Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
File: MWg4BbI9i3h9aSEFPX666XBAihk.mft (raw, json)
Hash identifier: Bgs/zvrVcTmv+pQN9SH+N55sUde4DQO5bzRe6mXH6E4=
Subject key identifier: E3:D1:BB:D4:F8:26:C5:AA:A7:20:FF:D0:B6:D5:05:6E:5C:EE:4F:79
Authority key identifier: 31:68:38:05:B2:3D:8B:78:7D:69:21:05:3D:7E:BA:E9:70:40:8A:19
Certificate issuer: /CN=31683805b23d8b787d6921053d7ebae970408a19
Certificate serial: 0198887B3EE3E136F086620E8CD21AE946DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
Manifest number: 0469
Signing time: Fri 08 Aug 2025 07:00:35 +0000
Manifest this update: Fri 08 Aug 2025 07:00:35 +0000
Manifest next update: Sat 09 Aug 2025 07:00:35 +0000
Files and hashes: 1: MWg4BbI9i3h9aSEFPX666XBAihk.crl (hash: E4U6CVT6td3IA5JzcqRXeW6UtETPGMqlmntZs1cGKD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:7b:3e:e3:e1:36:f0:86:62:0e:8c:d2:1a:e9:46:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31683805b23d8b787d6921053d7ebae970408a19
Validity
Not Before: Aug 8 07:00:35 2025 GMT
Not After : Aug 9 07:00:35 2025 GMT
Subject: CN=e3d1bbd4f826c5aaa720ffd0b6d5056e5cee4f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:88:3e:2f:6c:01:c5:6d:01:27:40:1c:b9:db:
7c:05:04:f6:32:44:3a:e6:4e:55:8a:fb:2c:fa:1b:
a4:cb:e3:fa:53:e9:f2:11:66:df:35:15:09:d4:0f:
24:81:67:3f:59:e5:84:2e:04:cf:34:7e:c4:49:05:
24:4c:5b:48:cd:e5:5a:3a:d1:b3:9f:db:fc:c3:e6:
41:b5:03:24:e8:2f:d4:b7:bb:08:bc:71:80:69:91:
32:9e:92:d7:cb:44:3e:d2:81:54:5b:81:7a:82:46:
3b:75:6d:e4:03:cc:29:0e:f6:99:76:f4:a6:64:84:
42:60:42:f2:94:24:e3:89:b6:6d:44:2d:0f:d3:4d:
03:ed:c9:6a:b5:26:c6:55:31:37:a0:92:a1:21:f2:
64:e2:1b:f2:ae:cc:c6:2a:01:e0:8d:f8:47:8f:9d:
36:93:f6:02:e9:6b:b5:3f:92:e0:f5:15:35:83:7c:
ed:95:32:e6:07:3a:37:d1:3a:cc:a7:6c:fe:d7:f3:
7a:9d:a2:d8:76:c1:2f:89:12:46:e2:02:fe:5c:87:
2b:65:bb:46:9c:c3:a2:c1:d2:a5:fc:05:ed:51:53:
b3:27:d2:77:62:74:db:e1:ea:b2:77:fa:55:f4:12:
b7:c0:c2:3e:e9:1c:a6:9f:98:8e:28:80:f6:da:c3:
09:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D1:BB:D4:F8:26:C5:AA:A7:20:FF:D0:B6:D5:05:6E:5C:EE:4F:79
X509v3 Authority Key Identifier:
keyid:31:68:38:05:B2:3D:8B:78:7D:69:21:05:3D:7E:BA:E9:70:40:8A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0e:a2:fa:2a:59:35:ad:c6:2f:99:72:48:88:a1:92:17:ff:
92:58:c0:d0:1c:a7:ef:c3:43:c5:48:78:3e:6a:9d:e4:a4:c7:
fe:d8:53:c4:b7:43:68:ea:7b:a1:1e:6e:e7:4a:44:5a:f5:b7:
e3:1d:7c:08:ae:c2:77:41:a5:54:a3:1b:55:3d:d1:64:f4:1e:
7b:78:a0:4c:f0:c8:10:81:98:a0:a1:ed:55:ba:51:78:95:51:
04:8a:06:e5:6e:e8:fb:a0:93:05:44:af:f5:26:6a:7a:87:7e:
ff:f0:dd:7d:e3:55:1c:aa:98:0f:af:95:45:93:60:f9:ce:ec:
b6:ba:2b:c8:e6:d8:a7:e6:5e:60:90:b6:9c:27:ed:46:c7:c2:
f9:d7:e1:f4:43:35:eb:ff:a9:ad:11:32:13:18:89:c2:18:5c:
cc:7b:c0:77:c0:e4:bb:3d:76:cf:28:56:1b:5d:f0:99:f2:57:
2b:65:21:d4:f6:bb:ec:cb:ac:8a:4c:bf:d3:95:e6:00:64:76:
5b:c9:6d:96:43:39:6f:e7:db:e3:65:07:8e:b0:67:6f:58:f5:
48:9b:3d:9d:c1:31:f9:01:42:e1:d5:f4:26:7d:8b:49:af:7a:
34:e1:95:ea:3f:09:b3:7e:79:19:ed:53:cb:14:24:ae:2a:0a:
f8:be:63:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:05:37 2025 by rpki-client