Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
File: 99MudSlBh9Rujq4Pj-crX9er-IY.mft (raw, json)
Hash identifier: BVFqf2IgRk6m2kHepXz6JncXXVwCEvM+GrIhZ+LbGKE=
Subject key identifier: 1E:DB:4E:A4:72:58:BD:41:AD:03:98:A9:66:07:8E:E6:D3:43:C7:40
Authority key identifier: F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86
Certificate issuer: /CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
Certificate serial: 019A4DE238ED2BD574FC1068A1E86E027F9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
Manifest number: 1714
Signing time: Tue 04 Nov 2025 08:01:02 +0000
Manifest this update: Tue 04 Nov 2025 08:01:02 +0000
Manifest next update: Wed 05 Nov 2025 08:01:02 +0000
Files and hashes: 1: 99MudSlBh9Rujq4Pj-crX9er-IY.crl (hash: 9+EjiEZcuwx7uoffIt7WXmfuQEgslthUQKvrCJCz+V8=)
2: FYg_psCFhdR_n5VNhP25gINYx6M.roa (hash: h+fjKLWgHVAllkPWeuz1NL6KyEoRyUzS/iNO+yf1JFI=)
3: ZhvVa7SGL0ihaaWqEDQl81ffNSw.roa (hash: ytKQDKvlQVK8AL0ByiBKUDRRuwN5/717YGo/cNpO++k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:38:ed:2b:d5:74:fc:10:68:a1:e8:6e:02:7f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
Validity
Not Before: Nov 4 08:01:02 2025 GMT
Not After : Nov 5 08:01:02 2025 GMT
Subject: CN=1edb4ea47258bd41ad0398a966078ee6d343c740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7f:55:03:92:fa:db:0d:03:ab:35:9c:ae:94:
49:a5:fd:1a:06:b8:30:23:04:22:e0:64:d8:ea:e7:
3e:6c:f9:a3:ea:6f:f5:5a:1a:9e:52:52:e4:7b:1d:
86:2f:2a:d7:f4:de:df:c7:c0:06:51:ec:e4:e5:5a:
9d:72:7d:82:58:b0:48:9c:15:70:75:f2:1c:6c:5a:
0f:e2:5b:d0:99:af:50:7e:6b:6a:4f:73:b1:de:fe:
b8:4c:cf:28:89:21:a2:f5:90:2d:b0:c2:38:f6:09:
36:91:d0:dd:d9:b4:bf:cb:eb:a9:2d:5c:3d:4d:e1:
4f:1b:05:03:d6:76:51:2f:83:5b:7b:fb:68:85:8b:
12:fe:97:a8:36:ad:36:0f:48:87:58:b4:7a:c8:3f:
d0:0c:b9:78:58:bf:19:fb:fb:8c:34:21:96:4d:9c:
42:12:89:dc:c3:df:a2:b3:13:62:f3:5a:29:b8:6b:
6c:2e:b9:e5:98:35:ac:c0:9c:84:0c:0e:0b:63:24:
ae:46:00:39:72:32:e1:95:1c:77:22:51:26:66:e5:
2e:01:b2:3e:42:b0:1d:b7:74:76:9e:a3:70:65:40:
a7:10:43:5e:7f:4d:75:ef:c7:f7:19:5d:0b:d0:87:
5f:f2:99:7b:8b:55:3d:06:2f:4d:46:4e:17:f9:4c:
4b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DB:4E:A4:72:58:BD:41:AD:03:98:A9:66:07:8E:E6:D3:43:C7:40
X509v3 Authority Key Identifier:
keyid:F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:73:97:52:45:4c:52:94:d4:31:78:e7:fd:0b:a1:49:30:21:
