Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.mft
File: MW2V2INsHxFqce4h3sD_Zx4eBw0.mft (raw, json)
Hash identifier: k+2IHGfp3LAXb18cDAxuqi4rt6gGmpvpFSsFL399klo=
Subject key identifier: 6A:D2:D5:A3:0A:D1:2F:02:E8:55:E4:AF:6F:86:5E:97:6D:8C:69:91
Authority key identifier: 31:6D:95:D8:83:6C:1F:11:6A:71:EE:21:DE:C0:FF:67:1E:1E:07:0D
Certificate issuer: /CN=316d95d8836c1f116a71ee21dec0ff671e1e070d
Certificate serial: 019A4E8643D1B0D440AC115A8532A8DE5147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MW2V2INsHxFqce4h3sD_Zx4eBw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.mft
Manifest number: 0DED
Signing time: Tue 04 Nov 2025 11:00:13 +0000
Manifest this update: Tue 04 Nov 2025 11:00:13 +0000
Manifest next update: Wed 05 Nov 2025 11:00:13 +0000
Files and hashes: 1: MW2V2INsHxFqce4h3sD_Zx4eBw0.crl (hash: XrJ5Rt/RvdmCC0xQW9k7Soqzh6DvGhSilcyUP3JL9Bc=)
2: NaSNw-5nplSi1oWgCIXAtq-282g.roa (hash: PHVRipc0hRgzJt/VWrGp9MNvQSbNc+wyfThzb/6H1hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MW2V2INsHxFqce4h3sD_Zx4eBw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:43:d1:b0:d4:40:ac:11:5a:85:32:a8:de:51:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=316d95d8836c1f116a71ee21dec0ff671e1e070d
Validity
Not Before: Nov 4 11:00:13 2025 GMT
Not After : Nov 5 11:00:13 2025 GMT
Subject: CN=6ad2d5a30ad12f02e855e4af6f865e976d8c6991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5d:91:8b:73:9a:c6:ad:91:14:97:df:df:f2:
85:35:df:cd:50:5c:18:6e:14:d6:84:b0:00:40:68:
70:d6:84:0a:46:88:ca:d1:6c:97:97:5c:8b:e9:39:
94:15:53:98:bf:e0:c5:a5:8d:c4:a0:ca:cf:ca:e8:
50:5d:ed:51:30:2c:28:0f:3a:d5:2b:b8:a0:e0:9a:
48:8b:06:61:6d:58:d7:b7:8b:e5:03:e2:e6:25:c5:
b6:09:ac:8b:c0:0e:50:6c:6a:5d:25:85:07:9f:3e:
71:69:a0:70:45:3c:07:20:3f:79:80:e5:f3:ca:37:
57:7b:72:38:6f:62:b8:cc:3d:22:18:cf:80:8c:4f:
81:f5:82:0b:c9:b9:75:93:90:f3:14:13:e0:eb:16:
32:51:3b:99:52:b6:86:f1:f4:9e:55:1f:70:82:d3:
7a:e5:7a:4c:eb:46:e1:35:a2:12:75:af:bd:48:16:
97:74:df:61:53:34:c9:46:a4:22:52:fa:a1:5b:c9:
99:d3:4d:12:6d:fe:0d:75:fd:93:2f:29:e0:16:93:
8b:65:d9:70:24:cd:65:f7:df:8a:2b:c8:79:c7:7b:
c6:34:73:e6:92:de:df:1c:60:bd:94:dc:99:0a:60:
1e:e8:65:63:7c:2c:5c:70:db:34:39:fe:21:9b:15:
8d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D2:D5:A3:0A:D1:2F:02:E8:55:E4:AF:6F:86:5E:97:6D:8C:69:91
X509v3 Authority Key Identifier:
keyid:31:6D:95:D8:83:6C:1F:11:6A:71:EE:21:DE:C0:FF:67:1E:1E:07:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MW2V2INsHxFqce4h3sD_Zx4eBw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:62:0a:5e:30:d3:2c:8e:9b:2b:57:eb:52:af:9f:17:f3:53:
