Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft
File: Mwe9udWFUeFJKsQ6I7m2KWac624.mft (raw, json)
Hash identifier: h6ISv8RcoqyrmPBL9HTaCs8Ma3HxEB+fGFLs/P6M7uA=
Subject key identifier: C4:12:E4:42:4C:23:D2:8F:3B:B6:BE:7B:AB:D7:4B:DC:B6:74:E4:B4
Authority key identifier: 33:07:BD:B9:D5:85:51:E1:49:2A:C4:3A:23:B9:B6:29:66:9C:EB:6E
Certificate issuer: /CN=3307bdb9d58551e1492ac43a23b9b629669ceb6e
Certificate serial: 019A51BE7CBBE932013356763B4B33E8BC42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft
Manifest number: 01EC
Signing time: Wed 05 Nov 2025 02:00:29 +0000
Manifest this update: Wed 05 Nov 2025 02:00:29 +0000
Manifest next update: Thu 06 Nov 2025 02:00:29 +0000
Files and hashes: 1: Mwe9udWFUeFJKsQ6I7m2KWac624.crl (hash: x9kO9vYBKK09VX2hPWlMVmFgT5dUkmYk9fr49IZVzg0=)
2: OQ3xapSQQrV-80ArCY291PiiOQ0.roa (hash: OY/in2kPTUsYYOEPlRa8j7m4biw3RBXISzd1HBiTCII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:7c:bb:e9:32:01:33:56:76:3b:4b:33:e8:bc:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3307bdb9d58551e1492ac43a23b9b629669ceb6e
Validity
Not Before: Nov 5 02:00:29 2025 GMT
Not After : Nov 6 02:00:29 2025 GMT
Subject: CN=c412e4424c23d28f3bb6be7babd74bdcb674e4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:f7:4f:fd:1c:d7:c5:84:9a:c9:a0:a0:5f:
f7:b1:80:2a:57:4a:c0:6c:93:7a:3b:56:8c:ef:2c:
1e:18:4e:6a:92:cb:c9:ff:dc:78:be:e1:01:d0:5d:
40:f4:ac:cc:33:4b:c7:42:3e:06:bc:92:69:1f:d8:
b6:b1:db:3d:96:b3:4b:17:16:a3:f5:e8:b1:2f:5d:
fb:70:af:12:ef:9d:e1:e6:c2:d2:02:f9:bb:aa:29:
b6:c0:8e:aa:c2:02:5c:1b:38:16:49:30:14:30:cd:
60:58:d9:66:2f:c9:a6:ad:80:cd:96:11:6c:96:25:
3a:c6:a6:dd:c9:4c:1c:bb:61:af:1f:96:0c:46:6d:
f0:46:95:b7:bf:66:aa:a7:c2:a5:54:10:b4:9f:09:
02:ca:b2:cf:5c:76:05:7d:0a:8a:52:af:29:68:94:
00:9e:e5:4b:5f:a2:00:29:85:4d:26:52:10:28:c3:
d5:a4:2b:ab:ae:5c:41:57:9f:5c:83:65:e9:d9:d7:
1a:1b:9f:66:a0:6a:8a:51:d6:50:98:1e:1b:3c:82:
2c:ab:aa:14:84:d8:a1:b5:b9:d3:e6:ac:e1:3e:ba:
f2:26:0d:6c:d5:48:7c:69:f0:70:8c:d3:65:62:97:
69:4d:2b:c4:8b:2a:79:70:03:fd:15:b6:65:b3:1c:
fe:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:12:E4:42:4C:23:D2:8F:3B:B6:BE:7B:AB:D7:4B:DC:B6:74:E4:B4
X509v3 Authority Key Identifier:
keyid:33:07:BD:B9:D5:85:51:E1:49:2A:C4:3A:23:B9:B6:29:66:9C:EB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mwe9udWFUeFJKsQ6I7m2KWac624.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/380864-2154-47d9-a8b0-1b1c826e7b8e/1/Mwe9udWFUeFJKsQ6I7m2KWac624.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:bd:0f:b0:73:d4:e7:44:0a:0d:3a:d8:e9:76:86:e7:5d:43:
16:0c:ee:b3:19:6c:42:f0:e2:43:d3:df:c2:93:df:d2:1a:95:
df:bf:3f:be:bf:05:a4:cb:26:d1:ed:b3:c2:60:a8:e9:14:ed:
d3:3e:df:f4:d2:37:d5:ed:47:70:7d:a6:1e:d3:f6:12:8a:1a:
77:41:9d:4e:29:02:7e:a1:3e:42:e5:df:3c:0a:df:60:08:29:
22:11:65:ba:c7:c7:e5:52:72:4f:ab:1b:01:c1:66:69:d4:a8:
2e:c2:15:4e:c4:71:be:45:24:ec:f3:cd:ee:a3:45:8b:57:3a:
02:6e:7c:67:55:48:b7:77:78:65:f7:16:4e:ad:c7:77:7b:b0:
cb:93:bf:36:4d:f7:38:4e:6a:2a:8a:85:b5:53:cd:d0:9e:1d:
fb:20:d9:76:f0:e8:df:f6:b2:ab:bc:35:01:84:c5:5f:09:02:
d3:58:71:5d:e4:ff:4f:cb:39:aa:f7:51:5c:7c:85:d0:e3:2b:
e8:a3:a8:2f:6b:37:10:31:48:ab:d2:e0:67:46:39:f7:a3:11:
a4:b4:6b:76:87:89:b4:09:65:25:61:16:2d:ef:67:aa:f2:32:
2c:41:0b:18:bf:df:c7:d3:55:93:b0:3c:cc:fb:6d:40:fe:95:
bc:5e:bd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:13:44 2025 by rpki-client