Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
File: 1-muQgEgTpldoh5it3nvb0ObQ5T4.mft (raw, json)
Hash identifier: QQpEmvgD0QxpebEDCUTEEuXRmRyNhg7aOI/bvBNdY2Y=
Subject key identifier: 4A:66:A5:90:C9:12:DC:D9:B8:55:F4:5C:E0:57:42:13:41:4C:0D:6F
Authority key identifier: FA:6B:90:80:48:13:A6:57:68:87:98:AD:DE:7B:DB:D0:E6:D0:E5:3E
Certificate issuer: /CN=fa6b90804813a657688798adde7bdbd0e6d0e53e
Certificate serial: 019A4E18A964AE6FFB32459D1F9D82E287C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
Manifest number: 0631
Signing time: Tue 04 Nov 2025 09:00:30 +0000
Manifest this update: Tue 04 Nov 2025 09:00:30 +0000
Manifest next update: Wed 05 Nov 2025 09:00:30 +0000
Files and hashes: 1: 1-muQgEgTpldoh5it3nvb0ObQ5T4.crl (hash: lgfCV092z0sD4fkuFx9GtvESVbq+4OZHbPyNYVh2Djc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:a9:64:ae:6f:fb:32:45:9d:1f:9d:82:e2:87:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa6b90804813a657688798adde7bdbd0e6d0e53e
Validity
Not Before: Nov 4 09:00:30 2025 GMT
Not After : Nov 5 09:00:30 2025 GMT
Subject: CN=4a66a590c912dcd9b855f45ce0574213414c0d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fa:6f:f7:d8:86:27:3d:fd:7a:7e:ca:d5:16:
c1:2e:50:ed:ea:90:5f:ba:17:ed:70:33:72:52:87:
42:3c:13:1c:1d:6a:0b:3f:37:75:81:50:57:cc:1a:
44:3f:2d:5b:63:13:5b:90:b2:aa:35:11:cb:df:bc:
12:8c:53:e5:f2:b0:8d:4d:1a:58:99:a2:99:2c:47:
d8:30:fe:6a:47:01:23:5d:0e:63:97:59:03:93:fe:
f0:17:d1:b0:cf:a9:3e:46:3b:ee:ca:11:5e:69:11:
0a:d9:8f:fa:77:0d:2a:66:fc:74:19:1b:71:9f:13:
4c:15:60:18:23:ef:cf:18:2e:8f:d5:24:e9:d0:9c:
5a:d2:b9:d7:4a:8e:36:b5:fd:4e:07:bd:87:ae:08:
82:3d:5e:fd:16:c1:07:1f:6b:0d:d0:a8:c9:c8:2a:
86:85:f8:32:4c:b9:46:07:ad:6d:e5:f5:ee:6e:0f:
b5:08:e1:75:f9:22:e1:ba:d3:e8:a3:8d:d7:78:6c:
c2:d5:32:f1:60:f4:92:4f:7d:0d:5b:72:d9:ea:01:
75:78:3a:7b:e1:a8:21:3d:bb:21:36:5d:68:8b:45:
7b:43:7f:27:f6:83:9d:5a:8b:94:25:9e:59:fa:02:
8c:67:b9:60:f6:b0:18:3e:3f:29:7f:b5:35:c9:a7:
26:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:66:A5:90:C9:12:DC:D9:B8:55:F4:5C:E0:57:42:13:41:4C:0D:6F
X509v3 Authority Key Identifier:
keyid:FA:6B:90:80:48:13:A6:57:68:87:98:AD:DE:7B:DB:D0:E6:D0:E5:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:76:4c:7e:33:f0:66:7a:81:57:02:35:50:96:a7:dd:0c:ea:
75:a3:af:d6:a0:87:b0:7e:64:79:3d:51:24:a7:2f:87:ba:34:
4e:8f:01:38:56:05:88:82:92:12:da:4b:bf:1f:7c:21:04:22:
e8:24:83:77:8b:34:09:04:f4:f1:d2:55:3d:2d:3b:b2:76:be:
f3:9b:e9:4e:0d:96:89:d2:bb:8d:2a:77:0a:9a:e6:b0:70:cc:
a6:0e:1c:64:d2:87:19:5e:d5:f5:00:bd:50:86:49:4e:2d:b0:
23:a9:a2:79:55:89:44:bc:d0:54:da:69:50:02:9b:cb:01:20:
b2:fe:fb:f1:a5:43:87:64:be:87:3a:0c:54:19:22:18:28:79:
84:29:03:f7:46:4f:3c:2a:57:27:be:25:b7:d4:3e:2d:04:23:
77:89:54:25:09:89:9b:1e:0d:79:47:f8:1c:53:d9:73:f7:a5:
0f:71:36:5f:69:9f:3e:35:4d:b2:31:3e:a2:ca:b5:93:5c:89:
f4:11:3e:65:0b:5e:07:59:4e:0f:74:d8:a2:a9:b0:a3:4f:35:
67:3c:84:00:01:e8:5f:d0:b6:e4:00:93:a8:02:e1:d2:a9:0f:
a8:58:f9:b7:ec:c0:6a:63:b0:3d:d4:a6:65:91:f8:4c:c4:dd:
07:90:e3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:04:48 2025 by rpki-client