Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
File: M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft (raw, json)
Hash identifier: EqvDBNgfrGGoAAaZtNYrFUcKDptxJ85mI7CdCnfUe6U=
Subject key identifier: E8:1C:C5:43:F0:2E:BA:06:AF:CA:BF:19:DA:85:01:E3:42:1E:83:FC
Authority key identifier: 33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7
Certificate issuer: /CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
Certificate serial: 019A0447C538E2D656D292ACB7897EE247AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
Manifest number: 16E9
Signing time: Tue 21 Oct 2025 01:00:03 +0000
Manifest this update: Tue 21 Oct 2025 01:00:03 +0000
Manifest next update: Wed 22 Oct 2025 01:00:03 +0000
Files and hashes: 1: M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl (hash: UclXA46ndSClsMWk+iK+NlO/Ae4Ai8LhAa6lQBne0tc=)
2: eLxT2po5eGPChIMxVAix9dVpqpQ.roa (hash: 14Qj0x8EmPtQ0Mh4TujmQH1/xIMT4aZ2EIL73Ur98dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 01:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:47:c5:38:e2:d6:56:d2:92:ac:b7:89:7e:e2:47:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
Validity
Not Before: Oct 21 01:00:03 2025 GMT
Not After : Oct 22 01:00:03 2025 GMT
Subject: CN=e81cc543f02eba06afcabf19da8501e3421e83fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5d:72:2b:7c:1a:01:5d:e1:05:ac:b2:22:7c:
76:a4:aa:77:e8:6c:be:fa:21:da:b7:0a:4b:08:fc:
c8:83:98:2e:d1:ce:6a:e9:cc:47:33:21:ab:41:86:
30:63:7d:a4:9c:56:68:06:d4:9d:d1:b7:91:2d:9f:
cc:5f:ba:44:62:b2:75:87:20:83:2f:e2:39:f9:ba:
c3:0b:b7:89:93:81:1b:55:1f:57:ee:72:f5:ae:77:
77:a0:f1:e5:44:65:e2:27:0e:bc:4d:ab:f3:70:e4:
27:28:9c:db:40:d9:41:14:ad:76:67:e8:0c:fb:af:
71:69:ec:80:97:fd:d5:1b:01:3f:03:82:68:8a:8f:
82:35:e9:17:3e:5f:73:d0:a6:34:de:2b:ac:c0:e6:
e1:b7:77:f5:79:1a:63:04:91:fd:32:92:37:0b:87:
48:fb:6f:01:34:0d:4b:dd:e4:90:55:01:92:0d:46:
1c:b4:40:c2:d8:13:e0:f4:d1:d7:89:30:70:a5:16:
b1:52:e2:c9:fc:0c:2b:3f:a5:1d:ec:f3:a4:3b:2b:
b1:c0:98:8d:22:49:b8:59:06:8a:ac:78:49:73:78:
e5:1c:2e:18:4a:9d:8b:5d:65:45:c9:1c:38:c5:e5:
72:f3:3a:11:74:37:d0:5c:7c:6c:40:0b:00:28:5e:
77:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1C:C5:43:F0:2E:BA:06:AF:CA:BF:19:DA:85:01:E3:42:1E:83:FC
X509v3 Authority Key Identifier:
keyid:33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:35:7b:3f:24:87:56:00:38:9e:cf:7e:da:04:c8:fe:b2:9f:
