Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
File: MWAAQeTs-YwxVdSPSXz20UNoMj4.mft (raw, json)
Hash identifier: Z8DlU8JltRsEW/8FoGfG3Gdb+VA5eD6a2KYkBrJ3moY=
Subject key identifier: 21:C4:BF:5A:59:34:FB:6C:60:C9:13:65:6A:90:D3:62:D6:89:8A:C2
Authority key identifier: 31:60:00:41:E4:EC:F9:8C:31:55:D4:8F:49:7C:F6:D1:43:68:32:3E
Certificate issuer: /CN=31600041e4ecf98c3155d48f497cf6d14368323e
Certificate serial: 01975310369F86C573FBB8697B67E35522BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
Manifest number: 013E
Signing time: Mon 09 Jun 2025 05:01:00 +0000
Manifest this update: Mon 09 Jun 2025 05:01:00 +0000
Manifest next update: Tue 10 Jun 2025 05:01:00 +0000
Files and hashes: 1: MWAAQeTs-YwxVdSPSXz20UNoMj4.crl (hash: G7bY7B4JZFNvGRg/7DyRcG4Uu5yp1XyMXUSOk4ngFbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:10:36:9f:86:c5:73:fb:b8:69:7b:67:e3:55:22:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31600041e4ecf98c3155d48f497cf6d14368323e
Validity
Not Before: Jun 9 05:01:00 2025 GMT
Not After : Jun 10 05:01:00 2025 GMT
Subject: CN=21c4bf5a5934fb6c60c913656a90d362d6898ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cd:2b:f7:6a:64:33:68:e0:8d:0c:0d:56:3a:
a3:e3:f4:7e:2a:d6:12:16:4b:cf:59:c0:84:67:6a:
08:f7:b2:4d:f1:87:9c:7e:3e:d5:8f:77:af:99:da:
ad:e0:70:f7:49:6a:ae:19:61:d0:c2:5c:c6:8e:b9:
61:62:21:46:14:2d:04:8e:a6:66:f0:04:f3:1f:55:
75:7f:ed:c6:9f:1a:39:94:9d:b2:11:18:b6:4c:ec:
77:df:51:b6:f6:58:67:f9:a0:db:5c:44:84:d7:3b:
78:13:73:6f:ac:f1:34:f7:d9:0e:a2:b6:25:68:df:
42:56:61:65:ca:5f:82:87:8e:c3:8f:81:b2:a0:da:
0a:ac:8c:2d:31:bb:44:47:c3:2b:c6:36:2e:db:59:
1c:4c:fd:a6:ef:a6:6a:b8:b7:eb:eb:b8:27:65:ba:
ea:57:ab:56:22:00:b6:68:38:22:0a:a7:cf:9d:58:
10:ab:a2:b0:bc:18:17:5c:f3:0c:e2:c9:ea:84:85:
96:f3:15:36:10:a4:93:98:ae:da:81:06:3f:9c:8d:
38:0d:b4:43:36:23:36:ba:66:01:55:ce:4b:cb:42:
bb:04:cb:d4:95:c3:fb:22:31:1f:61:f2:ee:0c:b5:
16:26:10:9a:15:92:ab:06:c0:33:05:0a:6e:5f:c1:
25:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C4:BF:5A:59:34:FB:6C:60:C9:13:65:6A:90:D3:62:D6:89:8A:C2
X509v3 Authority Key Identifier:
keyid:31:60:00:41:E4:EC:F9:8C:31:55:D4:8F:49:7C:F6:D1:43:68:32:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:24:fc:8f:bd:62:c3:68:5f:66:0e:78:e3:95:04:94:32:64:
cf:b4:4d:6c:24:e8:2a:5f:33:b8:4e:83:38:25:41:18:16:c9:
