Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft
File: mufWYa_KPTNwuOY0SU1SRrg9WF8.mft (raw, json)
Hash identifier: 6qPK5lZTbfp0oqaqfjZHwbI38WelFVFEN+yuFdM9oss=
Subject key identifier: C7:69:F2:3F:98:85:A3:69:02:0E:FB:62:B3:FD:DD:7C:EB:14:BA:F3
Authority key identifier: 9A:E7:D6:61:AF:CA:3D:33:70:B8:E6:34:49:4D:52:46:B8:3D:58:5F
Certificate issuer: /CN=9ae7d661afca3d3370b8e634494d5246b83d585f
Certificate serial: 019A50E42A8D8B207AF9B1ED1EEDCE24EEC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 22:02:01 +0000
Manifest this update: Tue 04 Nov 2025 22:02:01 +0000
Manifest next update: Wed 05 Nov 2025 22:02:01 +0000
Files and hashes: 1: Lm17pgMk2BDV2OeIcb6BBLpoQWU.roa (hash: VGsuyNfzfr/GzDDdXYimTSNFocuLHOKMiHb8B0Qh1O4=)
2: M8tcAEtobc_HjXn0aPPPoIVg2j0.roa (hash: jvlpLwOiPWCn9YztYqEXIDpMuvLmxqIvyCBv7RToVIs=)
3: mufWYa_KPTNwuOY0SU1SRrg9WF8.crl (hash: 4Vmez6aP5SDQ5SLZB2zv9YPGbQvTCezvqVdeeFkyhDs=)
4: urzNFgi_gE8fSu_5YoQ_GQRDVw0.roa (hash: T8tIXkvw/aUJVTl8RyXo5fkRTTwdXnzNgefZluAgHWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:2a:8d:8b:20:7a:f9:b1:ed:1e:ed:ce:24:ee:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae7d661afca3d3370b8e634494d5246b83d585f
Validity
Not Before: Nov 4 22:02:01 2025 GMT
Not After : Nov 5 22:02:01 2025 GMT
Subject: CN=c769f23f9885a369020efb62b3fddd7ceb14baf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6c:25:30:ef:f8:d6:61:17:70:3b:ff:48:50:
39:d3:27:6b:ec:d9:b4:6d:ea:18:20:23:e2:65:00:
48:80:65:df:da:b9:70:d4:a0:e3:0a:12:a1:63:05:
1a:d3:51:73:3b:8c:b5:77:b4:02:bf:66:49:ee:90:
73:16:d3:58:aa:0a:18:9e:f4:f9:23:b0:ab:1c:d5:
fd:09:22:cd:72:b9:86:01:51:bd:ab:7d:45:93:51:
42:dd:a8:fd:6d:5a:37:4b:81:e7:47:9a:c7:f9:bf:
ef:2a:30:84:7b:67:13:bb:23:08:0a:8e:7c:e2:45:
21:65:4a:5f:c5:c3:c6:a8:51:2f:92:5d:9c:c4:bf:
f0:90:03:98:fb:aa:e8:51:dc:30:83:dc:8a:31:e8:
07:ed:22:fc:0c:9a:b9:02:d7:34:f9:a3:64:79:e1:
c5:7d:2f:60:f6:59:2e:21:c9:59:2d:4b:ba:36:7b:
ae:27:e7:2e:cf:85:13:8d:2a:e6:af:44:e3:f2:ce:
e6:55:5b:57:23:b5:3e:ef:b2:e4:1f:be:95:bb:b7:
41:86:69:f6:23:44:3b:52:17:43:61:c1:70:92:41:
b6:61:00:fd:d2:5c:81:20:b5:22:12:f6:d1:f5:00:
1b:fb:b1:45:19:54:83:7b:8d:ff:a1:4a:ef:ea:b9:
2b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:69:F2:3F:98:85:A3:69:02:0E:FB:62:B3:FD:DD:7C:EB:14:BA:F3
X509v3 Authority Key Identifier:
keyid:9A:E7:D6:61:AF:CA:3D:33:70:B8:E6:34:49:4D:52:46:B8:3D:58:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mufWYa_KPTNwuOY0SU1SRrg9WF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/mufWYa_KPTNwuOY0SU1SRrg9WF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:3e:57:aa:4d:2e:b0:8d:bc:a0:63:74:aa:40:7b:d2:5f:38:
4c:cf:7f:d6:aa:77:da:45:69:80:58:68:87:fd:e7:04:0d:37:
51:4c:c0:6f:8d:9b:b1:c0:d4:0c:66:7d:4e:f0:c8:41:4b:ed:
c4:23:41:7c:f0:f7:f5:71:f5:e3:ac:10:64:bb:69:a6:56:0d:
8f:d1:30:6b:4a:4c:75:eb:b3:73:2a:1e:bd:e7:a2:a8:c6:4c:
ff:be:fa:00:fd:84:e6:7a:18:0f:f0:fe:3d:32:cc:a8:64:34:
0f:94:9a:11:d7:32:c7:63:f8:8d:c1:72:37:a3:99:59:3d:aa:
b8:08:84:0e:26:b8:e4:37:70:32:cf:d4:5e:82:93:78:c6:98:
df:f5:7f:03:03:1c:e1:17:30:89:65:c4:36:16:82:78:84:22:
92:e7:57:96:c1:a1:44:59:c3:33:c8:37:af:32:77:9f:69:a8:
18:14:dd:0c:7a:3e:f7:c6:c2:da:78:7d:3a:0d:d0:f7:63:5d:
b6:ae:b5:cd:d2:f3:b5:f0:35:06:c2:3e:70:09:35:bc:09:d3:
d8:f5:3f:9b:47:43:ce:cd:b4:a3:ed:c7:3f:8d:53:96:47:1f:
f6:b2:cb:ef:85:4e:28:9e:94:54:27:f3:d0:f3:f7:c3:fd:7c:
6d:17:85:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:20:46 2025 by rpki-client