Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.mft
File: MW2V2INsHxFqce4h3sD_Zx4eBw0.mft (raw, json)
Hash identifier: aCURdMQeWv9/9RqChM5xlnURCxzAH6iWPjAoEXD7wRE=
Subject key identifier: 0E:C7:13:A9:1C:A3:C4:9E:D1:BA:C8:C4:B4:32:4A:91:10:3C:AD:8F
Authority key identifier: 31:6D:95:D8:83:6C:1F:11:6A:71:EE:21:DE:C0:FF:67:1E:1E:07:0D
Certificate issuer: /CN=316d95d8836c1f116a71ee21dec0ff671e1e070d
Certificate serial: 01984708C28DF25BBD3ACF1A9C97F28B53D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MW2V2INsHxFqce4h3sD_Zx4eBw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.mft
Manifest number: 0CE0
Signing time: Sat 26 Jul 2025 14:00:12 +0000
Manifest this update: Sat 26 Jul 2025 14:00:12 +0000
Manifest next update: Sun 27 Jul 2025 14:00:12 +0000
Files and hashes: 1: MW2V2INsHxFqce4h3sD_Zx4eBw0.crl (hash: YTf+R5aRzymQYyPdy3iaA6rd/btW/LzCtHQfh1LS6Gs=)
2: NaSNw-5nplSi1oWgCIXAtq-282g.roa (hash: PHVRipc0hRgzJt/VWrGp9MNvQSbNc+wyfThzb/6H1hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MW2V2INsHxFqce4h3sD_Zx4eBw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:08:c2:8d:f2:5b:bd:3a:cf:1a:9c:97:f2:8b:53:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=316d95d8836c1f116a71ee21dec0ff671e1e070d
Validity
Not Before: Jul 26 14:00:12 2025 GMT
Not After : Jul 27 14:00:12 2025 GMT
Subject: CN=0ec713a91ca3c49ed1bac8c4b4324a91103cad8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5d:49:8b:e7:e1:95:1f:b3:b6:b5:4a:df:2b:
c3:fd:be:89:a9:4a:d8:2a:a2:15:ef:46:d6:06:ad:
bf:40:37:09:06:8f:c0:48:de:17:ab:a4:02:c5:24:
f5:ac:dc:08:30:21:14:c0:04:e7:83:9f:37:1c:f7:
f8:28:9e:45:ca:9f:f9:74:44:82:aa:5c:09:37:6b:
6e:ba:e3:40:bb:4d:26:4d:cb:cc:cc:ba:1c:ff:de:
2d:17:99:22:0e:9b:03:03:32:73:ac:9a:a8:38:87:
eb:35:13:f3:ff:ab:01:d3:fe:d0:ca:55:2f:18:13:
c6:56:21:74:e0:8b:47:2e:ae:ac:40:e4:d0:b4:f2:
0e:c6:e9:35:71:11:59:e0:59:ec:03:3f:a4:e7:c5:
02:86:6a:b1:93:a0:8e:e6:b4:eb:85:2d:a1:2f:15:
aa:13:2b:bb:4e:f0:b3:04:7c:7f:d9:77:7c:26:61:
f7:3c:59:08:09:58:bd:f9:2a:0a:cb:e6:2c:c5:7a:
1f:b6:0c:a6:5c:c4:63:2b:11:0b:e9:05:9b:15:cb:
10:6d:d7:d7:c0:c7:82:a4:60:19:df:e7:a9:1b:38:
f2:20:88:2f:d4:76:3b:29:b5:f9:5d:01:3a:bb:6c:
e4:5d:79:cc:04:75:da:80:8f:b1:f2:b8:5b:1b:62:
04:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C7:13:A9:1C:A3:C4:9E:D1:BA:C8:C4:B4:32:4A:91:10:3C:AD:8F
X509v3 Authority Key Identifier:
keyid:31:6D:95:D8:83:6C:1F:11:6A:71:EE:21:DE:C0:FF:67:1E:1E:07:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MW2V2INsHxFqce4h3sD_Zx4eBw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:43:bc:40:3e:90:39:83:24:85:af:14:d3:bd:0c:98:46:d4:
