Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
File: mWsinL82Z6zid7FgBcOQctBnP88.mft (raw, json)
Hash identifier: NRcn8ZP/yPP8DH9/bNjQwww9twasYhgf5jYKeCPUrP8=
Subject key identifier: D0:49:B0:0D:83:18:CA:FB:D4:51:09:B9:E2:A3:48:4F:65:77:26:1B
Authority key identifier: 99:6B:22:9C:BF:36:67:AC:E2:77:B1:60:05:C3:90:72:D0:67:3F:CF
Certificate issuer: /CN=996b229cbf3667ace277b16005c39072d0673fcf
Certificate serial: 019A725C4892C02040C103BDD0A62A0531E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
Manifest number: 0585
Signing time: Tue 11 Nov 2025 10:00:41 +0000
Manifest this update: Tue 11 Nov 2025 10:00:41 +0000
Manifest next update: Wed 12 Nov 2025 10:00:41 +0000
Files and hashes: 1: YKl2f2IPF1HilabBLdWdBFhWqWU.roa (hash: Ji5xPVt5I1nXvu8659S7ksrNu2RDx/GRkGsd+dxvHXE=)
2: mWsinL82Z6zid7FgBcOQctBnP88.crl (hash: KnSwGW3xMNeTuNhxHoJ5lVITAU2fyACBEHViYAZyuS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:48:92:c0:20:40:c1:03:bd:d0:a6:2a:05:31:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996b229cbf3667ace277b16005c39072d0673fcf
Validity
Not Before: Nov 11 10:00:41 2025 GMT
Not After : Nov 12 10:00:41 2025 GMT
Subject: CN=d049b00d8318cafbd45109b9e2a3484f6577261b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ce:49:ec:9f:83:c5:98:d1:f5:4e:43:1f:e3:
a5:3e:52:8b:a7:0e:51:b0:fb:b7:1a:83:51:66:09:
37:2b:b7:c4:1d:c6:5d:ea:48:c8:97:7f:b6:e4:1e:
e5:68:be:e5:06:2f:27:d0:64:a1:14:58:69:8c:52:
65:94:11:04:1c:dd:bf:a9:d7:97:c3:1b:93:c4:82:
f5:29:8d:cc:fe:a5:32:d1:48:a6:34:cb:da:ff:a7:
99:dc:53:7a:ca:ea:2e:11:02:33:69:55:cb:07:e9:
32:76:a3:5a:5f:58:7d:90:bf:a2:90:82:80:34:0e:
a6:58:e8:c9:07:87:a3:e6:37:ad:32:08:c4:86:06:
de:61:11:82:70:ec:b1:31:9f:6a:74:68:4f:c0:ca:
7f:2c:a0:f7:b8:d8:b0:9d:72:55:f1:c0:18:45:1d:
45:27:f7:60:57:d9:32:da:9d:d8:ed:65:1f:e1:33:
6f:98:39:a4:83:a4:b5:f0:20:21:a9:9a:95:be:60:
d7:26:7c:b4:4c:97:58:4b:77:24:8c:4a:f7:c3:52:
00:65:05:ad:f4:c0:40:65:3b:42:5c:3a:56:b9:da:
ae:d2:b9:2c:81:4f:1a:6f:b0:aa:d6:92:41:c1:7a:
52:15:18:7a:9a:72:86:5d:46:bf:26:31:a0:04:66:
63:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:49:B0:0D:83:18:CA:FB:D4:51:09:B9:E2:A3:48:4F:65:77:26:1B
X509v3 Authority Key Identifier:
keyid:99:6B:22:9C:BF:36:67:AC:E2:77:B1:60:05:C3:90:72:D0:67:3F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:80:ac:07:56:0a:4e:58:f2:9a:68:24:9e:ee:9b:86:2f:0f:
b8:9a:d9:06:ca:55:c9:37:b7:4d:60:fa:20:6d:9e:55:19:9a:
4e:74:9e:4b:60:e3:89:ce:d2:6c:2d:e4:65:09:47:3c:de:3a:
8f:aa:ec:1a:7d:c9:e9:f1:4b:50:28:e9:99:ae:52:2a:1c:21:
b2:12:d1:50:e3:43:85:f8:bd:06:23:d1:4a:b9:e8:10:da:77:
9c:fe:71:2f:f7:7d:a4:92:59:2f:5b:61:d8:79:3d:26:c7:95:
15:fd:dc:bf:d0:a5:d0:bc:7f:87:5a:51:09:ed:07:61:be:c9:
2d:e9:01:d2:26:8e:30:db:53:9a:de:dc:7d:6c:08:fb:0f:7a:
6f:67:e1:e9:93:ba:3d:d0:7c:a1:00:30:04:cc:07:62:1c:1b:
e0:93:92:bc:1e:c4:08:e6:ab:22:1d:31:9f:ae:86:f2:0e:1e:
c6:0b:29:3a:03:eb:bc:7b:1c:a8:15:8b:62:d2:f1:01:0c:d9:
75:0b:c9:0a:24:51:f7:af:fe:52:7c:e1:83:f2:d5:de:17:33:
fc:1f:a1:60:59:16:59:f5:36:52:07:58:aa:3f:a0:ea:b0:e0:
5a:1d:df:e2:dc:6f:a9:5d:ac:7f:59:c6:cb:e2:91:cc:36:17:
66:16:d7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:43 2025 by rpki-client