Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
File: MWg4BbI9i3h9aSEFPX666XBAihk.mft (raw, json)
Hash identifier: 7gDL29TtiCQtdmrxCwIKGrZR9Hmr4dvjhxtP0TWYdjs=
Subject key identifier: 73:F5:F8:FF:96:F9:72:64:68:DB:EA:92:CA:22:3F:3D:31:B4:EB:E1
Authority key identifier: 31:68:38:05:B2:3D:8B:78:7D:69:21:05:3D:7E:BA:E9:70:40:8A:19
Certificate issuer: /CN=31683805b23d8b787d6921053d7ebae970408a19
Certificate serial: 019A4E4FABBAC8D70DB48C461DA8233EC3F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
Manifest number: 0554
Signing time: Tue 04 Nov 2025 10:00:35 +0000
Manifest this update: Tue 04 Nov 2025 10:00:35 +0000
Manifest next update: Wed 05 Nov 2025 10:00:35 +0000
Files and hashes: 1: MWg4BbI9i3h9aSEFPX666XBAihk.crl (hash: S8ZKgthDZ/LQ1nTIludoHC05EYrW2HjA5ORxx1dFNoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:ab:ba:c8:d7:0d:b4:8c:46:1d:a8:23:3e:c3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31683805b23d8b787d6921053d7ebae970408a19
Validity
Not Before: Nov 4 10:00:35 2025 GMT
Not After : Nov 5 10:00:35 2025 GMT
Subject: CN=73f5f8ff96f9726468dbea92ca223f3d31b4ebe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:fc:dd:f5:e1:d8:da:32:d9:dc:00:5a:69:
f4:62:b4:99:71:c2:e1:ac:dd:e3:00:d6:4a:e0:d9:
fc:a8:60:03:a1:ba:a8:26:e8:62:c6:61:bf:25:80:
b9:1a:b3:8d:73:6f:a6:c7:69:45:a7:ee:cb:97:37:
f8:ba:a7:02:3e:98:23:1d:35:59:fc:fd:b5:51:b3:
23:fe:4c:88:fc:26:bf:6e:a3:2e:a5:33:d9:cb:be:
fc:59:63:5d:cc:a1:27:b7:c4:39:07:31:ee:fb:54:
b5:6d:40:46:e8:91:c2:1c:e2:89:4c:7e:b2:40:30:
85:f6:7f:da:8c:50:44:cc:f1:ce:b8:03:22:ee:7d:
35:fa:91:9f:d1:c1:fe:78:f0:bf:b7:fb:a3:6e:11:
5d:3c:28:ae:45:7c:d8:a6:99:0d:57:72:09:4b:45:
c7:41:95:d0:dd:9b:26:ca:9b:97:53:b2:bf:5f:f9:
fa:53:e1:c0:7d:37:5a:0b:ab:5e:1a:83:f3:6f:6f:
93:c3:cf:e9:e4:b3:a7:45:a4:80:b7:68:f7:d0:85:
32:98:90:34:45:2a:42:a5:0c:e8:8f:ff:52:15:67:
29:2b:d9:d6:34:42:9f:5e:a1:5b:79:c0:bb:a5:16:
98:f1:63:92:24:fa:17:ac:6c:91:20:06:b5:51:ad:
b2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F5:F8:FF:96:F9:72:64:68:DB:EA:92:CA:22:3F:3D:31:B4:EB:E1
X509v3 Authority Key Identifier:
keyid:31:68:38:05:B2:3D:8B:78:7D:69:21:05:3D:7E:BA:E9:70:40:8A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:ac:d7:88:5c:61:ab:1b:e3:25:e2:04:bc:b7:3a:44:3d:17:
24:b8:d5:0e:06:71:0a:5e:ee:81:c7:a6:99:ff:b2:56:65:71:
de:45:19:9b:88:4e:86:2e:8d:db:45:08:8e:65:b0:49:9c:a4:
2a:fd:7a:fe:3c:f2:d9:0b:3a:e8:e2:34:42:a1:9f:e4:f6:75:
2a:90:2d:fd:ac:11:71:b1:79:17:6e:2b:dc:ea:df:e7:c7:7c:
ce:d2:70:ec:e5:33:bd:c4:52:2f:d4:79:05:14:01:4f:69:cf:
3b:6e:ca:ed:39:4d:3f:7a:1a:08:9e:1f:f3:b7:47:0f:98:25:
fe:e5:31:fa:c8:cc:7b:51:32:ea:7e:91:19:57:a1:24:e9:1f:
17:1d:8c:f5:cb:c0:92:3c:9c:f0:be:9d:ce:10:d1:b5:90:41:
89:ee:2a:6d:ac:dc:ac:fb:2d:84:e9:e1:5b:47:9d:b0:33:d3:
db:2d:4c:96:e2:c8:c8:fc:0c:26:1a:a3:cd:91:da:6b:1d:71:
d2:3d:02:32:67:dd:2e:32:7a:6c:22:e5:44:38:17:32:d6:3c:
12:57:58:69:02:7c:9d:8d:fd:d1:a6:d5:f2:1a:e9:d1:93:dd:
75:43:73:c4:d7:82:fc:86:1c:0a:70:2c:a2:ad:38:db:94:a1:
bb:6d:78:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:52:47 2025 by rpki-client