Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
File: MW9DO7TO3XLYbETthZmQNSK15PE.mft (raw, json)
Hash identifier: rygAhykTJ+GRJrLlaBEnmRoZOy393a/8ntLMTk+Q6Oo=
Subject key identifier: 61:02:CD:DD:7A:AD:85:6C:43:47:2A:B0:EA:0A:2B:FE:C6:AE:9F:E4
Authority key identifier: 31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1
Certificate issuer: /CN=316f433bb4cedd72d86c44ed8599903522b5e4f1
Certificate serial: 0197B7454EA2937A8928DFC9FF6212A375EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
Manifest number: 1095
Signing time: Sat 28 Jun 2025 16:01:01 +0000
Manifest this update: Sat 28 Jun 2025 16:01:01 +0000
Manifest next update: Sun 29 Jun 2025 16:01:01 +0000
Files and hashes: 1: MW9DO7TO3XLYbETthZmQNSK15PE.crl (hash: ji9gnFRqaOzuFUcxl/CxMQa9jehP3wCOVeAbQGM/lkc=)
2: ueb8jWjZsgheztsTNqHl1-Lrnro.roa (hash: bi/jdKM4OGa/0sgftxqgBQAErRWTNtYfIJIP4pXeceo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:4e:a2:93:7a:89:28:df:c9:ff:62:12:a3:75:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=316f433bb4cedd72d86c44ed8599903522b5e4f1
Validity
Not Before: Jun 28 16:01:01 2025 GMT
Not After : Jun 29 16:01:01 2025 GMT
Subject: CN=6102cddd7aad856c43472ab0ea0a2bfec6ae9fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:71:76:9f:38:ef:e7:c0:3c:be:2f:ea:51:f3:
6b:5b:a2:a6:d6:89:a5:53:e0:e0:3d:58:d6:08:b3:
26:46:9b:fe:73:91:63:47:1a:c7:95:2e:5a:53:28:
7c:11:22:cf:ee:65:61:ce:fc:6a:42:68:3e:63:e7:
ab:a9:c2:7c:63:48:86:57:b9:2c:e1:ec:0f:9b:85:
a4:c6:e2:56:94:28:38:54:77:e2:9a:3f:53:50:5f:
40:58:84:08:91:fc:ea:40:61:73:9e:69:18:bc:e0:
0e:8a:45:62:30:ee:79:7b:01:35:58:f1:ee:4a:d0:
3c:97:f8:43:82:65:ce:86:5b:7b:69:cf:10:e9:5c:
33:55:ba:fa:cd:8b:0a:2c:30:23:61:1a:96:a7:4d:
f7:d1:66:57:3f:d4:ad:aa:69:82:1d:1b:17:ec:9d:
e8:04:5b:5f:1b:ed:7e:1e:2d:5b:fe:c6:7d:44:46:
c0:b3:58:65:22:dd:05:41:3b:95:5d:b6:09:05:eb:
3c:11:f6:e5:50:e8:ee:b0:4c:05:ee:78:87:4f:df:
a9:d6:6f:e2:6b:a7:a4:16:88:a2:d7:ec:82:35:06:
8a:d6:2f:e3:38:1a:22:74:72:87:a5:c8:ef:c0:ac:
7a:01:df:b3:76:0c:b2:e5:7c:dc:5e:6c:f6:4c:00:
e6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:02:CD:DD:7A:AD:85:6C:43:47:2A:B0:EA:0A:2B:FE:C6:AE:9F:E4
X509v3 Authority Key Identifier:
keyid:31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:51:1d:73:87:01:d3:20:c0:1b:52:b4:6e:5a:29:54:ed:ed:
13:c9:bb:76:01:e3:87:ea:fa:54:ad:7d:a4:0e:1e:30:6a:c2:
30:8c:c1:8e:c5:9a:2d:9b:60:18:1d:93:19:8d:65:56:cb:85:
1b:3c:cb:82:41:60:ec:1a:2d:b3:a7:bd:8a:fa:7d:1b:be:e2:
1c:2d:62:19:85:ff:48:db:ea:94:73:ac:5d:0e:f8:e6:75:03:
dd:16:e1:9f:3d:dc:3c:31:26:8a:e0:c3:62:12:d7:de:75:dd:
38:e2:61:78:17:bf:21:66:70:06:5a:ba:39:89:7e:55:57:af:
fd:4e:d0:de:d8:92:72:85:a1:dc:f6:74:d7:3b:03:f7:2d:74:
e9:25:a9:6a:2d:53:f6:d9:30:b1:39:13:ff:a3:96:38:7b:ea:
dd:fe:19:c6:ee:bf:09:40:3a:b8:f0:be:2d:80:77:24:38:95:
52:ea:f2:e1:2d:97:10:3a:da:80:16:8a:38:b6:4e:9a:a3:c0:
a3:17:9d:54:49:ff:ac:fc:35:bc:55:88:b3:37:50:7d:db:93:
36:c3:0f:bf:6c:fd:2b:65:19:d9:cb:0b:f3:51:7f:d1:27:d4:
09:5d:87:f4:8b:b7:75:44:57:a3:44:94:cf:3b:e8:e0:7d:67:
89:69:e9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:32 2025 by rpki-client