Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
File: M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft (raw, json)
Hash identifier: AjeGO7oUIM81xwrmYCE0aODMp9TX46DUndh4jjyYnTg=
Subject key identifier: 95:6C:3E:F2:CC:E8:AF:5B:A1:86:10:65:38:D1:B4:32:2E:10:B1:08
Authority key identifier: 33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7
Certificate issuer: /CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
Certificate serial: 0198D515C57F0AB4210D766B7F903D26BC02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 04:00:30 +0000
Manifest this update: Sat 23 Aug 2025 04:00:30 +0000
Manifest next update: Sun 24 Aug 2025 04:00:30 +0000
Files and hashes: 1: M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl (hash: 198AqGSGmKpPWo627YBghGylBgXDSDeAI/KPGWQOD9E=)
2: eLxT2po5eGPChIMxVAix9dVpqpQ.roa (hash: 14Qj0x8EmPtQ0Mh4TujmQH1/xIMT4aZ2EIL73Ur98dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:c5:7f:0a:b4:21:0d:76:6b:7f:90:3d:26:bc:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
Validity
Not Before: Aug 23 04:00:30 2025 GMT
Not After : Aug 24 04:00:30 2025 GMT
Subject: CN=956c3ef2cce8af5ba186106538d1b4322e10b108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:7a:35:14:84:b2:c5:9c:21:f9:a2:38:68:
38:c2:81:4a:94:60:b9:de:0c:ac:67:15:7d:71:83:
6b:0c:8c:a5:9d:08:d9:62:fd:04:43:d0:13:90:48:
70:6e:0c:d6:ac:b4:5b:3e:90:36:38:17:30:8f:e7:
10:41:1b:e4:95:40:de:c0:b1:83:92:a1:a2:1d:37:
89:7b:3d:89:3f:78:c4:80:48:a0:5c:8f:cf:f4:aa:
ed:ec:1b:2c:02:24:c2:f2:90:f0:20:34:db:85:47:
a9:59:af:59:55:2f:2b:a3:27:35:ed:4d:7c:2e:79:
8f:84:49:53:8a:b9:a5:86:d0:b5:d9:7c:e0:69:33:
de:60:29:44:44:16:4e:5c:44:07:55:f2:04:6b:dc:
b8:90:d1:f7:87:68:b5:7a:74:9a:ee:9e:00:a2:29:
b6:03:b1:3c:ac:c8:53:2f:8e:6a:bf:be:bd:6d:ec:
a8:ec:b2:96:12:5b:24:73:d7:ee:c8:5f:58:dc:55:
aa:79:64:fc:4a:f7:d1:72:6d:c3:08:88:92:33:a4:
48:fc:10:ce:e2:28:75:be:c1:52:89:fb:4a:b0:82:
d7:a5:cb:87:ce:91:5a:6b:a2:07:a2:b3:f4:91:a0:
45:26:5a:b8:7d:36:4c:45:e2:56:32:3a:47:54:2b:
37:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6C:3E:F2:CC:E8:AF:5B:A1:86:10:65:38:D1:B4:32:2E:10:B1:08
X509v3 Authority Key Identifier:
keyid:33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4f:ce:75:71:92:a1:86:80:81:33:05:b2:54:26:bb:65:84:
b4:cf:69:48:d4:ed:7b:79:db:35:b0:16:81:c6:24:2d:16:a7:
4d:b0:30:65:69:84:75:da:ef:7a:d6:ab:69:bc:91:ac:ca:bd:
c5:ce:ab:d8:e0:64:9f:c7:f4:50:72:d3:26:09:1f:42:d4:03:
ce:b3:e8:2e:fb:2e:2c:60:9b:59:06:45:58:63:fd:e0:49:2c:
52:ec:17:cf:24:37:f8:36:83:61:6a:cc:f7:f1:8b:50:bc:fd:
db:e2:e1:42:47:46:4d:e1:5c:08:44:3c:51:29:9b:70:84:e7:
f5:a5:ee:30:e2:7b:b1:38:9e:e8:81:ed:62:c3:7c:8a:c4:53:
0e:9a:72:85:62:c3:19:23:d1:36:11:0c:67:7e:78:bb:1b:73:
79:95:2c:01:41:aa:1d:0c:3b:5a:dc:00:f3:a0:8e:4e:e4:8d:
ac:64:29:3b:e4:0c:e0:6f:9e:ce:e7:44:ab:6c:4e:77:e0:58:
c3:c7:87:e9:43:08:d7:9d:99:26:a5:80:fe:92:a4:6f:79:16:
1a:c7:1f:02:42:0a:22:44:89:71:06:7d:d6:f7:8b:d2:8f:54:
5d:dc:40:dd:0c:d4:e1:bc:14:f4:07:79:6d:67:f8:1d:5f:9d:
61:f2:ef:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:32 2025 by rpki-client