Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
File: MWAAQeTs-YwxVdSPSXz20UNoMj4.mft (raw, json)
Hash identifier: H1+Z/3gfpRtS6oxIAIckhj8rBbbySHcLQcVE9Xk8RZA=
Subject key identifier: 4D:23:E1:00:70:0A:E7:90:D1:32:B9:62:E6:E8:42:30:D2:8D:8C:B7
Authority key identifier: 31:60:00:41:E4:EC:F9:8C:31:55:D4:8F:49:7C:F6:D1:43:68:32:3E
Certificate issuer: /CN=31600041e4ecf98c3155d48f497cf6d14368323e
Certificate serial: 0199228CEB71281F25A97BAAF5EE017BA2A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
Manifest number: 022E
Signing time: Sun 07 Sep 2025 05:01:24 +0000
Manifest this update: Sun 07 Sep 2025 05:01:24 +0000
Manifest next update: Mon 08 Sep 2025 05:01:24 +0000
Files and hashes: 1: MWAAQeTs-YwxVdSPSXz20UNoMj4.crl (hash: LTAobR2EfW1ATo/JFMxA64Fdg5xrUWHcAnytinesKXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:eb:71:28:1f:25:a9:7b:aa:f5:ee:01:7b:a2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31600041e4ecf98c3155d48f497cf6d14368323e
Validity
Not Before: Sep 7 05:01:24 2025 GMT
Not After : Sep 8 05:01:24 2025 GMT
Subject: CN=4d23e100700ae790d132b962e6e84230d28d8cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3b:b1:ea:ff:02:73:bd:71:38:ff:19:2d:1d:
7b:5e:bf:82:f9:9a:45:b1:8c:56:29:60:89:45:d0:
95:9b:b9:9d:c0:85:3f:a4:5c:11:1c:b6:68:83:8c:
54:c7:01:53:2e:c9:f5:68:24:cc:56:2a:49:f7:41:
dc:76:b1:bd:e5:43:87:5c:a2:df:fa:f6:a2:67:53:
cb:97:67:14:03:e7:62:8d:0e:94:bb:7b:b2:44:ec:
a3:f9:e7:6a:4a:05:3c:b0:b2:6b:8e:18:30:82:cf:
c5:ae:8c:1b:fb:9b:91:59:18:49:5b:3b:af:71:8f:
05:41:21:bd:ed:c7:db:1b:23:77:db:80:c0:44:8c:
b1:4a:17:7f:90:42:6b:44:16:b7:99:28:4f:20:d9:
7c:a3:bd:ff:5f:2b:e3:2a:87:9a:e0:75:47:40:dc:
e0:d9:b7:34:1e:6c:6d:65:b8:3e:7a:e4:f7:aa:49:
b0:df:12:ec:7a:7f:63:fa:9a:ec:05:46:66:71:c9:
56:57:e3:d5:7f:80:9d:09:20:1f:4d:4f:1f:88:b4:
ff:e2:d7:2e:5b:1a:b2:83:99:a2:6a:23:4a:36:01:
a9:53:0a:c2:da:ef:ad:1b:7a:10:16:81:93:d3:e4:
80:1c:24:36:3c:8b:e3:9d:08:f4:60:ed:d5:90:36:
bd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:23:E1:00:70:0A:E7:90:D1:32:B9:62:E6:E8:42:30:D2:8D:8C:B7
X509v3 Authority Key Identifier:
keyid:31:60:00:41:E4:EC:F9:8C:31:55:D4:8F:49:7C:F6:D1:43:68:32:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:01:a5:b5:37:20:5e:d1:3b:90:5a:96:ca:c4:e1:b1:75:6e:
22:22:66:ab:45:ca:10:8d:d0:ce:02:ea:a6:16:eb:8d:a0:79:
8e:42:37:51:7a:86:4a:c6:b8:08:61:33:27:60:41:2c:20:48:
69:bd:e5:de:95:2a:1c:a3:0e:d1:22:2f:9e:c1:d7:ed:4c:bb:
d9:bb:8c:26:6d:d3:63:82:14:7a:7f:10:44:66:83:9f:b1:8c:
4f:e5:e8:54:03:7a:e0:3d:fe:d2:e3:cc:49:95:3c:52:50:71:
41:c9:7e:36:a2:75:25:9c:92:16:86:6f:42:a5:cc:06:9f:dd:
1c:5a:92:a3:f2:86:c2:eb:f9:4b:0b:ce:66:1d:14:9a:f6:f0:
63:b6:42:cf:8b:da:9d:c7:3c:4d:f6:8d:69:20:36:fd:c5:c5:
2e:46:48:32:77:c0:d3:0e:ec:26:bb:f2:10:50:41:17:72:bf:
ec:7f:7d:e1:17:b8:7f:8c:8b:6f:e1:eb:48:5a:4e:c9:52:89:
9a:63:42:c4:f1:6e:72:ef:d0:35:34:03:e9:da:70:73:56:99:
01:c1:88:de:22:ec:2c:99:03:c7:a8:80:43:55:07:78:3e:27:
47:18:7d:b1:cb:d5:5e:54:24:5d:d1:c7:a4:cc:52:66:22:bf:
af:80:1c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:56 2025 by rpki-client