Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
File: MWAAQeTs-YwxVdSPSXz20UNoMj4.mft (raw, json)
Hash identifier: JbYmD9lL1QzOnP9YLlZnbRgZiOtpm2/LROUuOGbX4vk=
Subject key identifier: 9A:7B:92:B8:A8:62:85:B3:31:40:4C:DE:7E:4E:EE:9F:C3:8D:F5:74
Authority key identifier: 31:60:00:41:E4:EC:F9:8C:31:55:D4:8F:49:7C:F6:D1:43:68:32:3E
Certificate issuer: /CN=31600041e4ecf98c3155d48f497cf6d14368323e
Certificate serial: 019A729335B39C8A1368D77C1AC10EA51B21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
Manifest number: 02DC
Signing time: Tue 11 Nov 2025 11:00:41 +0000
Manifest this update: Tue 11 Nov 2025 11:00:41 +0000
Manifest next update: Wed 12 Nov 2025 11:00:41 +0000
Files and hashes: 1: MWAAQeTs-YwxVdSPSXz20UNoMj4.crl (hash: UjfHqORsiAe0HfIjYBwPo8PnN1RrhhFqong2UbGF4JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:35:b3:9c:8a:13:68:d7:7c:1a:c1:0e:a5:1b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31600041e4ecf98c3155d48f497cf6d14368323e
Validity
Not Before: Nov 11 11:00:41 2025 GMT
Not After : Nov 12 11:00:41 2025 GMT
Subject: CN=9a7b92b8a86285b331404cde7e4eee9fc38df574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7d:b9:0f:0c:d2:e8:f6:f1:a1:7e:75:72:33:
8e:80:2b:3a:e9:9f:1d:b6:42:15:2d:15:a2:8f:ec:
2f:93:10:da:9d:cc:ae:74:d7:8c:d0:79:fb:61:f7:
4f:bd:25:99:1d:aa:56:2e:28:47:fd:83:dc:e4:2f:
69:9c:c1:ad:77:43:c1:b7:b1:cf:eb:b9:64:ce:15:
63:6d:4b:75:01:3d:bf:2c:89:66:0d:25:4b:4f:13:
b2:1a:a0:ee:30:a4:4a:c3:ea:3e:57:da:a7:16:19:
1d:4c:dc:c5:90:4b:e6:c7:d1:d3:65:33:53:d2:f8:
2b:bf:02:e1:f3:95:26:86:3d:ce:f0:88:1f:37:06:
82:7f:3f:81:60:00:7b:f2:8f:63:1f:fd:28:e9:2b:
28:9e:25:ba:f7:26:99:0f:4b:3d:1c:fb:5e:64:3a:
e5:73:db:01:ff:0f:78:6c:db:71:42:41:eb:61:bd:
29:92:34:bf:e3:f4:09:88:bb:29:e7:ea:34:54:2b:
37:bd:d7:45:5e:0f:82:a4:f1:8b:ea:f3:e1:72:21:
85:76:d9:b0:25:92:67:32:56:53:c0:63:15:f6:d0:
ac:06:a8:41:b2:58:4f:51:36:1e:8a:ee:94:31:38:
6f:9b:e2:46:15:f0:e9:5c:95:5d:ac:04:22:87:f4:
30:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7B:92:B8:A8:62:85:B3:31:40:4C:DE:7E:4E:EE:9F:C3:8D:F5:74
X509v3 Authority Key Identifier:
keyid:31:60:00:41:E4:EC:F9:8C:31:55:D4:8F:49:7C:F6:D1:43:68:32:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:65:48:74:93:d4:91:88:5c:ec:1a:b2:54:ee:f2:28:a2:70:
14:a4:88:56:4c:7b:2d:ed:cd:5e:42:b2:33:b3:b1:f4:a6:2a:
e8:99:d0:e5:e6:82:39:4f:73:f2:91:06:30:0e:a1:06:35:af:
65:44:45:f7:d2:2b:12:e4:a2:b2:13:3c:34:99:f0:75:98:93:
94:66:4b:b6:f9:a3:30:39:21:28:d5:4a:86:c0:54:23:03:12:
e1:c4:c8:c8:48:61:d1:ae:2a:50:9a:29:8c:a4:a9:65:2f:03:
3b:40:32:83:3f:47:dd:3e:f8:5c:02:3c:b1:5e:84:7f:a4:b9:
74:e2:68:23:f7:e7:af:e0:7b:3c:ed:06:59:f4:68:cf:70:6f:
d1:e3:d3:7c:2f:84:1b:28:16:7e:0a:4f:f9:d2:57:d5:15:76:
fc:21:21:7a:4b:11:14:60:f8:2e:62:41:62:0d:fb:4c:38:4d:
f0:b1:2a:db:eb:6f:fe:09:e5:18:6f:64:cb:22:03:de:c8:a2:
9e:d2:97:c4:55:4d:fb:64:da:25:ab:f5:10:de:11:22:23:12:
d1:56:82:3a:0c:ca:46:ae:8b:07:5e:93:65:43:57:de:49:d0:
bd:13:57:de:43:fc:59:4c:c8:c7:05:f2:0b:2c:91:88:8d:48:
00:12:42:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:30 2025 by rpki-client