Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
File: mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft (raw, json)
Hash identifier: vqo6aVsRThsokpxmX9eor8i9XDOakPxLI/VUV4IOGNQ=
Subject key identifier: 05:1A:CB:61:F9:C0:2F:9F:7C:5D:F0:6B:30:E4:E6:E8:86:FD:E8:67
Authority key identifier: 9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
Certificate issuer: /CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Certificate serial: 019A4F2B6E66435B800A30B2265EF58EFDFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
Manifest number: 0FFB
Signing time: Tue 04 Nov 2025 14:00:37 +0000
Manifest this update: Tue 04 Nov 2025 14:00:37 +0000
Manifest next update: Wed 05 Nov 2025 14:00:37 +0000
Files and hashes: 1: mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl (hash: I5G7taE8bVNMkgRG4qiNvt/6ycDUZLwBEfsUjtHBgPM=)
2: zAfXaaTLSsRoB5kUrFVM41jmKKM.roa (hash: Qyk65ct/H4EE3CmFVP3i+QvaSpxHvWaeOqI7968YDoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:6e:66:43:5b:80:0a:30:b2:26:5e:f5:8e:fd:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Validity
Not Before: Nov 4 14:00:37 2025 GMT
Not After : Nov 5 14:00:37 2025 GMT
Subject: CN=051acb61f9c02f9f7c5df06b30e4e6e886fde867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:43:d2:e9:ce:58:1c:05:8f:5e:0b:58:fa:89:
46:98:78:82:10:7d:61:79:42:c5:f9:69:47:2a:33:
f7:2f:5e:8a:ae:e1:28:8d:55:2f:f9:b0:8a:4c:2f:
79:ce:a6:77:c6:6c:9a:a1:0b:ec:0b:05:44:d6:ef:
90:dc:7f:6c:aa:ba:61:40:05:c9:10:ac:04:01:26:
d5:95:8e:e1:53:aa:93:52:8b:42:f3:3c:c4:06:f6:
4c:fe:4e:ab:3b:3e:90:69:1b:dd:41:30:31:3f:4d:
6b:0d:38:5c:5a:15:8e:c6:09:1e:02:17:1c:f3:23:
00:03:1b:fb:ea:24:55:3a:0e:cd:13:6b:12:7d:30:
a6:39:4d:72:79:33:83:3f:f1:18:9a:3c:a4:d4:11:
9e:42:6d:23:aa:26:58:34:cb:a9:e3:e0:3e:b7:1d:
cc:cd:9e:aa:af:ef:65:79:41:9c:52:a5:02:52:fa:
5b:89:4d:0e:f6:92:16:60:82:a5:b0:7b:6a:ee:aa:
4d:4a:de:04:4e:76:51:61:d7:82:10:bb:b7:d9:10:
8f:2e:ef:87:9b:5c:70:5f:cb:31:fa:00:66:97:f0:
97:ee:30:d9:bd:f7:ab:d6:f0:84:76:e6:c8:25:f8:
df:0a:98:8e:b7:89:14:51:eb:1e:63:05:3f:0a:50:
dc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1A:CB:61:F9:C0:2F:9F:7C:5D:F0:6B:30:E4:E6:E8:86:FD:E8:67
X509v3 Authority Key Identifier:
keyid:9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:0f:be:a8:43:81:fc:ee:a4:8a:58:73:3c:d9:5d:1e:b5:2c:
c4:71:4d:60:44:96:c0:e6:5d:20:8f:d5:9a:3e:01:f9:62:ad:
ea:d0:eb:f4:8f:94:fe:b9:20:c4:77:31:d8:af:f8:16:f0:57:
96:81:dd:24:1f:8e:4a:b0:0e:93:0a:53:a2:d4:c4:b6:a6:7f:
ad:0b:4d:80:7f:c1:22:4a:77:c9:ab:c5:c0:3b:f0:14:ae:d1:
09:ac:4c:6b:cc:43:d3:68:eb:15:0a:ff:95:76:a3:e9:85:50:
29:7d:88:96:5d:7c:a8:6a:bf:e0:23:0c:b3:7f:21:04:ab:9d:
08:61:5e:22:5c:a7:5e:32:92:26:27:1f:80:f4:05:0a:41:47:
53:e7:d8:b4:2f:94:a5:c4:2f:84:3a:52:d2:c8:24:98:06:1a:
3c:90:ae:eb:a8:ec:e8:6d:4f:13:a0:f1:a5:18:27:e2:36:5f:
93:03:12:31:d2:f6:c2:5d:cc:17:bf:89:30:25:f9:30:01:75:
37:89:25:47:80:08:4a:f8:41:43:b5:b4:fc:03:54:01:17:14:
ad:1d:17:56:05:f3:05:29:55:a7:1d:2f:40:b7:70:a0:86:de:
74:3f:a3:66:4f:b2:a6:85:a4:67:e0:02:da:4f:90:fb:47:97:
e9:61:35:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:25 2025 by rpki-client