Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
File: Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft (raw, json)
Hash identifier: PTGc9y1aNnuFp6VIwTaojsUKPO4pHGPtGSnlLufBlw0=
Subject key identifier: 1B:E2:AA:3F:A4:F9:BD:BC:F0:27:4A:25:1A:66:7E:F1:B1:34:B5:47
Authority key identifier: 33:0E:3F:DB:11:D8:26:BC:01:66:32:90:BD:7C:A4:06:B8:D7:65:07
Certificate issuer: /CN=330e3fdb11d826bc01663290bd7ca406b8d76507
Certificate serial: 0199FBEAE691FA52270032A123759A60BAE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
Manifest number: 0DC6
Signing time: Sun 19 Oct 2025 10:01:39 +0000
Manifest this update: Sun 19 Oct 2025 10:01:39 +0000
Manifest next update: Mon 20 Oct 2025 10:01:39 +0000
Files and hashes: 1: DT1onb-4ObKDzalYYHYuQuaaeIo.roa (hash: vu1nm9V8jbxKLGzlJsgL+mHK04vH81jI0saGvnr/HOw=)
2: Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl (hash: RQ4Wfn7qxeI+6R8niDo7fbkWPMuAYzyj2+yWqsb7+IU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:e6:91:fa:52:27:00:32:a1:23:75:9a:60:ba:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=330e3fdb11d826bc01663290bd7ca406b8d76507
Validity
Not Before: Oct 19 10:01:39 2025 GMT
Not After : Oct 20 10:01:39 2025 GMT
Subject: CN=1be2aa3fa4f9bdbcf0274a251a667ef1b134b547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7a:41:b3:cf:d9:4d:f9:c4:2a:77:ed:6e:42:
9d:49:1a:21:10:09:70:73:da:0c:b0:be:7d:00:57:
65:91:4d:28:21:58:92:cf:f1:ef:ae:4d:3e:c6:dd:
47:5a:bc:58:87:f6:e6:80:2a:ec:8f:c4:8f:71:d9:
a6:bf:84:0d:07:24:8a:92:63:60:6f:60:63:22:77:
e6:18:06:8c:22:27:0b:23:bf:39:eb:6e:59:70:74:
78:c6:86:85:18:f2:51:cb:c4:59:77:fd:4d:26:0f:
42:fe:97:50:f8:a1:b6:fc:d2:ea:c5:7b:7d:e0:a7:
38:61:2e:50:01:37:ef:d6:e8:75:1b:9b:99:ba:cd:
36:53:c1:e0:87:e9:e1:83:fd:05:75:ed:4f:90:49:
be:b8:d0:5e:fc:ab:8b:ee:0a:b2:9c:8c:79:45:dd:
10:5d:54:9e:33:37:c3:63:a7:f0:3d:5b:1e:41:c6:
23:0c:a8:b7:b9:a6:a0:33:ab:a8:2b:d7:b2:99:5b:
19:6e:73:73:e1:11:7c:01:43:8a:16:73:27:ac:0f:
5b:06:a5:8a:78:59:70:c3:dc:83:52:61:7e:8b:90:
ac:d9:52:69:f5:66:2a:92:54:eb:d0:ac:9b:c2:16:
02:11:fa:9d:77:80:11:72:f4:aa:b5:c1:e0:53:8d:
bc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E2:AA:3F:A4:F9:BD:BC:F0:27:4A:25:1A:66:7E:F1:B1:34:B5:47
X509v3 Authority Key Identifier:
keyid:33:0E:3F:DB:11:D8:26:BC:01:66:32:90:BD:7C:A4:06:B8:D7:65:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c9:95:a6:fe:98:e9:bc:6f:7c:52:45:28:04:aa:4b:c5:a3:
af:2b:1f:28:4f:52:3a:45:ba:8e:6e:13:5d:4d:83:8a:d7:8f:
63:76:50:bf:a5:92:52:c2:92:32:1a:5f:1b:3f:44:a3:56:77:
cc:d7:86:6a:75:cb:77:26:26:9d:4e:ea:0f:2d:3a:59:f1:58:
25:4e:9e:7c:dc:8a:4a:f2:4e:d5:64:55:e7:1b:5b:ae:46:0c:
dc:4e:56:ff:69:28:c9:25:13:5f:0f:12:f0:12:c0:82:92:bd:
87:2f:de:6f:16:86:f7:4e:f4:b0:ae:64:ed:b6:d6:aa:c4:86:
c3:4d:fc:47:39:32:01:af:01:39:07:0e:11:02:a3:9c:7a:14:
39:66:c4:7a:07:71:5f:14:1f:bd:76:f7:e3:21:d9:e6:0d:0b:
91:70:f1:08:85:6c:26:c5:51:d6:43:76:bb:15:44:31:03:52:
5a:73:23:fb:e6:a6:cc:98:b9:ec:f1:23:0e:ca:11:0c:27:60:
90:e8:86:2b:64:ed:9a:3e:20:2f:94:6a:78:0d:da:ba:8a:85:
d3:4c:6d:c2:ae:e1:e5:df:5a:39:b7:bd:61:6a:e6:06:45:d4:
ce:d7:0c:93:6f:eb:2f:07:12:ef:04:7c:84:9c:b7:25:4c:74:
1d:92:5f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:57 2025 by rpki-client