Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
File: r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft (raw, json)
Hash identifier: YEmA6jN0Y/2DbDsEYAkWiRkRFVP56gyPIzZVFfL/tBU=
Subject key identifier: 76:93:CE:F4:EF:0F:52:FD:B3:42:A8:BE:C0:F9:20:E6:50:92:08:CF
Authority key identifier: AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D
Certificate issuer: /CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d
Certificate serial: 0199FC58600C5EE9054DB21EE73128950879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
Manifest number: 07ED
Signing time: Sun 19 Oct 2025 12:01:14 +0000
Manifest this update: Sun 19 Oct 2025 12:01:14 +0000
Manifest next update: Mon 20 Oct 2025 12:01:14 +0000
Files and hashes: 1: r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl (hash: gD/DWXrx2kj+WmNcCw/CfuWAwmrAOeMsGsM/xY1xcko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:60:0c:5e:e9:05:4d:b2:1e:e7:31:28:95:08:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d
Validity
Not Before: Oct 19 12:01:14 2025 GMT
Not After : Oct 20 12:01:14 2025 GMT
Subject: CN=7693cef4ef0f52fdb342a8bec0f920e6509208cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:31:bc:9f:9f:96:49:90:4a:ca:d9:60:e9:81:
30:26:80:a7:71:06:d4:40:a9:bc:e6:33:3a:72:5b:
3a:21:8d:9e:64:95:d1:8a:a9:17:a6:32:40:20:c4:
a8:41:ab:ab:d0:25:52:94:72:07:a1:6d:05:69:2e:
5c:2c:5a:76:ca:eb:b8:0f:46:af:75:a3:f6:49:29:
3c:d1:d1:10:16:9e:fb:57:e1:0b:b0:27:1c:a6:b2:
aa:86:3d:9c:e8:fd:0d:ca:c1:51:75:fd:64:91:bd:
a6:93:33:5b:29:04:78:5d:d4:3f:2a:0d:e4:77:21:
e8:3f:97:a5:8c:57:25:a2:15:30:07:d6:6c:8d:3b:
8c:b2:3a:9c:6a:d6:40:4f:50:a4:0d:d4:86:9d:77:
de:1a:22:f6:8f:53:52:52:92:d2:ac:67:23:36:79:
6b:63:d7:96:db:e6:b5:a9:30:e9:77:00:f8:3f:84:
05:bb:33:ab:dd:f8:3e:39:0e:73:79:70:05:0a:e6:
79:61:17:32:58:c0:62:22:6c:b4:43:1d:ab:30:80:
b5:56:0c:b1:33:eb:02:7e:44:8b:ea:2f:a0:f7:63:
9c:37:a2:39:99:ef:e4:f8:d5:b8:d5:52:4d:b2:cb:
2a:6f:5a:68:ab:90:bd:d5:b3:9a:7a:38:8a:6d:ab:
f4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:93:CE:F4:EF:0F:52:FD:B3:42:A8:BE:C0:F9:20:E6:50:92:08:CF
X509v3 Authority Key Identifier:
keyid:AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:fb:44:41:3a:6d:db:39:67:da:7a:5a:e2:73:7e:de:89:5a:
cb:0c:d7:ae:77:dd:1b:29:52:2e:13:a0:f9:63:6f:07:09:b1:
e0:5e:28:29:d6:41:fb:ec:77:1f:a0:48:d7:e1:65:56:7a:9e:
cf:68:2e:19:5d:bd:6e:15:f6:df:8d:31:7e:58:c6:87:72:c9:
c3:f3:ab:ed:59:34:fc:0e:78:1c:91:44:a9:79:03:fd:8b:74:
92:b8:03:fa:8f:5f:43:fb:bf:4a:f4:15:3f:fb:5e:93:56:7f:
e9:55:b4:cc:00:a2:19:32:09:c0:86:dd:55:63:3b:56:f4:73:
60:cc:a7:1c:d4:ef:91:e5:9f:8c:ee:fb:22:21:dc:47:b2:0e:
47:dd:3a:9e:af:ee:e0:98:aa:2f:ca:98:15:52:e8:1e:ab:7d:
f6:be:c0:18:d2:95:00:6c:a8:f4:f3:ef:5f:a1:8b:da:56:ae:
b5:fb:a2:f7:d2:28:49:8c:47:66:db:79:9b:61:49:ae:d7:da:
88:9e:6e:db:c3:ae:8e:8f:61:ac:88:3e:97:71:c6:dd:9b:b6:
7a:fb:be:f0:0f:0f:fd:f5:77:2c:9b:a0:59:02:c1:72:b6:62:
53:25:f8:d2:9e:48:8d:9c:e0:5c:a4:07:d9:3e:27:57:dc:38:
80:29:4b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:24 2025 by rpki-client