Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
File: MWg4BbI9i3h9aSEFPX666XBAihk.mft (raw, json)
Hash identifier: zIQDtG2EFkU1zKqSXYkaKIaaWTopWAIUwiNc5jGzROI=
Subject key identifier: E0:81:4D:F6:1F:ED:F5:7B:3A:D0:60:93:45:C9:BA:B0:13:5D:32:6F
Authority key identifier: 31:68:38:05:B2:3D:8B:78:7D:69:21:05:3D:7E:BA:E9:70:40:8A:19
Certificate issuer: /CN=31683805b23d8b787d6921053d7ebae970408a19
Certificate serial: 019A711374FD38A2F189EEEA511008625580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
Manifest number: 0566
Signing time: Tue 11 Nov 2025 04:01:31 +0000
Manifest this update: Tue 11 Nov 2025 04:01:31 +0000
Manifest next update: Wed 12 Nov 2025 04:01:31 +0000
Files and hashes: 1: MWg4BbI9i3h9aSEFPX666XBAihk.crl (hash: aZCT0R3+GXZOsbIVXxR6/99c+zNCi2cfOWFK3tXb5wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:74:fd:38:a2:f1:89:ee:ea:51:10:08:62:55:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31683805b23d8b787d6921053d7ebae970408a19
Validity
Not Before: Nov 11 04:01:31 2025 GMT
Not After : Nov 12 04:01:31 2025 GMT
Subject: CN=e0814df61fedf57b3ad0609345c9bab0135d326f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e1:b5:c3:f8:4e:27:74:a0:12:9c:88:e2:f1:
11:d3:43:4a:21:79:3a:f6:b7:e9:89:47:bd:47:3f:
6c:63:03:3a:12:b6:9a:4b:de:71:37:b7:26:ae:63:
f9:57:d1:7e:30:1d:e5:59:c9:ad:a0:22:a5:b9:17:
af:7f:ac:cf:03:20:b5:dc:c7:5c:9c:a4:f2:e0:9f:
e9:a4:f2:9a:25:6c:a0:df:c0:6d:65:cc:6c:18:bb:
f3:01:46:ab:4d:19:1b:65:69:87:cc:1c:c9:34:f0:
21:a4:7f:b6:11:62:86:b7:aa:6a:9e:bc:f9:be:5e:
be:fd:54:51:83:66:c2:73:f7:2c:2a:f9:76:32:e6:
51:72:bf:5d:61:32:91:e5:28:c0:9d:4e:68:6a:81:
ca:c6:8a:3f:2e:91:7f:d3:b2:b2:a0:1f:36:ff:9b:
30:9f:88:23:ce:04:e0:ff:8f:e4:5d:fc:fd:86:61:
8e:ea:20:fc:61:c6:91:5c:1b:c8:a7:68:26:54:21:
3a:67:84:97:8b:64:d4:ed:f6:93:99:b2:00:ba:18:
c5:b8:b4:73:28:78:c3:e5:ae:7c:88:0c:b2:4c:38:
67:3d:b1:0a:fd:ca:33:34:e3:58:00:2b:ba:a6:3b:
05:d5:94:b2:50:ea:bb:a6:ae:10:94:57:a6:af:7e:
cf:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:81:4D:F6:1F:ED:F5:7B:3A:D0:60:93:45:C9:BA:B0:13:5D:32:6F
X509v3 Authority Key Identifier:
keyid:31:68:38:05:B2:3D:8B:78:7D:69:21:05:3D:7E:BA:E9:70:40:8A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:bb:0c:63:69:4c:af:fc:27:02:7b:07:48:cd:d7:e6:a9:f8:
33:e2:02:92:65:0a:17:b9:ca:a6:40:6d:dc:6c:29:dd:e5:f7:
a6:96:23:3c:f9:78:8d:0e:5b:13:d6:63:8a:db:c6:7c:03:0e:
cd:a2:41:a6:e4:59:4e:b4:28:8f:66:8b:3c:e6:fc:d7:eb:3f:
43:d3:51:11:86:5a:9f:cf:f0:92:28:a6:c1:6e:e0:be:ce:1b:
f7:4f:53:0f:14:53:ac:72:43:17:aa:96:a2:44:3a:76:b7:eb:
bc:ba:12:cb:25:e5:04:e1:4b:cf:c6:b8:e8:d2:c5:8c:41:f1:
66:db:1e:a5:f1:d1:d8:c7:77:59:57:d6:56:9c:4f:ef:24:c0:
e2:ba:fb:ae:60:60:ed:1a:91:e2:49:95:23:0d:f0:5a:49:e5:
c9:8b:0c:49:f5:d9:e7:38:e5:55:04:1b:20:9d:77:76:e2:4d:
23:58:2d:b6:04:d0:68:e4:15:67:a4:39:70:83:bb:ee:a9:3d:
c0:31:9a:23:aa:9a:87:07:39:d8:d8:fb:94:d5:79:a9:14:eb:
fe:4b:cd:04:c4:78:6c:fc:29:3c:e9:68:ce:86:ee:eb:99:52:
56:65:48:c3:20:af:32:18:fc:bb:fb:52:a7:08:35:45:cd:08:
2b:3c:c1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:48 2025 by rpki-client