Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
File: MWg4BbI9i3h9aSEFPX666XBAihk.mft (raw, json)
Hash identifier: L8LM1YrRL/m8KCy/KEpSBr2CzUdsQNrN94AX23GVlG0=
Subject key identifier: AA:4B:C4:A9:9F:25:06:0D:CA:80:4E:64:5E:EE:65:FF:6B:C7:0D:E9
Authority key identifier: 31:68:38:05:B2:3D:8B:78:7D:69:21:05:3D:7E:BA:E9:70:40:8A:19
Certificate issuer: /CN=31683805b23d8b787d6921053d7ebae970408a19
Certificate serial: 0198D5BB97AC5D26845CC98837B69ED2FE61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
Manifest number: 0491
Signing time: Sat 23 Aug 2025 07:01:37 +0000
Manifest this update: Sat 23 Aug 2025 07:01:37 +0000
Manifest next update: Sun 24 Aug 2025 07:01:37 +0000
Files and hashes: 1: MWg4BbI9i3h9aSEFPX666XBAihk.crl (hash: D+ciGv84b39Z/nfjeIp4Uq7QVHUp78aN/IJPEVbNAwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:97:ac:5d:26:84:5c:c9:88:37:b6:9e:d2:fe:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31683805b23d8b787d6921053d7ebae970408a19
Validity
Not Before: Aug 23 07:01:37 2025 GMT
Not After : Aug 24 07:01:37 2025 GMT
Subject: CN=aa4bc4a99f25060dca804e645eee65ff6bc70de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0c:bf:c4:ff:57:df:8f:1d:5b:e4:b8:cf:85:
19:24:21:74:47:4d:8d:ed:f8:e6:33:25:74:f1:8b:
6a:be:76:06:e6:f0:48:3e:e9:93:49:86:1f:ec:50:
0f:5f:d9:82:d2:c4:4b:33:eb:8a:dd:a9:4b:14:a4:
1b:f2:3b:d7:f7:74:61:16:01:26:1c:cd:43:23:fa:
5f:73:52:62:28:41:0c:78:b5:cd:ef:a8:b3:66:ad:
3d:16:02:82:be:b4:bd:9d:96:7e:13:39:3d:72:4f:
14:02:2c:a3:99:55:2a:cb:61:59:3f:42:a4:8a:fe:
7b:96:ef:9c:ae:8d:f3:99:5f:c7:b6:64:ee:02:5c:
a2:47:2d:da:78:b4:40:c1:b1:aa:8f:8a:6c:61:69:
96:10:a5:a2:2c:a4:18:6d:f2:91:14:70:d9:c7:a6:
e0:0a:08:1d:77:6c:fe:a3:9b:16:cc:5e:c9:25:24:
03:a0:ea:03:50:de:2c:70:34:8f:e0:cb:12:e9:1a:
a3:ae:d6:28:e9:7c:05:a6:5a:b5:59:74:59:74:ba:
1b:17:06:b1:3a:00:7c:c5:30:e1:50:15:8c:e9:cd:
77:29:f1:ef:23:ee:dd:eb:96:83:32:e0:c2:8c:a0:
80:95:3e:60:84:7d:30:3c:13:77:3b:1c:8d:0c:df:
bb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4B:C4:A9:9F:25:06:0D:CA:80:4E:64:5E:EE:65:FF:6B:C7:0D:E9
X509v3 Authority Key Identifier:
keyid:31:68:38:05:B2:3D:8B:78:7D:69:21:05:3D:7E:BA:E9:70:40:8A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:2a:ec:6a:a6:d3:69:8e:06:d5:45:ff:05:58:4b:d1:23:c4:
30:cb:34:36:71:41:fa:bf:b4:7e:fd:8e:1e:59:74:e1:ee:8b:
d6:37:3a:33:04:e1:42:9a:7e:41:a2:e2:3a:8b:1d:93:0e:99:
b8:f4:df:8d:d1:34:b1:b1:e5:95:f3:5e:b5:d4:88:51:0e:e6:
f2:62:e3:44:ee:0c:cb:30:33:01:68:56:99:3f:ce:37:90:7f:
72:78:01:ab:93:ce:8f:1d:7d:b5:ab:6c:50:47:b5:b0:cf:47:
15:2d:d3:76:9e:40:16:43:c2:64:13:24:2a:fd:4a:e1:b3:b8:
57:30:03:23:bd:e5:08:2b:8b:ff:29:d3:0e:45:96:28:98:93:
24:d9:af:0d:d0:78:ab:8a:16:91:4e:51:92:c8:76:d8:cd:3c:
5a:87:29:47:13:fd:fb:9f:cd:57:f3:03:9d:33:a9:8f:5e:7d:
4c:d4:c9:80:76:08:b8:8d:4f:d9:cd:16:33:1c:bd:29:c5:b3:
63:2c:f5:80:af:6c:51:88:a4:13:ca:da:19:46:62:b5:52:bb:
31:cd:4d:e9:d8:1e:96:66:a2:b6:ee:0c:24:d4:50:65:a9:3d:
40:d2:8d:d1:22:12:e5:e8:90:e8:4f:7f:c2:1f:40:cf:8c:c9:
5a:4b:9c:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu5esXSaEXMmIN7ae0v5hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxNjgzODA1YjIzZDhiNzg3ZDY5MjEwNTNkN2ViYWU5NzA0
MDhhMTkwHhcNMjUwODIzMDcwMTM3WhcNMjUwODI0MDcwMTM3WjAzMTEwLwYDVQQD
EyhhYTRiYzRhOTlmMjUwNjBkY2E4MDRlNjQ1ZWVlNjVmZjZiYzcwZGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQy/xP9X348dW+S4z4UZJCF0R02N
7fjmMyV08YtqvnYG5vBIPumTSYYf7FAPX9mC0sRLM+uK3alLFKQb8jvX93RhFgEm
HM1DI/pfc1JiKEEMeLXN76izZq09FgKCvrS9nZZ+Ezk9ck8UAiyjmVUqy2FZP0Kk
iv57lu+cro3zmV/HtmTuAlyiRy3aeLRAwbGqj4psYWmWEKWiLKQYbfKRFHDZx6bg
Cggdd2z+o5sWzF7JJSQDoOoDUN4scDSP4MsS6RqjrtYo6XwFplq1WXRZdLobFwax
OgB8xTDhUBWM6c13KfHvI+7d65aDMuDCjKCAlT5ghH0wPBN3OxyNDN+7UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpLxKmfJQYNyoBOZF7uZf9rxw3pMB8GA1UdIwQY
MBaAFDFoOAWyPYt4fWkhBT1+uulwQIoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVdnNEJiSTlpM2g5YVNFRlBYNjY2WEJBaWhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lYTM1MjgtNDViOS00N2E0LTk2MTIt
MmE0NTZmZDA5NmFiLzEvTVdnNEJiSTlpM2g5YVNFRlBYNjY2WEJBaWhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9lYTM1MjgtNDViOS00N2E0LTk2MTItMmE0NTZmZDA5NmFi
LzEvTVdnNEJiSTlpM2g5YVNFRlBYNjY2WEJBaWhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANSrsaqbT
aY4G1UX/BVhL0SPEMMs0NnFB+r+0fv2OHll04e6L1jc6MwThQpp+QaLiOosdkw6Z
uPTfjdE0sbHllfNetdSIUQ7m8mLjRO4MyzAzAWhWmT/ON5B/cngBq5POjx19tats
UEe1sM9HFS3Tdp5AFkPCZBMkKv1K4bO4VzADI73lCCuL/ynTDkWWKJiTJNmvDdB4
q4oWkU5Rksh22M08WocpRxP9+5/NV/MDnTOpj159TNTJgHYIuI1P2c0WMxy9KcWz
Yyz1gK9sUYikE8raGUZitVK7Mc1N6dgelmaitu4MJNRQZak9QNKN0SIS5eiQ6E9/
wh9Az4zJWkucuA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:22 2025 by rpki-client