52:d3:06:ee:96:49:2b:b0:40:7d:60:2f:b0:dd:c4:b3:a6:c6:
fe:70:6f:bc:d8:6d:43:49:45:5a:e6:7a:d6:50:b2:a1:78:bf:
ee:d9:de:26:19:5d:8c:45:34:6b:bd:26:38:8d:5c:95:a9:96:
41:52:8d:45:83:d5:ae:d1:e6:8b:1b:21:cd:6c:d9:11:af:57:
ea:1e:de:ed:f0:64:f8:37:f4:66:36:73:39:c3:a3:7f:39:a2:
a3:79:95:b5:1c:59:86:2f:d7:93:02:0e:f7:20:b4:5d:ae:ac:
d2:91:31:07:1b:8e:1e:27:74:b2:22:b8:fc:52:3f:31:a6:11:
49:32:09:c7:4b:d9:bb:e4:03:da:91:af:47:ae:33:03:5b:d5:
64:2a:74:87:86:22:1c:3a:e1:9d:cc:f9:52:1b:5f:b2:5a:85:
5a:10:96:25:a4:b0:c4:12:e0:3a:6d:4a:57:99:7e:d6:32:40:
ab:eb:fa:01:3a:92:6c:a2:e8:0e:a1:0d:71:10:c5:28:d7:57:
02:bf:19:4e:70:08:0b:70:bf:3c:67:f8:95:3f:98:f9:b8:82:
37:bf:5b:75:92:f3:e5:cb:2d:8f:40:f2:ac:5d:04:5a:f4:0a:
98:06:12:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhkPRsNRArBFahTKo3lFHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxNmQ5NWQ4ODM2YzFmMTE2YTcxZWUyMWRlYzBmZjY3MWUx
ZTA3MGQwHhcNMjUxMTA0MTEwMDEzWhcNMjUxMTA1MTEwMDEzWjAzMTEwLwYDVQQD
Eyg2YWQyZDVhMzBhZDEyZjAyZTg1NWU0YWY2Zjg2NWU5NzZkOGM2OTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV2Ri3Oaxq2RFJff3/KFNd/NUFwY
bhTWhLAAQGhw1oQKRojK0WyXl1yL6TmUFVOYv+DFpY3EoMrPyuhQXe1RMCwoDzrV
K7ig4JpIiwZhbVjXt4vlA+LmJcW2CayLwA5QbGpdJYUHnz5xaaBwRTwHID95gOXz
yjdXe3I4b2K4zD0iGM+AjE+B9YILybl1k5DzFBPg6xYyUTuZUraG8fSeVR9wgtN6
5XpM60bhNaISda+9SBaXdN9hUzTJRqQiUvqhW8mZ000Sbf4Ndf2TLyngFpOLZdlw
JM1l99+KK8h5x3vGNHPmkt7fHGC9lNyZCmAe6GVjfCxccNs0Of4hmxWNyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrS1aMK0S8C6FXkr2+GXpdtjGmRMB8GA1UdIwQY
MBaAFDFtldiDbB8RanHuId7A/2ceHgcNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVcyVjJJTnNIeEZxY2U0aDNzRF9aeDRlQncwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82ZDdkNjUtZjIxNS00MmY4LTlhNWEt
MTIzNzIwYmZlNzQ2LzEvTVcyVjJJTnNIeEZxY2U0aDNzRF9aeDRlQncwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC82ZDdkNjUtZjIxNS00MmY4LTlhNWEtMTIzNzIwYmZlNzQ2
LzEvTVcyVjJJTnNIeEZxY2U0aDNzRF9aeDRlQncwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0GIKXjDT
LI6bK1frUq+fF/NTUtMG7pZJK7BAfWAvsN3Es6bG/nBvvNhtQ0lFWuZ61lCyoXi/
7tneJhldjEU0a70mOI1clamWQVKNRYPVrtHmixshzWzZEa9X6h7e7fBk+Df0ZjZz
OcOjfzmio3mVtRxZhi/XkwIO9yC0Xa6s0pExBxuOHid0siK4/FI/MaYRSTIJx0vZ
u+QD2pGvR64zA1vVZCp0h4YiHDrhncz5UhtfslqFWhCWJaSwxBLgOm1KV5l+1jJA
q+v6ATqSbKLoDqENcRDFKNdXAr8ZTnAIC3C/PGf4lT+Y+biCN79bdZLz5cstj0Dy
rF0EWvQKmAYSsw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:18:05 2025 by rpki-client