Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
File: MWg4BbI9i3h9aSEFPX666XBAihk.mft (raw, json)
Hash identifier: 7JPYczRie/KetbeqhTiC6M6e0Lpd/NWeqNqeMpY1iJs=
Subject key identifier: 9F:30:0A:53:AA:84:67:1C:AD:88:5F:B2:C8:B3:6A:35:9C:92:FA:5B
Authority key identifier: 31:68:38:05:B2:3D:8B:78:7D:69:21:05:3D:7E:BA:E9:70:40:8A:19
Certificate issuer: /CN=31683805b23d8b787d6921053d7ebae970408a19
Certificate serial: 019848C039CF52D35DFB9E8CE5370F381932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
Manifest number: 0448
Signing time: Sat 26 Jul 2025 22:00:13 +0000
Manifest this update: Sat 26 Jul 2025 22:00:13 +0000
Manifest next update: Sun 27 Jul 2025 22:00:13 +0000
Files and hashes: 1: MWg4BbI9i3h9aSEFPX666XBAihk.crl (hash: O6a7YA3UHDX1lAZPE2IROpn04/IP9OdVeVEDXoNwY+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:39:cf:52:d3:5d:fb:9e:8c:e5:37:0f:38:19:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31683805b23d8b787d6921053d7ebae970408a19
Validity
Not Before: Jul 26 22:00:13 2025 GMT
Not After : Jul 27 22:00:13 2025 GMT
Subject: CN=9f300a53aa84671cad885fb2c8b36a359c92fa5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c1:0c:25:26:d5:0f:24:6f:e2:7b:bd:fa:16:
0d:1f:07:81:0d:34:29:a4:cb:ae:79:4c:94:54:52:
41:ed:3a:e2:a1:91:89:16:0f:bc:28:90:54:40:69:
73:7f:65:bc:74:fb:bb:71:58:ce:6e:7a:9f:43:2d:
7d:f2:de:bf:a2:3b:70:f0:ee:75:53:bb:f2:6c:35:
e2:ee:05:a4:bd:d3:85:90:3f:91:3d:65:0c:70:b8:
4d:79:93:bc:26:da:c3:41:f9:40:1a:8e:aa:41:3e:
61:40:18:65:c1:3a:94:2b:c1:80:98:a5:82:ec:b1:
10:ce:e6:ef:9c:bf:1d:a1:f6:01:3a:8c:c0:f0:e1:
e9:39:8a:d0:67:1a:90:d5:30:25:75:f3:5e:2c:64:
45:84:06:ad:96:5e:26:6f:99:ad:eb:15:d4:cc:4b:
ec:29:69:4c:a9:65:27:34:94:8b:76:9f:85:70:9a:
62:ac:18:19:e3:f8:54:54:7f:67:f7:f9:b6:dd:b7:
51:bb:60:ed:cd:27:26:89:19:6a:ae:2f:f9:d6:3f:
ed:f8:53:68:d7:94:2b:c6:62:07:d4:9b:68:13:b1:
2c:dc:70:bf:16:ad:33:6d:50:9a:1b:45:fe:f0:eb:
e2:68:e7:f9:c5:71:65:94:f8:9b:b9:30:dd:bd:be:
b7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:30:0A:53:AA:84:67:1C:AD:88:5F:B2:C8:B3:6A:35:9C:92:FA:5B
X509v3 Authority Key Identifier:
keyid:31:68:38:05:B2:3D:8B:78:7D:69:21:05:3D:7E:BA:E9:70:40:8A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:13:ef:43:61:1a:5a:84:9f:e9:b4:05:76:bc:fd:1c:41:fe:
61:66:fc:82:bb:0f:65:31:86:2d:2e:cc:c1:74:4b:14:65:62:
25:59:96:50:1b:08:c0:13:24:bc:92:4b:2e:cd:b1:eb:2a:74:
b9:4e:36:ab:a8:6f:aa:c3:21:9c:63:38:fd:fb:15:1c:2a:90:
a0:0e:83:95:77:f3:1d:c7:bd:a9:7f:42:b1:36:37:fe:68:26:
c8:be:ac:29:3e:68:71:82:2a:cf:22:b3:10:e2:58:e4:4d:a0:
a3:7c:9d:00:3c:98:20:de:95:86:8a:32:0a:e4:e1:30:39:23:
3a:f3:72:1e:58:69:7f:3c:0b:8d:66:ec:5e:6c:15:6e:58:90:
9a:89:82:45:bc:7c:91:24:30:02:25:51:ba:8a:9e:5f:8c:e4:
d2:f5:fb:69:e4:a3:d7:5a:e8:48:21:c8:d9:5c:0f:ef:84:ae:
94:0a:db:3c:1f:57:34:b5:ca:6b:28:cb:ec:a7:f3:61:45:51:
d3:3e:74:04:02:ef:7d:cf:67:df:70:5d:14:1e:39:af:b5:4c:
ea:0a:56:b4:31:8a:43:d8:26:fc:c8:4b:e3:f1:47:17:33:3d:
9e:eb:ee:a7:78:1a:f0:cb:52:87:6c:cc:e5:0a:f9:7e:50:10:
83:bf:6d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:31:49 2025 by rpki-client