Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft
File: MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft (raw, json)
Hash identifier: qEh1dXwAyk2nZqPsVSDBCLvqJiULbGcDV6Olc64PACo=
Subject key identifier: 67:4D:3E:B9:19:44:70:0C:9B:F6:08:1F:36:F8:16:5B:F5:66:1D:B5
Authority key identifier: 33:0B:C8:FD:94:9E:65:1D:93:28:5C:CB:C1:DA:13:39:3B:78:33:05
Certificate issuer: /CN=330bc8fd949e651d93285ccbc1da13393b783305
Certificate serial: 019A72CAAFC7A30427ACE4489CAFBA3A1E8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft
Manifest number: 1117
Signing time: Tue 11 Nov 2025 12:01:17 +0000
Manifest this update: Tue 11 Nov 2025 12:01:17 +0000
Manifest next update: Wed 12 Nov 2025 12:01:17 +0000
Files and hashes: 1: MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl (hash: 8WXsNrZU5X3aXrSiqyud+u+PDTYkq5EcnEVmEwGaanY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:af:c7:a3:04:27:ac:e4:48:9c:af:ba:3a:1e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=330bc8fd949e651d93285ccbc1da13393b783305
Validity
Not Before: Nov 11 12:01:17 2025 GMT
Not After : Nov 12 12:01:17 2025 GMT
Subject: CN=674d3eb91944700c9bf6081f36f8165bf5661db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:71:8c:ed:7b:a9:df:34:e4:0e:b9:7d:2a:
6d:5c:a1:97:c8:84:5b:89:10:dd:9b:70:cd:fc:0d:
25:f1:55:49:5a:52:36:30:b5:e7:29:a9:22:22:9b:
b1:67:4a:9d:66:d5:9a:98:59:5e:48:f7:16:76:f6:
39:60:c9:33:d9:b2:c8:47:2e:4b:b7:a3:1f:0c:1e:
74:51:4d:ba:4c:5f:3e:a0:5c:27:c2:ee:f1:fa:51:
43:6b:41:93:cc:ce:bb:41:97:4b:f7:c6:ff:83:c8:
85:01:20:07:b4:36:0d:a9:56:1d:33:b7:ec:88:c3:
be:2d:4a:f7:0d:80:69:15:de:64:a3:92:ab:56:9b:
09:69:65:1a:34:3c:3e:b8:71:8c:3e:75:85:ae:4f:
5e:f4:03:4f:96:ff:07:eb:35:84:7a:6f:0e:e4:2e:
65:d4:6a:4d:90:f3:c6:0e:55:9f:d6:64:b4:cb:1a:
d5:42:bb:f0:09:84:07:44:ab:0a:1f:7c:d0:44:82:
70:8e:8f:d4:a3:38:8f:8b:84:dc:43:b9:e0:ab:a5:
2b:d6:d2:22:47:ea:83:d7:3c:ca:1e:1f:8e:9e:3c:
a5:89:c3:34:7c:48:58:9e:14:cf:7a:f2:51:21:2c:
98:97:82:39:49:b0:54:74:eb:31:68:c0:a5:f9:e8:
24:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4D:3E:B9:19:44:70:0C:9B:F6:08:1F:36:F8:16:5B:F5:66:1D:B5
X509v3 Authority Key Identifier:
keyid:33:0B:C8:FD:94:9E:65:1D:93:28:5C:CB:C1:DA:13:39:3B:78:33:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0a:50:b8:f3:82:0e:1e:72:1f:e4:79:48:51:e1:97:99:39:
cb:ab:b0:07:c5:65:c4:07:82:e4:42:65:24:3e:8a:ba:8f:eb:
1d:79:b9:7b:49:71:bb:13:35:32:9a:a0:76:96:af:cc:42:15:
c7:60:62:49:af:82:ae:86:16:2b:0c:35:bd:cf:9a:04:d0:58:
61:ad:9d:bb:85:aa:a9:fa:40:ee:99:82:fd:de:ea:d6:2c:6b:
d4:54:66:07:97:91:2d:59:b9:62:62:6f:8f:c1:0a:50:b2:e9:
ba:1a:78:2b:ca:36:5e:ca:d2:09:26:c1:51:62:e3:17:4b:5b:
0f:98:71:42:65:e6:34:52:10:10:b5:2e:5e:b8:3e:8d:f1:51:
90:23:11:4d:b0:44:f4:bb:59:bd:02:9a:76:2e:60:48:a8:2e:
cf:56:14:0b:9d:29:30:0b:bd:b2:3f:df:cf:8a:02:93:e9:38:
49:eb:c8:a9:0c:bc:20:75:08:8b:3e:da:c9:87:a3:07:65:fe:
05:2f:15:48:08:bf:7b:35:4d:87:cb:06:41:22:5e:91:40:10:
51:10:22:5c:72:d5:17:4b:e7:f2:85:0e:96:0f:cd:87:eb:16:
72:59:09:20:03:34:05:40:98:33:19:86:24:79:ed:59:26:bd:
7e:88:10:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:51 2025 by rpki-client