Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
File: mowynYdjwp8pkxq7uBlfl1A4KYs.mft (raw, json)
Hash identifier: 3bTX9SbVHh1Tm2cUcF0W1f7hXBWBqwqnQMMl4jBv77s=
Subject key identifier: B4:99:45:66:A1:4A:B2:7F:DE:F0:75:82:81:EC:77:EE:FB:9F:AD:2E
Authority key identifier: 9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B
Certificate issuer: /CN=9a8c329d8763c29f29931abbb8195f975038298b
Certificate serial: 019A4DE1AD8A0CCA14D038C58EBCDA4E9CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
Manifest number: 0404
Signing time: Tue 04 Nov 2025 08:00:26 +0000
Manifest this update: Tue 04 Nov 2025 08:00:26 +0000
Manifest next update: Wed 05 Nov 2025 08:00:26 +0000
Files and hashes: 1: FDxX9SBwi6ZE3MJeOvg7kb7kK38.roa (hash: bwymb63cONmt/c+6ZDVkw7Ek8DpIFx336RD8V0Gt1oQ=)
2: mowynYdjwp8pkxq7uBlfl1A4KYs.crl (hash: t2pCPh6wjczdj0vWIZtmygkOW4flJ5ZGhJneebaGrWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:ad:8a:0c:ca:14:d0:38:c5:8e:bc:da:4e:9c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8c329d8763c29f29931abbb8195f975038298b
Validity
Not Before: Nov 4 08:00:26 2025 GMT
Not After : Nov 5 08:00:26 2025 GMT
Subject: CN=b4994566a14ab27fdef0758281ec77eefb9fad2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dc:e3:9e:61:e6:c2:8c:ff:10:30:6c:df:76:
2b:7e:b5:a3:7e:3c:21:70:45:a9:fa:1f:f6:56:8d:
45:09:62:4a:59:9a:0b:43:64:91:91:2f:1d:18:6c:
80:da:2e:16:49:23:27:53:ed:0c:91:4a:d0:35:93:
ce:78:87:5f:8b:ea:df:49:f2:ea:61:27:cc:dd:ab:
ca:40:4d:ec:f5:41:f4:85:29:af:5d:b0:75:43:1c:
fc:b7:e1:ad:50:d5:a0:6b:92:e0:60:a3:8f:1a:ef:
df:7a:91:f7:75:35:c7:39:7b:98:1d:52:17:cd:01:
89:64:64:dd:a3:21:57:0c:bb:1c:4a:75:2d:d0:63:
7b:1e:52:0a:c0:57:74:85:13:b7:0a:cd:a1:67:3b:
b7:3e:7a:2e:56:e4:86:04:f4:04:01:93:6e:31:3a:
50:c0:25:ea:bf:46:32:39:d5:f6:aa:d2:60:1a:bb:
58:91:1b:b8:a5:11:0b:b4:6d:e0:97:c5:42:f6:61:
4f:65:38:50:14:d6:db:0c:f8:f7:3b:fc:8f:ea:c5:
be:96:dc:88:b3:ac:1e:5a:7e:c3:76:e4:57:90:94:
1a:06:c8:20:93:08:a6:05:c5:a7:62:a9:09:e9:1b:
0f:fe:30:66:4a:22:48:3e:8c:4e:c7:9e:ae:5f:89:
80:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:99:45:66:A1:4A:B2:7F:DE:F0:75:82:81:EC:77:EE:FB:9F:AD:2E
X509v3 Authority Key Identifier:
keyid:9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ca:78:43:fe:17:c2:96:ea:69:2d:26:5b:77:99:9a:1f:e2:
30:cd:27:48:0a:c9:2a:f7:fd:31:c4:0f:20:96:63:f2:05:0b:
ce:7e:2b:77:09:04:86:ba:b8:cf:ac:ce:25:71:2c:cd:69:8b:
a3:8a:01:32:90:4c:f9:77:6d:05:fc:f4:e0:75:13:14:71:c6:
b4:43:6a:d8:2f:3c:29:ee:12:50:c4:53:f3:59:6b:6a:9a:6f:
14:78:2c:ac:27:af:cf:1b:be:ce:c2:8e:cd:d8:36:5b:c1:c2:
f4:3c:ca:41:a6:1e:e4:7d:cf:ba:2e:3d:7e:ec:86:d7:5d:54:
bc:ff:4a:a0:c4:e4:85:f7:5f:cf:30:6a:cc:84:4a:6f:cd:5e:
d4:64:d2:35:14:04:89:6d:c0:29:c7:53:c7:00:fb:67:8b:b3:
ba:6d:b8:25:5e:11:8a:6a:48:f5:bb:15:76:55:49:17:92:dc:
55:09:13:6a:78:48:e0:ee:f5:a7:ba:fe:00:4e:9a:06:2e:60:
c4:c1:7e:38:80:fd:f1:f1:59:1a:80:23:01:31:12:4c:b6:dd:
e6:75:d3:ba:2c:7d:55:a2:a5:93:ad:d0:70:b8:74:aa:05:00:
c0:d8:eb:e6:62:59:2f:37:e3:88:c3:87:fa:0f:6a:e6:28:44:
2e:35:f2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:28:20 2025 by rpki-client