Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
File: mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft (raw, json)
Hash identifier: O/mqRIkAmfkojgx8EW2OJKxoxHxDwFDEcJcHDp9euEs=
Subject key identifier: D1:67:41:BC:4C:86:8C:D9:C9:83:AC:26:1A:02:1F:6F:B3:80:BE:A0
Authority key identifier: 9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
Certificate issuer: /CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Certificate serial: 019892FF45A898F39398F2123761AA5A2F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
Manifest number: 0F15
Signing time: Sun 10 Aug 2025 08:00:59 +0000
Manifest this update: Sun 10 Aug 2025 08:00:59 +0000
Manifest next update: Mon 11 Aug 2025 08:00:59 +0000
Files and hashes: 1: mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl (hash: Ly7YEtnQojqHJ65OEiezCCacJ/YL4Q4ngSvGkDVKTyU=)
2: zAfXaaTLSsRoB5kUrFVM41jmKKM.roa (hash: Qyk65ct/H4EE3CmFVP3i+QvaSpxHvWaeOqI7968YDoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:ff:45:a8:98:f3:93:98:f2:12:37:61:aa:5a:2f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Validity
Not Before: Aug 10 08:00:59 2025 GMT
Not After : Aug 11 08:00:59 2025 GMT
Subject: CN=d16741bc4c868cd9c983ac261a021f6fb380bea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f5:2f:da:9b:fa:e1:e1:9e:a0:db:e4:c8:a2:
48:71:80:48:9f:ea:68:44:71:53:5c:4f:e4:61:5a:
06:f0:ec:cb:80:d4:e6:e7:49:75:6b:5e:d0:be:82:
79:22:30:07:1b:09:1b:d4:d1:91:f4:69:fc:10:14:
57:6b:8a:58:ca:36:81:21:b3:8b:2f:26:eb:79:50:
19:d5:85:54:89:69:b4:fb:9a:74:4f:98:d9:d8:a6:
d6:63:1e:bf:98:f9:3a:3f:e0:ad:32:5c:9a:a5:17:
60:59:c2:9c:c0:86:89:57:56:e9:76:7e:d7:0d:d8:
ae:a4:72:01:0b:e7:8b:a3:35:b1:4c:25:3a:6a:6f:
72:ff:a8:6d:7e:b0:92:d1:a9:c8:51:c3:33:40:88:
08:79:8a:08:c4:c4:59:0c:21:72:b6:a3:9f:78:d6:
00:5d:58:62:27:9f:22:52:bf:a1:41:e4:fc:3e:90:
b4:9c:cc:19:37:84:61:4e:dc:ab:62:c0:8a:55:c2:
a2:57:a8:5f:07:b1:d0:ea:56:3d:26:41:aa:bb:9b:
ba:88:d3:e6:d6:39:cc:25:80:6b:1f:68:59:ee:96:
d3:97:f3:e9:c0:44:6c:ad:e4:50:3e:eb:bc:5c:a6:
a8:c5:3e:d5:7d:63:03:23:61:7a:58:6f:03:ca:44:
37:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:67:41:BC:4C:86:8C:D9:C9:83:AC:26:1A:02:1F:6F:B3:80:BE:A0
X509v3 Authority Key Identifier:
keyid:9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:31:f3:89:cc:7f:19:7f:d5:54:14:07:23:f8:0e:26:c0:af:
cc:25:09:0f:04:aa:65:da:24:4f:04:7a:11:a3:9e:cf:2c:67:
1a:17:62:ff:4a:27:32:a5:81:52:b7:a6:c4:c1:25:25:18:6b:
02:a9:81:a2:30:8a:65:88:3e:a5:82:84:e7:d1:23:03:8c:3b:
34:d5:e4:74:71:b6:ca:7f:09:7d:bc:30:bd:e9:54:dc:22:55:
3e:8e:dc:c7:1e:17:6f:c9:c6:d2:56:f8:cc:a8:91:9b:27:fe:
8f:e1:3e:e1:ab:da:ed:f6:fd:e7:dc:fa:3c:a8:9c:a3:86:df:
8b:4c:2f:6e:f4:b0:6e:4c:2a:c8:66:04:ef:27:a8:26:16:6f:
b1:c7:d5:52:5b:f7:ea:41:d6:0c:9c:90:f4:05:e6:49:23:03:
2e:75:10:a3:c3:88:c7:0a:51:6a:ef:89:20:7b:91:46:89:d0:
53:c7:ae:b5:f4:df:30:97:4f:92:93:7c:92:42:a1:ae:5b:f5:
34:ab:37:a8:b9:db:9b:04:19:e3:52:a3:b3:ba:98:c4:16:8f:
89:eb:de:0e:a8:04:9a:23:c3:51:e8:79:ca:3e:c7:2a:0e:cc:
29:2e:d5:66:db:1c:59:77:67:71:ad:1d:45:42:c0:a0:54:9e:
b3:4a:3a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:59:15 2025 by rpki-client