Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
File: mU78TONvxEPcWBYnTqwddpMCkIE.mft (raw, json)
Hash identifier: 3nZvyd3iQ/fW+KuOt5Vyj5Y0XqmrOFOw3SU5fhX1MCI=
Subject key identifier: C7:FA:95:AF:D0:80:C3:18:21:7F:90:FB:0D:BF:11:03:75:14:D2:D1
Authority key identifier: 99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
Certificate issuer: /CN=994efc4ce36fc443dc5816274eac1d7693029081
Certificate serial: 019A7149F3392A7C96B343EF45AFCE02AA37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 05:01:02 +0000
Manifest this update: Tue 11 Nov 2025 05:01:02 +0000
Manifest next update: Wed 12 Nov 2025 05:01:02 +0000
Files and hashes: 1: MhCfthOppsmBaiAYHVVk_2GAFYE.roa (hash: Prn81nEGvzCuVunt3w8adc4Qe6uMN6AiQAgwWZDR5Uo=)
2: mU78TONvxEPcWBYnTqwddpMCkIE.crl (hash: GFjY2JnemHKe5BOlCgnq+gPwC13MBcBme30KoE+Xmms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:f3:39:2a:7c:96:b3:43:ef:45:af:ce:02:aa:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994efc4ce36fc443dc5816274eac1d7693029081
Validity
Not Before: Nov 11 05:01:02 2025 GMT
Not After : Nov 12 05:01:02 2025 GMT
Subject: CN=c7fa95afd080c318217f90fb0dbf11037514d2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:28:b8:a0:85:6f:50:7f:c6:53:ea:54:9f:32:
a1:c6:0d:ba:ab:e1:75:d9:f8:48:6e:fb:a7:7f:03:
25:53:6a:2b:60:0c:36:5b:67:2c:1b:71:e7:56:eb:
bc:93:72:f4:95:cd:05:10:06:89:38:83:24:34:10:
44:14:0b:57:2c:1e:07:65:db:3c:ac:6a:7a:22:95:
5b:6c:67:56:d9:55:3e:f7:55:b7:58:02:46:19:a9:
ee:04:58:33:e3:ec:9d:ae:3b:d8:c2:37:ea:4c:4a:
4a:3e:94:92:6f:d6:63:89:55:66:62:c7:19:14:1e:
ce:bb:23:0d:5f:c6:58:b8:85:8c:d3:79:b9:74:9b:
35:fe:43:fd:7c:7f:9f:1a:e1:7c:98:c3:ba:e7:b9:
a2:23:dd:b1:f7:49:7d:e0:ed:41:8a:37:f2:b6:44:
39:16:60:50:81:de:93:c4:01:7c:15:70:78:a0:7f:
ad:af:32:81:52:b2:df:55:44:66:4f:e9:d9:92:0e:
04:b2:5f:f6:92:13:4c:2e:30:93:c5:04:53:21:ee:
83:0a:4c:43:c9:ac:89:f8:3c:c8:5b:b9:b9:89:9c:
17:5f:37:1e:ca:b0:23:19:15:03:ce:57:3a:fd:f4:
c1:60:6b:e9:47:fc:12:0e:cb:34:14:98:2d:55:4d:
68:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FA:95:AF:D0:80:C3:18:21:7F:90:FB:0D:BF:11:03:75:14:D2:D1
X509v3 Authority Key Identifier:
keyid:99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:66:b0:58:c7:6b:f6:f0:b4:da:88:e1:5d:ee:6f:9a:df:59:
34:be:de:2c:49:5c:76:ed:af:2f:84:1f:44:b7:45:89:bd:dd:
f7:4b:7b:23:7a:4d:73:db:81:25:8d:bc:80:ba:6f:7d:33:e1:
91:13:1c:ce:b0:4c:47:ea:cf:a3:4c:95:ef:df:03:42:66:40:
47:d0:c2:56:62:f8:64:06:c2:f4:81:b7:21:6c:42:f4:2c:09:
a3:93:c3:be:21:e0:d2:d6:fc:fd:df:3a:0c:a4:88:44:6e:1b:
6a:3e:43:53:73:05:d7:e1:b9:c0:8f:e3:50:c6:f0:51:3e:36:
f4:11:e2:5a:4d:69:c8:70:af:e3:e3:eb:56:62:8b:36:a9:06:
12:32:fb:0f:46:77:2e:8b:3d:c8:5c:20:9c:bd:8c:27:87:59:
a0:c4:e3:3e:d8:02:7b:72:3a:46:3e:f3:a4:91:af:41:88:02:
4b:7d:2d:47:0f:9e:08:ad:3e:ed:a0:e4:bd:96:08:82:4f:d7:
3a:a0:bc:99:bb:3c:cf:5d:3a:9a:8e:d7:d9:16:cd:3a:d7:eb:
63:f2:d4:b7:0b:65:1e:5a:13:82:6e:07:e8:9a:f7:f2:01:21:
17:28:aa:85:7b:94:68:48:4b:d1:08:4e:77:94:24:7b:31:7e:
ca:44:ea:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:38 2025 by rpki-client