Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
File: MWAAQeTs-YwxVdSPSXz20UNoMj4.mft (raw, json)
Hash identifier: fpjtanCZfLGboPRZxtPy3edx45AMTN7cFTgK5ZxjQ5Y=
Subject key identifier: 6E:BA:DF:3D:7D:09:49:A1:9B:01:45:69:08:E0:E7:7E:EF:6F:5B:F7
Authority key identifier: 31:60:00:41:E4:EC:F9:8C:31:55:D4:8F:49:7C:F6:D1:43:68:32:3E
Certificate issuer: /CN=31600041e4ecf98c3155d48f497cf6d14368323e
Certificate serial: 0199FCC68EE91FC00EDB181D664995F48873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
Manifest number: 029F
Signing time: Sun 19 Oct 2025 14:01:35 +0000
Manifest this update: Sun 19 Oct 2025 14:01:35 +0000
Manifest next update: Mon 20 Oct 2025 14:01:35 +0000
Files and hashes: 1: MWAAQeTs-YwxVdSPSXz20UNoMj4.crl (hash: 05nOdQs2s2WI9Fv0hIyWtIczLPcM8p48ru6UecMBN60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:8e:e9:1f:c0:0e:db:18:1d:66:49:95:f4:88:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31600041e4ecf98c3155d48f497cf6d14368323e
Validity
Not Before: Oct 19 14:01:35 2025 GMT
Not After : Oct 20 14:01:35 2025 GMT
Subject: CN=6ebadf3d7d0949a19b01456908e0e77eef6f5bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:60:84:23:8e:a9:94:b5:19:4f:d3:67:ca:87:
11:7f:3b:62:dd:f1:b9:36:22:42:73:06:42:84:f1:
84:86:12:8e:c5:21:00:0d:d6:a9:0a:d3:af:23:b0:
35:ae:b1:26:dd:24:68:f7:ee:4e:a0:0a:f9:65:c5:
bf:8a:ff:39:07:8e:a1:f9:f1:af:c7:4d:c5:dd:6c:
f5:98:01:b8:7e:80:89:31:e8:45:d1:7a:0a:97:36:
05:64:9e:66:2b:dd:ea:9a:e6:6a:61:38:87:03:54:
3b:d0:cd:db:a4:41:93:54:be:1b:95:f8:30:d3:31:
4f:1c:4c:e4:9d:6f:06:4e:ab:a4:64:35:a9:79:ea:
56:a5:99:de:41:12:f5:6b:60:f7:93:18:11:c3:d6:
51:c5:66:55:e9:ec:3e:76:33:9a:43:9b:6e:6d:c5:
19:bb:cc:08:25:24:e9:25:e1:1d:22:36:ca:91:f5:
bc:c9:73:09:3e:ea:6b:b5:d2:62:68:3a:6a:f3:dc:
2b:2f:f6:5f:46:ad:13:8a:f7:fb:28:22:0d:21:2d:
bd:58:7d:5f:01:ba:f8:29:73:d0:21:b7:40:69:2f:
15:13:cf:9c:61:c8:a7:20:11:03:bd:76:e5:0f:82:
b2:ee:2a:2a:89:52:6c:bb:a9:52:1f:51:a2:fe:d0:
65:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BA:DF:3D:7D:09:49:A1:9B:01:45:69:08:E0:E7:7E:EF:6F:5B:F7
X509v3 Authority Key Identifier:
keyid:31:60:00:41:E4:EC:F9:8C:31:55:D4:8F:49:7C:F6:D1:43:68:32:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWAAQeTs-YwxVdSPSXz20UNoMj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/869f64-02b6-4603-987d-9c36c222d8dc/1/MWAAQeTs-YwxVdSPSXz20UNoMj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:6a:95:2a:50:df:f4:79:5c:c3:1a:d8:28:bb:39:79:92:ca:
a6:c7:26:4d:79:cc:83:41:49:30:a5:de:f7:42:12:5e:12:7f:
b8:50:83:cf:72:b7:c3:2b:a9:a7:a4:d3:56:c4:94:d4:1f:5c:
2b:e7:61:07:73:ac:3a:3d:d7:4c:c0:f2:35:52:50:d6:b0:e2:
1d:22:f1:90:5f:69:47:3a:a1:09:13:f0:85:a8:56:b5:be:90:
69:34:8e:71:be:bb:c3:23:44:63:b5:ef:78:36:3c:de:43:5d:
c8:62:f2:1b:4b:c8:0a:58:93:ed:73:9d:c6:85:11:89:b2:e4:
a1:3e:a0:e9:28:7a:c2:bc:39:ce:a6:4a:7d:90:d7:0b:74:67:
3d:f6:38:cf:36:1a:a9:11:0b:56:b1:2e:6c:73:84:00:89:54:
9f:12:36:d1:fd:6a:60:b1:f9:d5:13:e8:4b:fd:99:df:f0:55:
6f:29:de:57:d2:12:e4:8c:28:cc:0e:42:93:ef:08:bd:68:f1:
c9:8f:87:c4:25:84:69:bf:4d:15:cd:8c:db:b2:38:f9:07:a2:
af:ea:ef:9b:d1:4f:bf:06:05:7c:19:11:ab:b8:ea:73:c1:93:
23:ff:e7:ea:b6:4d:86:dc:84:db:54:e8:7d:6a:d0:c7:38:fc:
d7:05:d4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:04 2025 by rpki-client