
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.mft
File: mwpFcttA2K06pRQevZHpAo51NjE.mft (raw, json)
Hash identifier: H4mMPplEF3ajxc/ag06+mAIMrnb4hbzsxsfgxsfekHY=
Subject key identifier: 63:38:DE:13:69:0B:20:83:C6:37:B8:42:98:44:52:5F:20:94:73:C2
Authority key identifier: 9B:0A:45:72:DB:40:D8:AD:3A:A5:14:1E:BD:91:E9:02:8E:75:36:31
Certificate issuer: /CN=9b0a4572db40d8ad3aa5141ebd91e9028e753631
Certificate serial: 019A1EACBD3F0CECC74E824772E4015ECA63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwpFcttA2K06pRQevZHpAo51NjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.mft
Manifest number: 087A
Signing time: Sun 26 Oct 2025 04:00:28 +0000
Manifest this update: Sun 26 Oct 2025 04:00:28 +0000
Manifest next update: Mon 27 Oct 2025 04:00:28 +0000
Files and hashes: 1: LHiCbbUQ3ZJ_Cn3tRQllJOcd4bU.roa (hash: 0hquK8SkvqQbNfKEbYjZG0icP/g4QwK+sH8IO5xeaXI=)
2: mwpFcttA2K06pRQevZHpAo51NjE.crl (hash: DB3uRIOGI9i+d4ptiZmRUuk2g6nUacQSrHBj3b2TAGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mwpFcttA2K06pRQevZHpAo51NjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ac:bd:3f:0c:ec:c7:4e:82:47:72:e4:01:5e:ca:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0a4572db40d8ad3aa5141ebd91e9028e753631
Validity
Not Before: Oct 26 04:00:28 2025 GMT
Not After : Oct 27 04:00:28 2025 GMT
Subject: CN=6338de13690b2083c637b8429844525f209473c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:35:de:21:91:7c:95:a8:c1:59:92:e7:2e:0c:
b2:57:9e:24:74:b1:72:b8:e8:09:3e:3b:a4:a2:fa:
1f:20:a3:45:86:d9:82:67:46:33:7c:e2:ce:2d:72:
71:20:e3:cc:75:e5:f0:18:69:86:55:bf:43:b6:97:
32:87:cf:8a:67:c2:1f:59:98:26:9c:b4:70:9f:36:
fc:04:9d:9f:bd:c8:2c:47:79:74:31:80:04:df:95:
65:04:5a:31:b9:17:4d:17:30:ef:9a:ee:2f:e5:02:
cd:a3:52:5a:67:82:ac:6b:50:9e:ae:2e:35:ca:86:
36:d9:fd:f2:c5:67:23:02:ca:58:2d:cc:5d:9b:a9:
c7:c0:a4:03:96:d4:52:8d:98:63:5f:e5:73:e5:eb:
8b:e8:98:a5:8d:12:b9:ec:74:7a:6e:ef:56:58:af:
75:ab:0a:a3:02:8b:29:80:13:6b:9c:ad:4d:74:43:
c1:91:d2:d1:6d:e4:11:09:24:af:83:9e:7b:7b:58:
4e:8d:a6:85:d9:81:9d:eb:e7:b8:45:06:77:33:0f:
cb:76:3a:e3:a3:bd:6a:4b:ec:ba:9d:f6:45:97:13:
ef:6c:7d:c7:53:f5:a0:ad:ea:5e:05:6c:b4:4c:40:
44:2c:07:f4:52:2a:c9:81:aa:48:ee:cc:07:13:fb:
de:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:38:DE:13:69:0B:20:83:C6:37:B8:42:98:44:52:5F:20:94:73:C2
X509v3 Authority Key Identifier:
keyid:9B:0A:45:72:DB:40:D8:AD:3A:A5:14:1E:BD:91:E9:02:8E:75:36:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwpFcttA2K06pRQevZHpAo51NjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7e:4f:37:1f:38:60:94:4c:ac:74:d4:bf:55:7c:47:7b:54:
84:9e:76:88:b3:90:69:2d:59:c4:fe:2e:46:6e:0a:5e:ad:2a:
a0:ec:8d:35:61:bc:4e:d0:48:e0:1b:8b:c0:f0:4f:fd:8a:e2:
aa:82:57:c2:9d:cc:5d:1e:ca:99:78:7e:01:ab:57:4a:e3:5c:
c9:fc:f7:55:32:c5:fd:20:e0:56:39:68:53:ee:d0:26:71:9a:
f1:03:84:eb:97:f0:9e:7f:31:97:20:13:f3:25:d6:d3:36:70:
f8:4a:6b:c8:a4:cf:3d:56:05:84:77:7a:5f:d9:a5:05:90:9c:
c0:fa:12:42:c0:1e:ad:2c:47:6e:f0:bc:f2:11:99:e2:d1:b1:
f9:4d:7f:17:f8:92:51:1b:51:4b:43:79:fd:d0:45:04:79:c6:
ec:b8:4c:ce:f7:5c:ae:a7:44:a7:88:12:32:4f:9c:eb:f6:f5:
c9:e7:b2:2c:ef:8d:7f:5a:d2:c1:fa:c8:a7:09:cc:e9:a2:cf:
ac:db:2d:bc:0d:15:ac:87:10:4f:9f:36:6a:08:52:d5:4f:1b:
08:a9:1c:84:63:b7:6e:69:8b:4d:4c:31:e6:61:7d:58:2b:0c:
54:98:11:2f:cb:f7:e9:d6:c0:1d:48:f2:ae:b9:d3:8b:23:df:
94:98:a1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 07:04:49 2025 by rpki-client