c6:f9:d4:bb:9c:0f:69:1a:17:d2:47:a6:80:bf:e1:7c:53:0f:
b7:3f:39:c0:18:af:97:88:66:a8:c8:83:4d:b4:0d:17:7a:4f:
6c:2e:de:f4:be:8e:fc:ca:bc:78:77:b8:69:34:82:d6:a6:6f:
f5:aa:bd:2d:43:2f:59:1d:6a:9e:7d:34:b8:b6:8a:10:b1:7b:
f5:55:55:38:d5:68:a2:a4:b9:2b:25:49:f2:a3:77:71:0c:6f:
98:03:ba:df:c8:d7:46:0d:e4:77:f6:50:94:d6:c0:ae:18:ee:
13:38:74:bb:61:81:76:10:98:19:b6:0e:fd:66:e1:4c:b5:27:
91:f8:84:84:24:8a:dc:25:7e:de:f8:df:be:e9:97:e2:c8:72:
34:a9:8b:64:d6:cf:97:25:5b:8f:fc:78:a8:47:88:2f:16:42:
be:b1:43:b3:b8:32:27:b7:08:97:a1:4c:e6:fa:86:1f:6c:71:
9d:c9:da:10:46:cc:0a:89:ce:42:f1:04:fe:28:8e:11:bd:17:
4a:4b:59:ed:31:db:5a:83:42:07:aa:83:fa:4d:cf:4c:a1:6a:
cb:0e:10:7c:2d:15:3b:d7:72:6b:c0:50:30:bf:0e:71:97:bd:
7c:d9:65:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHCMKN8lu9Os8anJfyi1PUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxNmQ5NWQ4ODM2YzFmMTE2YTcxZWUyMWRlYzBmZjY3MWUx
ZTA3MGQwHhcNMjUwNzI2MTQwMDEyWhcNMjUwNzI3MTQwMDEyWjAzMTEwLwYDVQQD
EygwZWM3MTNhOTFjYTNjNDllZDFiYWM4YzRiNDMyNGE5MTEwM2NhZDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt11Ji+fhlR+ztrVK3yvD/b6JqUrY
KqIV70bWBq2/QDcJBo/ASN4Xq6QCxST1rNwIMCEUwATng583HPf4KJ5Fyp/5dESC
qlwJN2tuuuNAu00mTcvMzLoc/94tF5kiDpsDAzJzrJqoOIfrNRPz/6sB0/7QylUv
GBPGViF04ItHLq6sQOTQtPIOxuk1cRFZ4FnsAz+k58UChmqxk6CO5rTrhS2hLxWq
Eyu7TvCzBHx/2Xd8JmH3PFkICVi9+SoKy+YsxXoftgymXMRjKxEL6QWbFcsQbdfX
wMeCpGAZ3+epGzjyIIgv1HY7KbX5XQE6u2zkXXnMBHXagI+x8rhbG2IE3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7HE6kco8Se0brIxLQySpEQPK2PMB8GA1UdIwQY
MBaAFDFtldiDbB8RanHuId7A/2ceHgcNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVcyVjJJTnNIeEZxY2U0aDNzRF9aeDRlQncwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82ZDdkNjUtZjIxNS00MmY4LTlhNWEt
MTIzNzIwYmZlNzQ2LzEvTVcyVjJJTnNIeEZxY2U0aDNzRF9aeDRlQncwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC82ZDdkNjUtZjIxNS00MmY4LTlhNWEtMTIzNzIwYmZlNzQ2
LzEvTVcyVjJJTnNIeEZxY2U0aDNzRF9aeDRlQncwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkkO8QD6Q
OYMkha8U070MmEbUxvnUu5wPaRoX0kemgL/hfFMPtz85wBivl4hmqMiDTbQNF3pP
bC7e9L6O/Mq8eHe4aTSC1qZv9aq9LUMvWR1qnn00uLaKELF79VVVONVooqS5KyVJ
8qN3cQxvmAO638jXRg3kd/ZQlNbArhjuEzh0u2GBdhCYGbYO/WbhTLUnkfiEhCSK
3CV+3vjfvumX4shyNKmLZNbPlyVbj/x4qEeILxZCvrFDs7gyJ7cIl6FM5vqGH2xx
ncnaEEbMConOQvEE/iiOEb0XSktZ7THbWoNCB6qD+k3PTKFqyw4QfC0VO9dya8BQ
ML8OcZe9fNlleg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 15:51:51 2025 by rpki-client