Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.mft
File: MW2V2INsHxFqce4h3sD_Zx4eBw0.mft (raw, json)
Hash identifier: agrKtE5kAuFppO+7Bb5vIKfSRHESjMGPu1C3t9masSk=
Subject key identifier: 4E:27:7A:0C:27:F5:89:6C:84:A8:73:82:2D:54:C7:E4:E4:42:15:41
Authority key identifier: 31:6D:95:D8:83:6C:1F:11:6A:71:EE:21:DE:C0:FF:67:1E:1E:07:0D
Certificate issuer: /CN=316d95d8836c1f116a71ee21dec0ff671e1e070d
Certificate serial: 0198D5F14EA04DB421C60D7A5E3553CB1CF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MW2V2INsHxFqce4h3sD_Zx4eBw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.mft
Manifest number: 0D2A
Signing time: Sat 23 Aug 2025 08:00:18 +0000
Manifest this update: Sat 23 Aug 2025 08:00:18 +0000
Manifest next update: Sun 24 Aug 2025 08:00:18 +0000
Files and hashes: 1: MW2V2INsHxFqce4h3sD_Zx4eBw0.crl (hash: iifFzswBMytQe5EIZfMZdBWNZFkGY14I91R89oewmRQ=)
2: NaSNw-5nplSi1oWgCIXAtq-282g.roa (hash: PHVRipc0hRgzJt/VWrGp9MNvQSbNc+wyfThzb/6H1hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MW2V2INsHxFqce4h3sD_Zx4eBw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:4e:a0:4d:b4:21:c6:0d:7a:5e:35:53:cb:1c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=316d95d8836c1f116a71ee21dec0ff671e1e070d
Validity
Not Before: Aug 23 08:00:18 2025 GMT
Not After : Aug 24 08:00:18 2025 GMT
Subject: CN=4e277a0c27f5896c84a873822d54c7e4e4421541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4e:9e:a9:aa:c7:94:86:04:16:9b:77:5b:9e:
06:11:8b:c3:cd:20:a3:5f:56:2f:1e:f4:fa:68:8e:
59:ea:3d:1a:c0:54:0d:2b:f7:3e:ff:00:c7:7e:39:
aa:cc:32:e6:f0:ef:a0:ff:cb:b6:9a:a2:d3:03:7e:
2d:e4:47:17:bb:52:5f:f4:df:dd:58:04:00:fc:a6:
b2:5d:01:b9:c6:49:4e:df:39:26:15:90:44:36:10:
92:28:b4:cf:dc:ed:14:3b:78:a0:62:4c:0e:83:fb:
cb:c1:5c:a7:c2:a9:79:b5:d7:df:4c:e5:e8:30:4d:
cb:6f:c1:64:20:a4:af:c8:d5:cd:34:d1:4e:f7:49:
87:d4:3b:7e:b9:d1:99:28:10:b6:5b:ad:5a:d9:89:
0e:78:12:4c:c4:ab:d7:d0:14:99:e5:d4:8c:dc:76:
b8:37:e4:ce:ce:6a:b2:22:ae:40:6b:a9:6e:13:b5:
1e:fd:3f:ca:44:1f:9b:ad:71:b5:a0:2c:b9:49:4e:
ea:21:ca:9c:f4:b7:5c:9a:32:a9:91:ca:ad:70:a6:
c2:46:30:df:74:45:c0:50:ab:e9:71:50:4d:4c:c7:
ea:4f:8e:69:bb:fa:3a:34:b5:9a:13:7b:86:ff:c9:
15:3d:ce:3b:e0:e8:4e:4b:d7:09:0b:50:e1:d6:b3:
d1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:27:7A:0C:27:F5:89:6C:84:A8:73:82:2D:54:C7:E4:E4:42:15:41
X509v3 Authority Key Identifier:
keyid:31:6D:95:D8:83:6C:1F:11:6A:71:EE:21:DE:C0:FF:67:1E:1E:07:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MW2V2INsHxFqce4h3sD_Zx4eBw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3b:31:6d:1f:0b:d1:88:46:b6:e2:7d:86:e5:a0:d7:3b:3e:
7d:85:9b:64:cb:37:f1:94:f9:0f:cd:5b:e3:70:82:ad:a0:37:
40:9b:0d:7b:22:39:3b:6b:c0:69:7d:5d:45:42:7e:2d:b8:60:
14:87:b9:25:cf:d2:a4:b8:9a:78:30:fd:ec:ce:2a:2d:c9:3c:
37:12:6a:24:af:75:c0:db:00:de:89:e0:8a:71:30:eb:41:a5:
31:e4:7c:d2:32:d9:cd:e7:53:1f:2c:9a:f9:80:65:7c:dc:89:
ef:4a:f5:90:1d:39:e6:eb:28:de:be:c3:4b:3b:54:1d:27:26:
6f:69:20:e9:5a:da:4e:f0:df:ce:d0:94:c3:ea:53:e0:f4:3d:
a4:98:4f:81:20:e3:bd:53:b7:63:0e:77:11:cb:0b:cd:15:06:
fa:72:dd:c1:49:43:f7:89:dc:d6:c7:b5:d8:b5:72:dc:93:3f:
ac:95:ac:96:b2:ca:0c:63:f8:bd:aa:87:1e:0c:6b:e7:97:ae:
b4:5a:12:a7:72:75:01:8d:e0:50:55:83:8c:7a:98:95:e2:2b:
05:c1:93:8f:7a:03:07:67:d3:b4:6a:35:3b:3c:1f:84:c4:ad:
cd:02:22:7d:ac:8b:e0:52:fc:9f:38:8a:3c:84:a3:70:f8:9e:
ad:17:5e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:21 2025 by rpki-client