Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft
File: MwY72VuJG_MxFVfITf6H7PQrGQY.mft (raw, json)
Hash identifier: KYamxjz1F+f0rWnv+NfPraUE3V9nRX7hiLvFr0biURY=
Subject key identifier: FC:05:EE:CC:79:BB:F5:64:CB:F3:C3:EE:4F:FF:E7:4E:49:19:C2:F7
Authority key identifier: 33:06:3B:D9:5B:89:1B:F3:31:15:57:C8:4D:FE:87:EC:F4:2B:19:06
Certificate issuer: /CN=33063bd95b891bf3311557c84dfe87ecf42b1906
Certificate serial: 019922C2FB10D9B60EFC3C05B08708A27961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft
Manifest number: 0274
Signing time: Sun 07 Sep 2025 06:00:27 +0000
Manifest this update: Sun 07 Sep 2025 06:00:27 +0000
Manifest next update: Mon 08 Sep 2025 06:00:27 +0000
Files and hashes: 1: MwY72VuJG_MxFVfITf6H7PQrGQY.crl (hash: G/TTHy7M/47s8toIIhLNjTjOWguM3V5IS8MzYNvL6Jg=)
2: z1aTRBewSJhzUfWWJD41OIsIBo0.roa (hash: qD0OIe2RSaDdKkAmPZcT/wnJhlY0jqIIohwD44CcvP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c2:fb:10:d9:b6:0e:fc:3c:05:b0:87:08:a2:79:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33063bd95b891bf3311557c84dfe87ecf42b1906
Validity
Not Before: Sep 7 06:00:27 2025 GMT
Not After : Sep 8 06:00:27 2025 GMT
Subject: CN=fc05eecc79bbf564cbf3c3ee4fffe74e4919c2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:f7:d6:b9:61:1e:4c:2f:bf:75:89:a9:ec:
ff:85:b4:5f:e2:16:0f:62:38:32:3d:9a:63:20:ca:
58:f3:29:bd:ff:c5:e7:75:76:6c:c5:37:8c:85:07:
6b:16:ff:45:2c:23:c4:f6:05:0b:05:6d:48:93:73:
9a:71:b2:9c:25:33:3a:dd:6b:3c:72:ad:5b:36:e9:
c4:64:3d:ed:94:a7:0a:36:03:ca:59:2c:73:fb:fb:
b2:26:56:55:02:29:1b:20:a4:f2:8a:dc:d2:38:2d:
e8:ca:09:34:f8:1b:18:7b:c7:6a:27:b2:f9:63:9d:
81:f3:b0:9e:03:89:7a:79:6b:25:19:6a:b3:af:56:
cc:14:fb:70:db:d5:b3:69:c7:35:34:83:5e:1b:e1:
e8:cb:fe:75:41:58:43:2a:24:eb:01:a2:02:6b:87:
8d:32:b9:6e:f0:6a:a2:f4:2b:4a:55:d4:9e:ac:e0:
c5:c0:2e:72:ed:93:e3:41:a4:0a:90:b1:27:fa:92:
34:1c:b5:da:e2:ed:82:96:91:e1:0d:51:fa:aa:d0:
c9:46:4a:bd:93:70:3e:db:78:cc:19:55:7d:5f:7e:
93:32:76:40:43:2f:4c:4b:2b:e1:18:20:c1:db:2f:
69:c1:27:cd:31:5f:76:64:8e:84:fc:ab:c6:e6:81:
dc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:05:EE:CC:79:BB:F5:64:CB:F3:C3:EE:4F:FF:E7:4E:49:19:C2:F7
X509v3 Authority Key Identifier:
keyid:33:06:3B:D9:5B:89:1B:F3:31:15:57:C8:4D:FE:87:EC:F4:2B:19:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:11:a0:98:b9:dd:5a:c1:5a:46:e7:c9:e1:e4:51:91:ab:46:
6d:7d:62:28:75:4d:2a:54:24:6d:a4:6a:29:36:cf:fe:d0:27:
ad:26:99:4b:89:0e:5d:03:17:81:83:44:de:fb:14:06:24:b9:
44:46:9f:48:e0:16:01:70:1f:42:b2:ae:2c:14:69:20:7f:9f:
2b:c8:91:04:34:24:91:76:25:09:a1:6a:35:13:5e:23:74:60:
cc:ae:62:79:56:b7:1e:bf:ba:db:be:23:db:1f:88:1a:14:13:
f2:04:8d:4d:ef:71:f9:0d:e6:d6:73:a6:2e:9c:1c:14:df:29:
b3:b7:7e:ea:c8:70:59:0c:c4:70:43:c8:0e:87:f8:e5:0e:1c:
df:af:50:50:03:5f:a0:76:a0:1a:29:51:ae:0f:9c:32:2b:0b:
ac:9e:f5:73:f3:45:3b:cc:29:4d:fd:84:42:18:70:e8:59:61:
78:71:99:e5:73:f2:88:74:1d:68:8c:a8:ff:52:ac:cb:67:3f:
e6:35:8c:fd:15:af:a9:9f:49:55:fb:b9:87:a8:af:68:78:ff:
36:fe:ed:c5:ec:2f:43:eb:a5:b6:ad:76:34:4c:b8:ab:0f:0d:
02:e5:72:8b:28:fa:0d:c8:f9:71:ad:f8:db:94:ea:16:b8:11:
aa:86:bc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:23 2025 by rpki-client