d3:29:ac:96:0a:70:e1:f5:d5:25:91:81:b1:8a:65:8d:c9:4a:
45:2a:3c:93:2e:1d:4d:86:c4:1b:f1:b4:52:14:33:cd:40:26:
73:ce:63:82:a9:1f:58:73:ed:34:39:cb:a8:89:e8:3e:30:0b:
61:0f:7b:ab:7d:53:ad:09:4e:a2:9b:c9:38:4f:f4:1a:5a:a0:
ef:b5:45:9d:c2:f6:c0:8d:9a:b8:cc:b4:19:02:fd:82:36:e2:
8a:56:49:91:d0:f7:26:e6:2d:0e:b2:89:cc:38:09:14:fc:fa:
aa:f3:0d:6d:8b:4e:3d:48:8f:3e:23:f7:76:92:72:63:2c:70:
7d:8a:d7:12:19:e8:22:0c:1d:21:ac:3b:95:ed:d5:b3:fa:a8:
f2:fe:84:d3:27:50:76:ef:7b:d7:91:83:4a:26:0d:aa:01:f0:
04:27:47:f8:d8:c1:b4:3a:f2:53:98:4a:81:6b:ff:45:73:13:
34:a2:7f:5b:79:10:7d:02:75:50:e6:a4:ce:9e:b9:8b:04:1e:
d9:42:89:7f:b4:81:f8:f5:4f:4c:f7:ee:4c:11:90:e9:04:e3:
94:ee:6d:f1:92:a6:c4:47:0f:5f:b1:f2:2c:42:e8:df:25:61:
9a:72:48:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4jjtK9V0/BBooehuAn+fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZDMyZTc1Mjk0MTg3ZDQ2ZThlYWUwZjhmZTcyYjVmZDdh
YmY4ODYwHhcNMjUxMTA0MDgwMTAyWhcNMjUxMTA1MDgwMTAyWjAzMTEwLwYDVQQD
EygxZWRiNGVhNDcyNThiZDQxYWQwMzk4YTk2NjA3OGVlNmQzNDNjNzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX9VA5L62w0DqzWcrpRJpf0aBrgw
IwQi4GTY6uc+bPmj6m/1WhqeUlLkex2GLyrX9N7fx8AGUezk5Vqdcn2CWLBInBVw
dfIcbFoP4lvQma9QfmtqT3Ox3v64TM8oiSGi9ZAtsMI49gk2kdDd2bS/y+upLVw9
TeFPGwUD1nZRL4Nbe/tohYsS/peoNq02D0iHWLR6yD/QDLl4WL8Z+/uMNCGWTZxC
Eoncw9+isxNi81opuGtsLrnlmDWswJyEDA4LYySuRgA5cjLhlRx3IlEmZuUuAbI+
QrAdt3R2nqNwZUCnEENef01178f3GV0L0Idf8pl7i1U9Bi9NRk4X+UxL+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7bTqRyWL1BrQOYqWYHjubTQ8dAMB8GA1UdIwQY
MBaAFPfTLnUpQYfUbo6uD4/nK1/Xq/iGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTlNdWRTbEJoOVJ1anE0UGotY3JYOWVyLUlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kMGNjNDEtYzhmMS00YTQ0LTkxZjAt
ZDFhNDU5OWNiMGU1LzEvOTlNdWRTbEJoOVJ1anE0UGotY3JYOWVyLUlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9kMGNjNDEtYzhmMS00YTQ0LTkxZjAtZDFhNDU5OWNiMGU1
LzEvOTlNdWRTbEJoOVJ1anE0UGotY3JYOWVyLUlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi3OXUkVM
UpTUMXjn/QuhSTAh0ymslgpw4fXVJZGBsYpljclKRSo8ky4dTYbEG/G0UhQzzUAm
c85jgqkfWHPtNDnLqInoPjALYQ97q31TrQlOopvJOE/0Glqg77VFncL2wI2auMy0
GQL9gjbiilZJkdD3JuYtDrKJzDgJFPz6qvMNbYtOPUiPPiP3dpJyYyxwfYrXEhno
IgwdIaw7le3Vs/qo8v6E0ydQdu9715GDSiYNqgHwBCdH+NjBtDryU5hKgWv/RXMT
NKJ/W3kQfQJ1UOakzp65iwQe2UKJf7SB+PVPTPfuTBGQ6QTjlO5t8ZKmxEcPX7Hy
LELo3yVhmnJIcw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:04:46 2025 by rpki-client