Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
File: mUt9MMHE9iQxgtPs09BTn0L6rP0.mft (raw, json)
Hash identifier: 2+YyaOaw4SzEjrBwK2Rdz0LFoojBhRlKV4T898kx3ug=
Subject key identifier: A3:62:6E:2B:60:E7:56:1E:FA:4C:BE:99:AF:B7:37:5F:66:59:6B:B8
Authority key identifier: 99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
Certificate issuer: /CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Certificate serial: 019A4D7479D84343B7AC542F89601AA08701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 06:01:10 +0000
Manifest this update: Tue 04 Nov 2025 06:01:10 +0000
Manifest next update: Wed 05 Nov 2025 06:01:10 +0000
Files and hashes: 1: 11EUti3lnSrvcME_sLAUVVEJCyA.roa (hash: zosfyuqqMAp/geMMw6u9z8/OyVXxmv9rqLq+GU2ia9c=)
2: mUt9MMHE9iQxgtPs09BTn0L6rP0.crl (hash: nFUkZPHPDUX89IjzLoPqkj+t3imqBgrboBv2vbKO36k=)
3: pUNUzoKVem25Y_u6Wr9POh9WQoA.roa (hash: dUP9J5+eurE18pK8nZH6ohMEustwLaoHJPJpeZdkUDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:79:d8:43:43:b7:ac:54:2f:89:60:1a:a0:87:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Validity
Not Before: Nov 4 06:01:10 2025 GMT
Not After : Nov 5 06:01:10 2025 GMT
Subject: CN=a3626e2b60e7561efa4cbe99afb7375f66596bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1f:b5:76:5f:b8:61:1d:f6:6e:42:26:59:c8:
d4:9c:c3:2b:22:50:d9:ce:4a:c3:a6:88:7d:08:85:
c8:7a:72:cc:61:3a:ec:7d:fa:d7:46:f0:ad:54:a6:
56:4d:b7:d2:82:96:0c:60:c1:67:f6:09:92:cc:4d:
34:87:d1:6d:e9:84:98:a3:9f:87:ec:44:ed:49:5c:
14:e0:d7:d0:cc:78:2b:1f:d3:02:d3:82:ef:9d:7a:
af:0f:da:66:c9:66:c5:19:11:b6:95:88:5f:95:c8:
e0:b9:03:3b:28:fb:4c:29:3f:38:92:5c:b2:cc:5e:
dc:db:99:f8:62:7e:59:46:cf:6d:a1:4a:d9:f7:9e:
7a:65:12:a5:42:53:55:9a:67:1c:5c:d0:c8:21:0b:
56:5d:72:91:02:ce:7a:b6:87:63:00:7f:bf:24:c7:
6a:1e:e6:43:88:35:7b:fb:4e:73:bc:51:76:5b:ed:
30:67:c2:ad:9d:4e:cf:da:36:dd:4c:4c:76:c2:fd:
d0:c2:f1:08:04:9c:12:c4:8c:6e:95:11:37:9f:39:
80:7b:a5:18:1a:e8:f3:27:be:d2:47:21:d7:ff:2a:
04:de:dd:d1:b1:bc:13:b5:92:c4:69:40:74:54:3c:
9d:1f:94:bb:bd:cf:f0:3a:a5:fd:93:58:7b:1d:40:
0b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:62:6E:2B:60:E7:56:1E:FA:4C:BE:99:AF:B7:37:5F:66:59:6B:B8
X509v3 Authority Key Identifier:
keyid:99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d8:66:07:aa:83:6d:d9:a0:59:7d:05:3c:61:2b:ee:4c:ca:
3b:57:49:bd:63:bb:3e:e8:8c:cd:dc:b3:f7:7c:14:a7:e2:cc:
30:61:5a:c3:39:64:7c:e7:26:d7:40:61:29:31:15:aa:19:fd:
9c:b2:24:7e:77:d8:83:0b:a1:de:06:7a:f7:a0:b8:d8:c8:29:
ef:bd:df:b8:89:d7:ba:7d:0b:e8:2f:58:ff:b9:f4:d3:06:56:
a1:09:2e:9c:d6:28:73:d0:a0:f1:d9:3f:17:80:99:1d:88:0d:
97:42:e9:c5:f1:9c:8d:9c:67:bf:cc:e6:87:94:84:35:33:23:
0e:f8:ac:ff:de:05:2c:68:9e:0a:2f:02:4d:22:4a:28:26:5a:
6d:7a:a9:39:a8:4e:b5:17:ed:d8:a3:89:53:20:ae:92:a7:07:
22:0b:2c:ed:40:4c:51:5e:c6:33:70:9e:f7:6c:18:4f:26:a0:
e8:1e:26:cc:9e:f0:f5:02:f3:b6:a6:4f:ce:79:3f:19:38:49:
9b:c0:0c:2c:5b:fe:bf:7e:57:79:cc:6f:7b:f2:00:45:22:21:
01:88:60:9e:c9:6b:c8:56:4c:a8:ca:fa:9d:07:77:34:37:b5:
fe:85:7a:fb:0c:95:c5:3f:91:1f:bc:32:cc:04:31:c6:65:65:
8a:c3:ee:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:56 2025 by rpki-client