Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
File: Mu0BRXesc_-H7yDKb3V5XkyTf84.mft (raw, json)
Hash identifier: zCKKpQ6PGFpREEZ8zv0KvMqjPBgrX/kl/gLi+c4nAaM=
Subject key identifier: 39:94:27:FD:31:91:0C:67:71:2D:18:99:04:7C:E5:79:83:75:A4:87
Authority key identifier: 32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
Certificate issuer: /CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
Certificate serial: 019A53ACFD45DFB376F66FD25E3E84ABAF56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
Manifest number: 0900
Signing time: Wed 05 Nov 2025 11:00:37 +0000
Manifest this update: Wed 05 Nov 2025 11:00:37 +0000
Manifest next update: Thu 06 Nov 2025 11:00:37 +0000
Files and hashes: 1: Mu0BRXesc_-H7yDKb3V5XkyTf84.crl (hash: 7JA5f6T+BeKSoikg7407meNI1b6H5JUZ5Py891VZI/c=)
2: Szpv7SbbTq_ZPkpVt0ZS-yigLYQ.roa (hash: tot/yU4vNOc3RqisHsJwZZdti1Jdkg5nZCtY1DuBRp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:fd:45:df:b3:76:f6:6f:d2:5e:3e:84:ab:af:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
Validity
Not Before: Nov 5 11:00:37 2025 GMT
Not After : Nov 6 11:00:37 2025 GMT
Subject: CN=399427fd31910c67712d1899047ce5798375a487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:e5:fc:c3:06:a3:c7:31:44:4d:4f:de:52:
0c:2b:70:08:0f:27:f9:02:9a:59:06:5c:0e:6d:75:
2c:61:6d:1e:01:c7:9c:79:5b:53:95:3f:ec:c8:4e:
63:4d:02:6d:82:0b:56:b2:6d:2d:d3:f3:d3:3a:f2:
27:5b:64:b3:e1:c6:62:04:18:91:76:da:9f:f4:98:
af:77:ae:e4:bc:be:17:13:7b:86:69:d5:90:5f:92:
66:29:e3:b3:ac:3b:3f:56:9e:56:12:64:38:59:9d:
b7:56:d7:9a:c2:7e:65:b0:6b:3f:68:c3:d4:fe:4a:
3b:21:e8:8d:70:93:ab:c3:e4:2d:d0:da:13:bf:a6:
bb:61:6f:71:b9:97:67:4f:47:25:17:3b:2c:08:be:
b2:e5:89:3c:19:e4:87:a1:b7:90:51:0f:bc:8e:ec:
78:d5:1e:1a:4d:48:2c:e4:19:7d:46:8d:f8:1e:7e:
5c:64:18:01:71:dc:c9:75:8f:d7:37:f5:bd:35:b1:
a1:98:1f:f7:89:c7:56:88:47:39:34:9f:95:3e:24:
dc:81:f5:fb:b1:35:ee:07:0b:eb:08:52:8c:cb:b0:
66:44:b7:cf:43:b2:33:54:ee:06:89:39:73:ee:20:
14:c8:cd:82:37:d6:c9:0f:33:07:cc:4e:79:6b:d0:
bb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:94:27:FD:31:91:0C:67:71:2D:18:99:04:7C:E5:79:83:75:A4:87
X509v3 Authority Key Identifier:
keyid:32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:30:dc:aa:1b:a1:4f:a5:98:55:33:0e:a3:67:53:41:77:5a:
b7:ea:bd:6b:cd:35:71:9a:4a:d5:b0:c4:53:6f:94:a5:8e:f9:
df:db:81:0f:a0:84:e7:f9:7f:69:6c:fc:94:1a:77:8f:65:ba:
b0:fb:5a:35:fb:3e:5a:eb:0a:e2:26:90:3f:c1:8c:58:65:91:
f1:70:dd:36:49:36:2c:64:bf:c1:a0:3c:bc:6f:5e:f0:10:a8:
9f:14:15:26:7c:34:7c:2e:e9:69:13:4e:ca:ab:d6:f9:1f:a3:
f4:c3:ab:38:a5:eb:25:7d:4a:61:92:6d:8d:44:b9:0b:ec:31:
55:2c:7e:75:b4:9a:fd:6c:a6:43:68:95:18:6f:08:ae:93:47:
5b:ae:a7:95:09:9c:20:f5:7c:d0:0c:6f:5e:fe:5a:65:1b:c7:
a6:f0:7a:2b:ab:e0:5e:42:0a:e0:5a:16:3b:d1:79:66:e8:70:
e6:37:3e:0b:e2:25:47:6c:4b:15:53:74:b5:e9:a4:23:f1:7d:
6b:02:c9:f2:fb:1b:39:fd:29:4d:bf:62:83:40:ff:2f:5e:e2:
69:5c:1a:c3:dd:d2:59:30:2b:d4:de:a6:ed:3f:bf:cc:56:0f:
ca:1b:ba:6e:45:9c:40:df:21:02:82:df:96:4b:46:b7:9b:a6:
94:fd:3d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:05:00 2025 by rpki-client