de:61:56:48:2a:
de:2c:b3:e3:32:95:95:a5:20:e9:9b:97:20:dc:11:
ce:89:80:24:a4:e1:bf:ee:2e:1b:a1:62:f5:8c:12:
52:b2:b2:50:d5:59:ec:86:dd:82:f0:9e:25:44:58:
b0:11:7d:2b:a2:6c:b0:76:b5:0c:40:80:e2:bc:64:
6f:8c:f5:d6:59:d6:9e:56:86:03:e5:0f:7d:39:d0:
b4:73:e7:80:a0:65:43:44:1c:6c:f2:aa:07:aa:fc:
66:d5:30:8c:33:7e:5c:d7:be:96:00:5f:c1:78:89:
45:f5:f7:92:75:e8:63:a7:2c:87:63:d6:8d:e0:d0:
83:ea:bb:df:16:a1:ec:7b:3d:10:43:cb:bf:ce:7f:
f8:5b:88:14:5f:f3:95:a6:7d:58:b4:71:3f:6e:13:
96:92:00:3a:93:1d:c1:8b:81:88:22:1b:3f:46:45:
47:e8:01:b8:d4:70:95:13:dc:f0:58:cb:fb:b2:68:
45:d5:6c:d3:1a:19:8e:ae:fd:f9:29:bd:3c:5c:00:
d6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B3:C2:25:10:B7:5C:48:76:62:AE:2E:29:FF:3F:03:FA:B2:55:BF
X509v3 Authority Key Identifier:
keyid:31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c8:6d:3b:18:57:fd:70:b1:9d:7d:e1:8f:e5:93:77:bc:e7:
80:2a:f9:b1:e3:2c:cd:99:bd:19:b3:82:8e:2d:71:da:f0:e2:
f8:d9:e5:5a:03:bf:0a:13:21:e1:59:f5:c9:b1:3a:51:e5:8f:
e5:b4:46:48:06:d2:29:4f:c2:86:b5:a4:ba:7c:d4:a3:05:dc:
ad:c9:d1:ae:5e:f7:70:8f:66:90:38:fb:a6:0f:fd:ae:70:3d:
e6:37:2c:7b:d7:ed:93:8e:18:a6:ad:7e:0e:90:5f:a3:af:7c:
5a:e2:b4:e5:f1:97:87:77:6d:f5:c5:aa:69:49:8b:fe:f4:09:
a5:c0:bd:cc:d7:94:39:e3:d5:ce:e9:a5:2a:04:fe:83:a7:44:
65:87:19:7e:f0:0b:76:97:73:e3:95:6b:f5:b2:de:6d:b4:d0:
f3:83:d2:e6:25:c4:2b:ea:a2:b1:32:67:1e:9c:3d:aa:2c:e6:
4c:21:be:73:af:2f:a3:d4:3c:ea:bb:bb:25:49:7c:8f:56:17:
f4:b7:8c:36:b2:0c:d0:75:96:86:88:64:ba:46:db:75:b3:9c:
6d:26:6b:f3:96:4c:45:7c:74:bf:89:3c:f0:63:bb:f4:22:93:
d3:ac:34:fb:e0:fa:b9:1e:35:31:92:a5:7f:c7:3b:9b:0e:09:
59:ba:67:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:46:42 2025 by rpki-client