Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.mft
File: MW2V2INsHxFqce4h3sD_Zx4eBw0.mft (raw, json)
Hash identifier: 8BC0v8gra/xRAt41Vm/h6p7VPRt4i1KPF6zxxSGE7nE=
Subject key identifier: 4A:BE:C6:0F:4C:19:88:0A:BC:0A:E1:FB:56:B3:E0:F6:96:AA:B2:A5
Authority key identifier: 31:6D:95:D8:83:6C:1F:11:6A:71:EE:21:DE:C0:FF:67:1E:1E:07:0D
Certificate issuer: /CN=316d95d8836c1f116a71ee21dec0ff671e1e070d
Certificate serial: 019A714A17F598693C8B7F4942C2D33BFA59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MW2V2INsHxFqce4h3sD_Zx4eBw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.mft
Manifest number: 0DFF
Signing time: Tue 11 Nov 2025 05:01:12 +0000
Manifest this update: Tue 11 Nov 2025 05:01:12 +0000
Manifest next update: Wed 12 Nov 2025 05:01:12 +0000
Files and hashes: 1: MW2V2INsHxFqce4h3sD_Zx4eBw0.crl (hash: fXb/4JzfUU+yjFNf/6PVL+vTWXJzUAgXEANYI2fIG8I=)
2: NaSNw-5nplSi1oWgCIXAtq-282g.roa (hash: PHVRipc0hRgzJt/VWrGp9MNvQSbNc+wyfThzb/6H1hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MW2V2INsHxFqce4h3sD_Zx4eBw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:17:f5:98:69:3c:8b:7f:49:42:c2:d3:3b:fa:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=316d95d8836c1f116a71ee21dec0ff671e1e070d
Validity
Not Before: Nov 11 05:01:12 2025 GMT
Not After : Nov 12 05:01:12 2025 GMT
Subject: CN=4abec60f4c19880abc0ae1fb56b3e0f696aab2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7f:d3:ef:12:b2:63:ae:2f:1e:46:9a:09:b3:
d4:59:9f:bd:07:e4:8f:46:22:77:d0:8d:13:92:f4:
32:fb:e9:cd:5a:ae:f5:ee:7d:98:06:93:2f:8c:ab:
80:5e:cd:ef:74:e4:18:65:fb:7f:65:d1:cc:17:56:
1f:45:80:c1:98:27:de:d8:6b:e1:4a:2c:e0:1c:cb:
13:52:cf:6e:9c:e7:56:4d:fb:99:c1:f0:3c:e8:de:
00:fa:bd:5c:81:dc:72:e6:b4:46:c2:37:99:a9:f6:
fe:94:fc:db:93:dc:92:8f:b1:7d:08:bb:53:3f:6d:
f1:76:f3:2b:00:f5:ac:b6:bd:8a:41:66:65:5c:2a:
28:89:68:be:52:a1:fb:4d:45:46:2c:c5:63:a8:69:
7f:ac:6f:03:b2:59:04:c7:d5:e7:f1:4e:42:c4:83:
56:f6:85:92:ab:db:90:ba:a9:9f:d7:24:5e:eb:47:
b1:95:a5:89:d8:0e:c9:38:9f:e0:19:6b:22:b0:56:
83:68:32:05:4f:6e:09:ee:d2:5c:2d:57:73:db:17:
8f:4c:26:77:8a:03:87:ee:b0:72:39:1a:e8:b2:1e:
df:d5:ba:ba:dc:62:2d:11:9e:f6:9a:1d:2b:69:c8:
8a:84:c5:16:1a:be:81:53:7f:81:58:a5:90:c2:90:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BE:C6:0F:4C:19:88:0A:BC:0A:E1:FB:56:B3:E0:F6:96:AA:B2:A5
X509v3 Authority Key Identifier:
keyid:31:6D:95:D8:83:6C:1F:11:6A:71:EE:21:DE:C0:FF:67:1E:1E:07:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MW2V2INsHxFqce4h3sD_Zx4eBw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:3d:f8:0e:45:9c:27:c0:0f:4c:cf:08:58:68:55:84:fc:c8:
96:c8:7b:10:f1:c2:42:64:8f:e6:c9:c1:c5:d7:0f:09:46:37:
b6:b0:42:0b:f9:2a:73:c6:f9:aa:9a:20:8c:68:1f:d0:1b:2e:
77:bd:36:71:cf:77:e7:35:35:88:2a:32:37:db:c6:c9:d8:64:
7e:88:5c:bb:cf:b3:6d:e3:ab:14:dc:8b:20:a0:c2:31:8c:d9:
18:9e:b3:1d:e1:ad:3c:dc:b5:cd:6b:c3:5f:a8:86:d5:b7:66:
79:b6:b3:23:89:c9:0f:36:13:b5:80:5a:f7:4b:d6:36:19:df:
11:79:db:fc:c8:00:e3:26:ee:53:31:80:2b:8b:4d:65:fc:91:
c6:3b:e7:7e:76:ae:ca:fa:e1:58:89:5c:3f:fa:32:cf:31:c7:
76:5d:a1:a9:44:3f:b8:a3:3a:9f:2f:21:e8:cb:38:cc:e4:6b:
ca:8b:86:10:12:5b:9d:11:6d:9d:8d:6e:1e:51:3e:fd:2a:08:
9b:79:61:42:3e:59:91:c3:3b:4f:6d:ea:82:ac:74:02:34:c3:
38:17:e6:c2:83:78:32:bd:4e:6c:eb:d4:77:cf:0d:59:c6:ac:
23:69:56:54:06:d2:53:02:ef:b1:fd:5f:a6:4e:6e:74:c3:c8:
10:75:2b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:40 2025 by rpki-client