Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft
File: MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft (raw, json)
Hash identifier: 71iW7/8S/DfKImRVw8iMqZrrSdNYbJEJ0ayonznGVuo=
Subject key identifier: 47:95:EB:3C:23:7B:10:60:B2:65:71:53:D7:3E:D8:EF:96:57:A1:51
Authority key identifier: 31:6B:3F:33:4E:26:91:10:69:0E:9E:C6:A7:A5:85:DF:E4:FE:87:04
Certificate issuer: /CN=316b3f334e269110690e9ec6a7a585dfe4fe8704
Certificate serial: 019A4F9952C04DDA4E901B43F16100527F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft
Manifest number: 0FBF
Signing time: Tue 04 Nov 2025 16:00:39 +0000
Manifest this update: Tue 04 Nov 2025 16:00:39 +0000
Manifest next update: Wed 05 Nov 2025 16:00:39 +0000
Files and hashes: 1: MWs_M04mkRBpDp7Gp6WF3-T-hwQ.crl (hash: A8smynVKWYT+MiBJ/dT0rbS3Z32+e3NGyG45F+PwjmY=)
2: jlPrG3yw9VWSwdIgD6U56n3FJO4.roa (hash: //BBruzTksW7mSOBdLHpnW4EtV41ZFbnLnxHoJuolZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:52:c0:4d:da:4e:90:1b:43:f1:61:00:52:7f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=316b3f334e269110690e9ec6a7a585dfe4fe8704
Validity
Not Before: Nov 4 16:00:39 2025 GMT
Not After : Nov 5 16:00:39 2025 GMT
Subject: CN=4795eb3c237b1060b2657153d73ed8ef9657a151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:46:7f:79:16:92:eb:8d:b2:c0:e0:8e:77:6f:
1a:5b:55:1e:7b:0f:c1:20:5e:4c:fb:a6:f1:e8:87:
3a:c8:c0:0e:49:94:b6:7a:76:65:0e:c4:81:99:b4:
3f:fa:cc:63:a3:b7:9b:d9:16:11:27:7d:c8:ea:9a:
05:81:63:c1:13:65:9a:69:bb:9e:fe:10:e8:3f:5e:
a0:e2:3b:23:2b:e0:d9:26:2e:55:1f:c5:72:dd:56:
82:07:3f:82:26:3d:ae:6c:8c:49:66:be:29:39:7b:
f4:4d:e7:b8:cd:0e:bf:c5:cb:2d:c4:95:40:9a:87:
4b:44:4a:54:5e:24:be:d4:31:8e:a5:6d:2a:7a:b8:
d1:db:db:36:c1:21:8f:5b:a7:d4:e8:4a:b2:f9:d9:
8f:a8:65:08:f6:de:02:d4:f3:9d:0c:1f:30:9e:b8:
08:29:90:db:7c:27:83:6f:84:d0:f0:69:23:a4:09:
46:5c:65:dd:57:0f:1f:e4:cf:2c:e3:7e:42:e1:e3:
87:16:2d:97:e1:7e:fd:76:a5:28:e4:1d:c4:7d:6e:
1f:e2:8f:aa:cf:7e:8d:6b:8b:b3:0e:95:5c:b4:bb:
92:72:fa:1f:76:33:d6:71:8c:8d:64:56:07:97:ba:
6f:06:34:10:c4:10:ed:b9:44:dc:87:c6:c2:2e:e5:
38:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:95:EB:3C:23:7B:10:60:B2:65:71:53:D7:3E:D8:EF:96:57:A1:51
X509v3 Authority Key Identifier:
keyid:31:6B:3F:33:4E:26:91:10:69:0E:9E:C6:A7:A5:85:DF:E4:FE:87:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5d:7d:89:cd:ef:03:54:ec:3d:ae:61:2d:07:bb:ee:d8:0e:
e3:87:1a:f7:92:4a:c1:6a:f8:f6:4f:3b:49:cc:2c:6e:01:4b:
ea:b4:48:65:87:b4:96:ba:14:25:82:0a:8e:e2:fe:6e:7c:69:
41:61:b2:42:67:65:97:ba:3f:85:cb:89:1a:01:d6:1a:4f:9c:
d8:3d:67:e0:0a:52:f7:11:6c:1d:e6:ed:4c:c3:5e:d7:ae:11:
0a:e1:27:de:a5:51:75:aa:86:b2:e9:d5:34:d4:e9:f7:0d:58:
ab:22:1d:c6:5a:2f:0e:37:4b:ba:58:fc:9c:4c:05:08:d1:18:
c1:f6:17:22:d4:03:e6:3d:6b:3e:29:33:02:11:88:77:e0:77:
d6:9f:a9:7f:f6:f4:72:da:8f:75:84:55:28:a8:03:e1:3e:46:
51:0b:78:6b:78:08:6b:d0:9a:e8:51:b1:80:92:2a:45:82:67:
ea:d9:f6:9b:47:7a:ad:02:6e:c8:1a:a4:f5:7c:65:95:4f:f6:
52:b9:b9:dd:b3:55:5c:34:1f:78:4f:31:bc:e0:a7:30:73:60:
85:46:d7:19:2b:0a:f3:4f:ad:13:9f:ce:96:5c:c2:52:08:ec:
70:de:25:41:a2:34:ac:0d:8f:5a:09:30:3f:bc:08:eb:bd:a4:
66:4a:fc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:50 2025 by rpki-client