56:c0:3c:2c:90:88:ff:e8:8b:08:bc:b2:54:fd:be:f9:7b:d5:
67:64:b0:83:3a:71:0e:76:e8:fc:7e:0f:25:7a:e2:20:f2:22:
7a:0f:76:aa:8c:1a:1b:49:48:cd:e8:84:9f:b5:48:9b:82:1a:
f7:a4:d2:89:a5:43:51:9c:0f:1a:3a:40:19:9b:16:aa:ae:94:
91:a0:ae:f2:ab:9f:4d:20:ec:8a:8d:b8:f6:3e:79:54:52:cc:
ba:3b:98:97:d2:87:39:37:e7:b7:cd:2d:f0:68:21:31:75:08:
d9:af:01:3d:8e:fc:95:8f:50:ce:5b:c7:2e:8a:8f:77:92:c8:
a5:1a:3d:58:9c:86:2a:c4:60:6e:e3:7f:bf:2b:a3:14:95:71:
c6:6a:92:bb:29:aa:2c:3d:64:45:14:a0:b5:2d:ac:e6:d7:12:
57:ed:8c:69:b9:84:c6:51:a1:0a:29:45:91:e8:a4:52:8e:66:
23:78:75:06:24:85:07:ec:fe:8e:55:d9:61:39:10:39:dd:9b:
5b:94:a0:f5:de:b5:c1:4f:6f:de:a3:e4:5b:b5:ea:71:c6:fd:
83:dd:26:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdTEDafhsVz+7hpe2fjVSK7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxNjAwMDQxZTRlY2Y5OGMzMTU1ZDQ4ZjQ5N2NmNmQxNDM2
ODMyM2UwHhcNMjUwNjA5MDUwMTAwWhcNMjUwNjEwMDUwMTAwWjAzMTEwLwYDVQQD
EygyMWM0YmY1YTU5MzRmYjZjNjBjOTEzNjU2YTkwZDM2MmQ2ODk4YWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc0r92pkM2jgjQwNVjqj4/R+KtYS
FkvPWcCEZ2oI97JN8Yecfj7Vj3evmdqt4HD3SWquGWHQwlzGjrlhYiFGFC0EjqZm
8ATzH1V1f+3Gnxo5lJ2yERi2TOx331G29lhn+aDbXESE1zt4E3NvrPE099kOorYl
aN9CVmFlyl+Ch47Dj4GyoNoKrIwtMbtER8MrxjYu21kcTP2m76ZquLfr67gnZbrq
V6tWIgC2aDgiCqfPnVgQq6KwvBgXXPMM4snqhIWW8xU2EKSTmK7agQY/nI04DbRD
NiM2umYBVc5Ly0K7BMvUlcP7IjEfYfLuDLUWJhCaFZKrBsAzBQpuX8ElXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHEv1pZNPtsYMkTZWqQ02LWiYrCMB8GA1UdIwQY
MBaAFDFgAEHk7PmMMVXUj0l89tFDaDI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVdBQVFlVHMtWXd4VmRTUFNYejIwVU5vTWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84NjlmNjQtMDJiNi00NjAzLTk4N2Qt
OWMzNmMyMjJkOGRjLzEvTVdBQVFlVHMtWXd4VmRTUFNYejIwVU5vTWo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy84NjlmNjQtMDJiNi00NjAzLTk4N2QtOWMzNmMyMjJkOGRj
LzEvTVdBQVFlVHMtWXd4VmRTUFNYejIwVU5vTWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASiT8j71i
w2hfZg5445UElDJkz7RNbCToKl8zuE6DOCVBGBbJVsA8LJCI/+iLCLyyVP2++XvV
Z2SwgzpxDnbo/H4PJXriIPIieg92qowaG0lIzeiEn7VIm4Ia96TSiaVDUZwPGjpA
GZsWqq6UkaCu8qufTSDsio249j55VFLMujuYl9KHOTfnt80t8GghMXUI2a8BPY78
lY9QzlvHLoqPd5LIpRo9WJyGKsRgbuN/vyujFJVxxmqSuymqLD1kRRSgtS2s5tcS
V+2MabmExlGhCilFkeikUo5mI3h1BiSFB+z+jlXZYTkQOd2bW5Sg9d61wU9v3qPk
W7Xqccb9g90mrg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 08:30:48 2025 by rpki-client