Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
File: mowynYdjwp8pkxq7uBlfl1A4KYs.mft (raw, json)
Hash identifier: wm4rWOY1zETrjNX74ypKTU3CkBgy2oUe8d/cZ/5g35E=
Subject key identifier: 46:B5:04:60:16:44:A8:AD:A8:2D:8B:3A:02:28:08:08:1C:70:4E:A7
Authority key identifier: 9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B
Certificate issuer: /CN=9a8c329d8763c29f29931abbb8195f975038298b
Certificate serial: 019A2930C6CE090FAB81C3F84280990BB09A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
Manifest number: 03F1
Signing time: Tue 28 Oct 2025 05:00:53 +0000
Manifest this update: Tue 28 Oct 2025 05:00:53 +0000
Manifest next update: Wed 29 Oct 2025 05:00:53 +0000
Files and hashes: 1: FDxX9SBwi6ZE3MJeOvg7kb7kK38.roa (hash: bwymb63cONmt/c+6ZDVkw7Ek8DpIFx336RD8V0Gt1oQ=)
2: mowynYdjwp8pkxq7uBlfl1A4KYs.crl (hash: TT2GVYqKlwSveJbIdUR5/yGGHXJ/3umP3A8aM52Sz1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:30:c6:ce:09:0f:ab:81:c3:f8:42:80:99:0b:b0:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8c329d8763c29f29931abbb8195f975038298b
Validity
Not Before: Oct 28 05:00:53 2025 GMT
Not After : Oct 29 05:00:53 2025 GMT
Subject: CN=46b504601644a8ada82d8b3a022808081c704ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4b:f9:6b:bd:8a:e6:7a:fe:b0:dc:b7:76:8a:
03:b0:37:a9:e9:21:05:31:88:35:81:b9:44:ca:fe:
f0:5f:1f:3c:f4:f0:e4:22:f8:cf:3c:48:3a:f5:08:
d2:cb:42:57:6a:ce:4b:67:c6:ea:c5:bd:49:2b:0b:
bd:cd:3c:fb:ff:48:65:bf:3b:59:75:11:ea:02:d2:
99:ee:96:2c:47:5d:1c:d4:ea:74:76:0d:83:9c:43:
f3:48:17:d9:c1:5e:d5:1a:2b:c7:4d:84:ce:3b:de:
cf:27:97:d2:50:a0:f4:81:d8:1a:28:86:18:2a:b3:
95:ff:54:0b:25:45:27:00:cc:63:7d:b7:56:52:74:
aa:e9:e9:46:3e:04:8e:50:08:87:96:86:13:64:98:
7b:0f:ee:09:d0:98:b0:f8:02:cf:4c:7e:4f:c6:c9:
2a:06:70:84:8c:26:1c:13:94:c8:a8:4f:68:ec:cb:
0e:cc:6a:f3:b5:50:4b:96:57:f3:c4:05:f7:a1:29:
b2:f5:73:48:c9:7d:7f:4d:07:47:40:44:c9:9c:55:
0b:f4:8a:3a:28:ca:ab:c8:38:b1:a5:89:b1:af:67:
ff:0f:b1:b2:c0:a3:03:32:e8:1e:04:29:45:02:25:
89:90:9c:f3:7c:ce:ef:e7:bb:4f:92:08:13:fd:91:
71:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B5:04:60:16:44:A8:AD:A8:2D:8B:3A:02:28:08:08:1C:70:4E:A7
X509v3 Authority Key Identifier:
keyid:9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:78:2f:cf:84:c2:6e:76:0f:d7:11:41:68:03:a1:b4:10:7f:
19:11:6f:b8:e9:4d:03:ea:ab:3a:db:2c:e8:a1:ec:5b:cf:f8:
1a:4a:21:1a:80:1f:4d:81:48:d5:f6:5a:78:3c:bd:d7:d0:8a:
f6:71:51:c2:fc:f1:72:9a:97:98:7e:fa:2f:0d:59:a4:57:c6:
95:5e:b0:0d:85:ec:2c:bd:e9:35:39:09:4d:a5:06:6d:bf:e0:
1e:1a:3b:44:67:3d:d2:eb:8b:70:99:3b:ac:d3:49:85:cf:57:
3d:cf:cd:67:77:2c:80:37:4e:85:f7:f2:a2:b8:7a:2e:65:f7:
fe:30:7b:c0:80:bd:bf:c3:2f:71:76:da:6e:cf:a4:a1:d6:f4:
8e:4e:68:f9:a3:35:a2:ee:de:d8:88:ed:c1:c8:d3:fc:27:03:
37:dd:50:d1:71:cc:24:10:20:93:0b:cc:76:43:30:ca:9a:07:
53:fc:a8:2a:61:c0:46:34:d6:db:3c:46:60:66:ba:84:d5:fc:
02:56:1e:9f:c7:5a:6e:09:6f:7c:03:ec:1c:73:8d:57:a7:6c:
37:f2:05:31:53:ef:a7:6c:e9:26:8e:02:6e:04:f5:61:0d:c2:
2b:3f:0a:14:0a:ab:e9:60:a0:1a:a7:99:e6:a3:57:be:bb:ba:
77:18:80:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:39:57 2025 by rpki-client