58:f8:08:35:73:b9:1f:f1:d3:f2:bf:4f:44:b1:ce:33:04:6b:
63:11:bb:1b:22:63:04:31:c3:b0:22:f4:24:66:48:e0:75:d4:
52:d0:2e:e2:01:ca:c2:3e:e9:bc:50:46:a8:4b:fe:09:99:45:
d3:17:15:c1:51:0e:5b:e8:95:f3:90:38:96:55:4c:43:10:fe:
59:16:6d:da:58:bd:91:76:2a:f7:d2:12:37:30:5a:fd:79:f7:
86:00:d8:60:11:83:eb:a8:e0:6d:23:9d:ab:5a:ae:ba:9f:55:
79:50:23:33:3b:40:66:c7:18:b0:a0:85:bf:72:b4:01:98:e2:
aa:00:28:64:80:bc:ff:fe:4c:b8:86:42:70:7b:ee:f8:b1:b7:
ea:51:2c:96:d3:44:c9:cd:94:b3:67:bb:fe:01:ba:ce:cf:9e:
30:92:eb:3d:29:a6:e4:55:86:44:69:19:fc:d3:38:20:ac:85:
7e:be:dc:4f:d8:83:2a:f9:d4:e2:99:e9:71:62:a3:db:de:38:
f7:df:52:d3:78:30:2a:13:61:74:2b:e9:eb:64:4e:ce:61:6e:
c9:a0:36:d3:13:5c:ea:15:8c:3c:11:ee:f2:f7:74:6d:30:c9:
1d:7b:07:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoER8U44tZW0pKst4l+4ketMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZmMxZTViNmM3ODhmYWY4ZmU5MzMxOTgxZDY1YjVmODY0
YjgwZjcwHhcNMjUxMDIxMDEwMDAzWhcNMjUxMDIyMDEwMDAzWjAzMTEwLwYDVQQD
EyhlODFjYzU0M2YwMmViYTA2YWZjYWJmMTlkYTg1MDFlMzQyMWU4M2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF1yK3waAV3hBayyInx2pKp36Gy+
+iHatwpLCPzIg5gu0c5q6cxHMyGrQYYwY32knFZoBtSd0beRLZ/MX7pEYrJ1hyCD
L+I5+brDC7eJk4EbVR9X7nL1rnd3oPHlRGXiJw68TavzcOQnKJzbQNlBFK12Z+gM
+69xaeyAl/3VGwE/A4Joio+CNekXPl9z0KY03iuswObht3f1eRpjBJH9MpI3C4dI
+28BNA1L3eSQVQGSDUYctEDC2BPg9NHXiTBwpRaxUuLJ/AwrP6Ud7POkOyuxwJiN
Ikm4WQaKrHhJc3jlHC4YSp2LXWVFyRw4xeVy8zoRdDfQXHxsQAsAKF53cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgcxUPwLroGr8q/GdqFAeNCHoP8MB8GA1UdIwQY
MBaAFDP8HltseI+vj+kzGYHWW1+GS4D3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTV93ZVcyeDRqNi1QNlRNWmdkWmJYNFpMZ1BjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81ZGNhOWQtNzNkZC00N2RjLTg1NDkt
YjFjNGRlODRlNzBlLzEvTV93ZVcyeDRqNi1QNlRNWmdkWmJYNFpMZ1BjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC81ZGNhOWQtNzNkZC00N2RjLTg1NDktYjFjNGRlODRlNzBl
LzEvTV93ZVcyeDRqNi1QNlRNWmdkWmJYNFpMZ1BjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjjV7PySH
VgA4ns9+2gTI/rKfWPgINXO5H/HT8r9PRLHOMwRrYxG7GyJjBDHDsCL0JGZI4HXU
UtAu4gHKwj7pvFBGqEv+CZlF0xcVwVEOW+iV85A4llVMQxD+WRZt2li9kXYq99IS
NzBa/Xn3hgDYYBGD66jgbSOdq1quup9VeVAjMztAZscYsKCFv3K0AZjiqgAoZIC8
//5MuIZCcHvu+LG36lEsltNEyc2Us2e7/gG6zs+eMJLrPSmm5FWGRGkZ/NM4IKyF
fr7cT9iDKvnU4pnpcWKj2944999S03gwKhNhdCvp62ROzmFuyaA20xNc6hWMPBHu
8vd0bTDJHXsH3A==
-----END CERTIFICATE-----
Generated at Tue Oct 21 10:49:01 2025 by rpki-client