Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
File: MWAAQeTs-YwxVdSPSXz20UNoMj4.mft (raw, json)
Hash identifier: 9Ca/MIdFcLvxtFXhVYtWQNzIxZIRCDYd6FDMtnp5FRw=
Subject key identifier: 12:63:64:2C:B0:59:DF:2A:9E:6C:44:A4:2B:8D:F6:73:18:E5:C7:4E
Authority key identifier: 31:60:00:41:E4:EC:F9:8C:31:55:D4:8F:49:7C:F6:D1:43:68:32:3E
Certificate issuer: /CN=31600041e4ecf98c3155d48f497cf6d14368323e
Certificate serial: 0198D73BCE3AD1E5E0557FE082659950AC7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
Manifest number: 0207
Signing time: Sat 23 Aug 2025 14:01:17 +0000
Manifest this update: Sat 23 Aug 2025 14:01:17 +0000
Manifest next update: Sun 24 Aug 2025 14:01:17 +0000
Files and hashes: 1: MWAAQeTs-YwxVdSPSXz20UNoMj4.crl (hash: 6A2Bu3EmaQt0pSPG301PJL/2ntqyRbNHztrJO8RZ+CA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:ce:3a:d1:e5:e0:55:7f:e0:82:65:99:50:ac:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31600041e4ecf98c3155d48f497cf6d14368323e
Validity
Not Before: Aug 23 14:01:17 2025 GMT
Not After : Aug 24 14:01:17 2025 GMT
Subject: CN=1263642cb059df2a9e6c44a42b8df67318e5c74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3d:fc:13:37:37:72:f5:9b:83:8b:e7:78:91:
bf:ab:58:73:81:17:7c:bc:98:d1:83:b2:f6:08:b3:
02:42:9a:f2:21:fb:c9:78:80:01:9e:ce:d0:99:b6:
d8:93:49:ea:33:83:af:46:d7:82:71:c0:89:a0:2b:
dd:7e:30:d7:67:3e:49:bd:0a:b8:84:d3:cc:f5:95:
a5:62:5a:de:24:8a:f3:ee:bd:59:bd:c6:e4:f0:d7:
c0:95:28:ce:be:02:97:dc:71:f7:6a:c1:19:d8:26:
12:21:ad:26:6c:53:4a:f7:ee:91:23:dd:85:a1:de:
2d:c2:f0:25:15:ec:04:4c:a5:a5:5b:f4:71:6e:2d:
02:ea:63:55:76:88:eb:c5:6e:8d:2e:f1:b1:4d:f9:
2f:52:96:91:9e:71:a4:19:33:0e:1e:30:90:ef:87:
20:ed:14:76:fa:38:3a:64:63:d8:4e:27:b8:cc:a8:
05:2f:6a:d2:31:9e:42:7d:66:89:30:7a:6e:11:0d:
a3:7b:97:5f:4f:93:a2:2a:aa:ca:52:9a:74:a7:28:
67:84:77:53:6b:f5:08:f2:3d:97:7a:c9:4f:a8:fc:
ae:02:50:e7:3a:75:b0:d0:5b:eb:bb:96:91:f4:0f:
56:01:d5:29:c0:31:25:b1:90:77:01:a7:dc:ba:21:
01:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:63:64:2C:B0:59:DF:2A:9E:6C:44:A4:2B:8D:F6:73:18:E5:C7:4E
X509v3 Authority Key Identifier:
keyid:31:60:00:41:E4:EC:F9:8C:31:55:D4:8F:49:7C:F6:D1:43:68:32:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:41:06:2a:16:65:0d:9f:1b:8e:31:29:66:ce:a7:e6:26:f5:
b0:82:e5:66:74:d9:25:9b:56:21:f9:89:27:18:b2:f1:39:fc:
4f:29:da:d6:af:73:c0:ed:d8:f4:2e:a5:0a:a5:4b:06:03:c2:
c3:b8:57:07:e1:17:86:c7:99:52:fe:c8:38:1b:bf:58:b0:89:
25:cb:47:aa:83:05:e9:76:4a:b1:5e:8b:6e:dc:d4:33:1f:a5:
70:d0:72:cf:ff:27:c9:2f:2e:dd:cb:11:01:1b:06:19:ff:f7:
64:8c:41:13:36:05:99:b5:8e:b7:32:90:a4:15:3c:b4:ef:49:
7b:4d:ce:fa:7b:88:41:82:be:b1:5f:4a:c0:41:34:d9:5c:e4:
08:a5:eb:66:c0:32:8a:4a:cb:94:2a:c7:a3:45:48:8a:23:63:
28:7c:22:b6:2a:0b:ac:41:3c:c7:f5:89:17:cb:8f:e0:70:de:
97:85:8e:ac:54:20:4b:bf:61:3f:e8:e2:d1:14:1f:ae:d6:f2:
4a:51:a0:c4:d9:61:33:77:eb:7b:82:d7:be:9e:eb:4f:33:c2:
d4:e0:be:e2:89:9e:b9:22:ab:ed:22:d2:1e:99:dd:ca:3f:85:
23:cd:34:80:7c:52:54:c1:3b:50:dd:69:38:d6:b6:ca:b3:4c:
38:87:d9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:23:20 2025 by rpki-client