Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.mft
File: mwj052FQMJu9IksB-J7CA8H8Vts.mft (raw, json)
Hash identifier: ettf1C+Q/856vtwObSkC9TUTay8kmcnj5omCgiUtTKA=
Subject key identifier: 84:4E:4E:46:31:60:6B:20:E3:1D:AE:3C:E9:90:A3:37:12:23:D4:E0
Authority key identifier: 9B:08:F4:E7:61:50:30:9B:BD:22:4B:01:F8:9E:C2:03:C1:FC:56:DB
Certificate issuer: /CN=9b08f4e76150309bbd224b01f89ec203c1fc56db
Certificate serial: 019A1AD0CA5D6B33A2317AE4FE2D0C3A7F84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwj052FQMJu9IksB-J7CA8H8Vts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.mft
Manifest number: 16F2
Signing time: Sat 25 Oct 2025 10:01:22 +0000
Manifest this update: Sat 25 Oct 2025 10:01:22 +0000
Manifest next update: Sun 26 Oct 2025 10:01:22 +0000
Files and hashes: 1: mwj052FQMJu9IksB-J7CA8H8Vts.crl (hash: nFWnLssu95bF5U4gZKbANwwQZW+w1uOYw/p9wGLLchs=)
2: yMCWx_vwP00jLW3_uRevvXcRMmk.roa (hash: xnNpTecLSpiwvjQT9lRJw8IJFmY7Zwk40Z4AZXbx8O4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.mft
rsync://rpki.ripe.net/repository/DEFAULT/mwj052FQMJu9IksB-J7CA8H8Vts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:d0:ca:5d:6b:33:a2:31:7a:e4:fe:2d:0c:3a:7f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b08f4e76150309bbd224b01f89ec203c1fc56db
Validity
Not Before: Oct 25 10:01:22 2025 GMT
Not After : Oct 26 10:01:22 2025 GMT
Subject: CN=844e4e4631606b20e31dae3ce990a3371223d4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:ef:2d:e6:81:d9:3d:8f:0e:4d:f7:58:fc:
6a:25:31:2b:32:55:d6:ad:ea:ba:93:df:6b:32:db:
c8:d9:2e:6b:ed:22:d3:1d:da:af:88:58:2e:aa:f0:
5b:8c:a5:84:6c:3e:6a:69:f8:1d:2f:e4:ef:2c:70:
df:50:1e:cf:0c:4b:d8:9f:d2:50:0a:82:e3:af:b3:
7e:a2:a8:0c:82:cd:87:fe:83:57:dd:2c:d7:c8:63:
98:7b:b2:ca:8c:5a:82:41:47:6b:84:c1:33:5c:b4:
87:0a:86:dc:23:da:28:af:0f:68:f3:27:ad:90:14:
cb:eb:fa:05:2b:e1:0e:bc:1a:fe:17:42:bb:85:47:
c4:d9:84:34:5e:06:35:83:8c:f6:a1:00:b5:5d:63:
07:87:c8:d4:ba:b1:51:2f:d6:e9:c1:a9:39:13:12:
a1:c5:36:66:98:8c:25:09:79:e9:c9:a5:47:aa:dd:
38:c6:67:69:a2:c0:c7:5d:e5:20:70:67:47:b6:01:
b7:0f:be:29:98:18:27:60:54:9e:8c:8c:a0:62:21:
db:dc:97:84:b6:4e:fb:7c:e3:e3:69:05:78:7e:d5:
3c:29:34:cf:a5:b4:b9:dd:5b:da:a1:39:d8:ac:15:
ab:9f:34:3e:4b:3e:aa:f0:e5:8b:d5:b9:ae:45:ac:
12:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4E:4E:46:31:60:6B:20:E3:1D:AE:3C:E9:90:A3:37:12:23:D4:E0
X509v3 Authority Key Identifier:
keyid:9B:08:F4:E7:61:50:30:9B:BD:22:4B:01:F8:9E:C2:03:C1:FC:56:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwj052FQMJu9IksB-J7CA8H8Vts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:7e:48:7e:5e:72:6d:39:5c:95:07:2c:bb:1c:7c:61:4b:7a:
