Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
File: mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft (raw, json)
Hash identifier: UsFrwbgB5lPObrRG28aRNMmWSOpMsEnzgeTw2glFxh4=
Subject key identifier: 28:0E:FA:F2:83:34:D1:EB:01:DD:ED:D0:B1:20:99:D1:3F:11:E7:1F
Authority key identifier: 99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39
Certificate issuer: /CN=9944078b40772b172c7046e7446204980ceae139
Certificate serial: 019A73380A97910D1EB54F21EE1EF76CEF7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
Manifest number: 16F5
Signing time: Tue 11 Nov 2025 14:00:43 +0000
Manifest this update: Tue 11 Nov 2025 14:00:43 +0000
Manifest next update: Wed 12 Nov 2025 14:00:43 +0000
Files and hashes: 1: Ku7W6RCmGf1FMZYF6bxZkcHlJ3U.roa (hash: yodxfHzeCCrONRmxjgNBHi9TEwJB+PIep9C2GIrnRgo=)
2: mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl (hash: kMN/usINVLLy6azzzqbK+rTpPOZVic4D3koLYmr2joQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:0a:97:91:0d:1e:b5:4f:21:ee:1e:f7:6c:ef:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9944078b40772b172c7046e7446204980ceae139
Validity
Not Before: Nov 11 14:00:43 2025 GMT
Not After : Nov 12 14:00:43 2025 GMT
Subject: CN=280efaf28334d1eb01ddedd0b12099d13f11e71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fb:87:34:56:7e:a4:c3:6a:c3:65:d0:15:60:
b7:62:22:e0:4c:31:40:3d:1a:fb:42:81:41:24:f8:
cf:53:88:66:8c:77:81:86:ed:af:57:1f:f5:10:88:
16:74:bb:25:f6:ab:54:26:a5:ac:fa:b9:25:73:83:
78:2e:20:aa:bb:60:19:50:c4:56:4a:e0:eb:40:13:
fc:49:60:21:3f:d0:a7:91:a1:b6:70:bf:d4:e7:58:
52:cd:06:aa:69:5e:c7:d9:9a:cb:df:6c:d4:7c:08:
08:46:8d:47:e0:86:83:15:53:09:d7:93:a3:4f:28:
34:33:10:ab:13:70:b3:55:3d:b9:e1:57:5a:7f:f9:
f7:ed:c6:bb:23:37:2d:a8:1d:cb:8c:11:27:9f:3d:
bd:81:fc:a0:66:f6:c4:b5:6a:2d:9d:44:44:92:d2:
5b:a8:4e:67:16:91:c3:81:d3:00:ab:a3:7b:e7:ec:
9e:36:48:e3:ed:a7:05:e5:a2:a5:69:58:e4:f8:75:
4c:08:81:0a:98:04:14:51:d3:fe:74:ce:f6:33:92:
26:b7:79:c8:0a:bb:e2:fc:b8:2b:93:76:7d:34:db:
4d:58:83:e0:73:00:80:ef:6e:a1:5d:8a:fd:f6:78:
26:af:7c:4a:b2:b1:8e:fc:8b:cc:68:e8:ef:f1:be:
f0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0E:FA:F2:83:34:D1:EB:01:DD:ED:D0:B1:20:99:D1:3F:11:E7:1F
X509v3 Authority Key Identifier:
keyid:99:44:07:8B:40:77:2B:17:2C:70:46:E7:44:62:04:98:0C:EA:E1:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUQHi0B3KxcscEbnRGIEmAzq4Tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/048df6-bccd-4885-8f43-4dc2071a5bf1/1/mUQHi0B3KxcscEbnRGIEmAzq4Tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:cd:55:29:da:0e:b8:85:d7:39:5f:95:cb:cb:26:a8:9e:a2:
c4:96:4a:36:e3:3d:5a:5f:0c:f1:8e:88:ad:dc:04:de:a8:d6:
cb:36:7c:c7:32:44:83:ec:c9:61:86:10:c0:c2:31:77:b7:67:
d4:4e:3e:9f:fd:1a:0a:37:8b:cc:11:0d:62:bf:20:85:ae:55:
3b:0d:7b:0c:2c:6e:f8:0d:4d:87:d6:1e:7b:25:76:54:c5:4f:
ac:a0:b0:e2:f1:1d:9c:70:3d:c2:f6:b8:1b:b6:84:91:df:8f:
05:49:22:39:77:c6:16:96:64:51:8f:19:ab:d0:55:f5:5c:0e:
80:c6:dc:55:5d:e7:32:14:32:f1:b1:0f:4b:96:3e:79:47:8b:
19:e6:f5:8e:36:3b:a6:e1:f2:56:cf:63:96:95:1b:7b:e6:49:
d3:eb:0b:e3:21:23:45:c2:60:f0:bb:cf:5d:0e:c6:af:47:bd:
01:49:cc:fd:68:a6:70:79:ab:fb:15:6f:b4:6c:72:d9:64:51:
72:9d:d8:3a:18:74:b7:ad:ff:46:63:82:1f:01:c2:ee:97:6c:
45:24:8c:41:ff:bf:5a:ea:4b:a5:a9:09:83:a4:e5:b6:b6:28:
35:fa:e4:b5:98:f3:47:67:ff:30:e9:e1:b7:0c:7a:20:f8:3d:
96:5a:c1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:00 2025 by rpki-client