0d:81:c4:a1:f6:ad:1f:bf:92:aa:6d:69:8e:23:91:d3:4b:d7:
0c:6d:d7:10:db:78:5f:52:b2:5c:1a:86:89:2b:83:f3:06:0a:
4c:09:0f:f8:4e:a3:8b:7f:1d:10:09:d3:e1:c4:a4:6b:d7:15:
06:7a:88:dd:4c:be:c6:ff:4d:b2:23:22:84:7f:8e:ad:b3:6e:
1d:5c:00:34:03:d4:ab:65:d0:24:ea:3f:21:55:15:4d:91:ed:
cf:b3:f6:d6:1f:f2:8a:9d:b5:a3:ac:4a:b4:f2:66:9e:4e:a3:
8a:c1:e0:0a:42:ff:f6:09:09:80:05:04:04:9c:53:a8:ee:93:
cd:27:09:07:78:45:2c:b2:62:d3:71:88:44:5e:e7:1d:29:ae:
3b:5f:b2:87:f4:cd:50:b8:1b:e2:35:d6:97:6f:40:27:24:ba:
70:8e:7a:99:80:92:5a:33:4c:6c:87:94:b6:ca:87:74:9d:46:
1d:4d:c1:2c:ce:ae:dc:db:9b:1f:01:cf:5d:92:e6:52:92:f0:
f8:65:84:4c:3f:02:be:07:91:9d:e1:d3:f2:dd:64:f3:e4:99:
d5:e4:ad:bc:ad:1d:ec:8e:ac:c0:21:49:a2:89:c7:74:c9:71:
b1:f5:5b:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoa0MpdazOiMXrk/i0MOn+EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMDhmNGU3NjE1MDMwOWJiZDIyNGIwMWY4OWVjMjAzYzFm
YzU2ZGIwHhcNMjUxMDI1MTAwMTIyWhcNMjUxMDI2MTAwMTIyWjAzMTEwLwYDVQQD
Eyg4NDRlNGU0NjMxNjA2YjIwZTMxZGFlM2NlOTkwYTMzNzEyMjNkNGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtebvLeaB2T2PDk33WPxqJTErMlXW
req6k99rMtvI2S5r7SLTHdqviFguqvBbjKWEbD5qafgdL+TvLHDfUB7PDEvYn9JQ
CoLjr7N+oqgMgs2H/oNX3SzXyGOYe7LKjFqCQUdrhMEzXLSHCobcI9oorw9o8yet
kBTL6/oFK+EOvBr+F0K7hUfE2YQ0XgY1g4z2oQC1XWMHh8jUurFRL9bpwak5ExKh
xTZmmIwlCXnpyaVHqt04xmdposDHXeUgcGdHtgG3D74pmBgnYFSejIygYiHb3JeE
tk77fOPjaQV4ftU8KTTPpbS53VvaoTnYrBWrnzQ+Sz6q8OWL1bmuRawSAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIROTkYxYGsg4x2uPOmQozcSI9TgMB8GA1UdIwQY
MBaAFJsI9OdhUDCbvSJLAfiewgPB/FbbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXdqMDUyRlFNSnU5SWtzQi1KN0NBOEg4VnRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNWQ2OTAtZmUxNi00NDljLWE2ZGUt
NjlkZjgxZjJkODNkLzEvbXdqMDUyRlFNSnU5SWtzQi1KN0NBOEg4VnRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9kNWQ2OTAtZmUxNi00NDljLWE2ZGUtNjlkZjgxZjJkODNk
LzEvbXdqMDUyRlFNSnU5SWtzQi1KN0NBOEg4VnRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF35Ifl5y
bTlclQcsuxx8YUt6DYHEofatH7+Sqm1pjiOR00vXDG3XENt4X1KyXBqGiSuD8wYK
TAkP+E6ji38dEAnT4cSka9cVBnqI3Uy+xv9NsiMihH+OrbNuHVwANAPUq2XQJOo/
IVUVTZHtz7P21h/yip21o6xKtPJmnk6jisHgCkL/9gkJgAUEBJxTqO6TzScJB3hF
LLJi03GIRF7nHSmuO1+yh/TNULgb4jXWl29AJyS6cI56mYCSWjNMbIeUtsqHdJ1G
HU3BLM6u3NubHwHPXZLmUpLw+GWETD8CvgeRneHT8t1k8+SZ1eStvK0d7I6swCFJ
oonHdMlxsfVb6Q==
-----END CERTIFICATE-----
Generated at Sat Oct 25 13:33:35 2025 by rpki-client