Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
File: kMuqazbmzWh0x47UWk-N1xcwMdk.mft (raw, json)
Hash identifier: /7ZthX7ORabEgq5JgABU9vobLwQl83q5TLkSSS+MtGA=
Subject key identifier: FD:F2:2A:89:B2:23:DA:B8:5C:29:35:CF:02:7E:02:E2:F4:B0:4F:50
Authority key identifier: 90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9
Certificate issuer: /CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
Certificate serial: 019A24E637EC50792238C33B38F778DFB05C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
Manifest number: 0C68
Signing time: Mon 27 Oct 2025 09:00:58 +0000
Manifest this update: Mon 27 Oct 2025 09:00:58 +0000
Manifest next update: Tue 28 Oct 2025 09:00:58 +0000
Files and hashes: 1: c4U2evb93678CsrZ2ZQQemAPoFw.roa (hash: 5ZLOIZ+BzX8i3ipSMR9csvqZ6+nojKYy3y5RkNukgEE=)
2: kMuqazbmzWh0x47UWk-N1xcwMdk.crl (hash: gYKDMR6NxP7fz/rRo6Xr8Cr0Z59T3PXM1U+N/DfPz2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e6:37:ec:50:79:22:38:c3:3b:38:f7:78:df:b0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
Validity
Not Before: Oct 27 09:00:58 2025 GMT
Not After : Oct 28 09:00:58 2025 GMT
Subject: CN=fdf22a89b223dab85c2935cf027e02e2f4b04f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f1:d5:e9:ff:ac:68:80:01:97:97:23:97:a4:
60:98:95:25:45:f8:fb:15:e0:74:51:8f:9f:8e:0c:
23:84:0b:07:77:94:49:ec:9f:6b:99:f3:d4:c8:bf:
80:bd:19:07:41:84:4e:47:12:b6:ef:77:d6:5d:27:
25:52:bc:06:d6:3b:d6:e4:32:4a:ad:6b:dc:3b:94:
d6:c3:14:2a:04:d1:be:19:84:06:9f:4e:fd:b9:87:
a1:5b:68:8b:0a:b0:fe:fe:34:27:5e:a9:06:c3:8a:
e0:b7:d1:20:71:4a:17:ba:bd:b0:52:e2:02:d1:dc:
9d:1f:e3:73:91:83:c5:0e:dc:cb:97:3b:bb:13:6d:
ce:87:07:1d:38:3a:44:de:a2:c3:16:d4:33:25:80:
9d:4f:85:74:62:94:d2:c4:12:3e:cc:75:fa:02:78:
cb:c7:24:87:43:85:1f:db:2a:c6:01:cb:38:8d:0b:
36:c7:6c:df:f2:1f:6a:b0:03:fb:8a:8c:a4:1b:b3:
29:88:12:37:3e:95:5c:9c:4d:e7:fc:11:00:d9:9a:
64:bd:6d:e8:50:a7:7b:2c:90:6f:b8:ad:af:ca:e7:
df:9d:13:79:77:31:1c:78:9d:9d:0d:7c:ec:30:30:
67:3e:df:c5:ea:a9:74:22:f1:a1:f6:2f:13:c4:c7:
3c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F2:2A:89:B2:23:DA:B8:5C:29:35:CF:02:7E:02:E2:F4:B0:4F:50
X509v3 Authority Key Identifier:
keyid:90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:17:d5:df:24:9a:6b:49:06:05:a2:2e:1a:90:fd:a1:f3:8a:
6e:0d:2d:d0:cf:80:88:63:58:8c:47:38:d7:ae:e2:c0:0d:64:
b1:c3:2c:85:85:f4:14:35:e4:2b:12:10:77:25:b9:47:b7:2c:
f4:05:ec:43:60:c5:64:ba:a0:78:72:7b:67:d5:0f:e6:a0:5d:
06:af:b4:d2:99:49:ed:2b:6f:5a:87:1b:35:55:68:f5:eb:23:
2d:e3:40:3e:17:16:2f:be:23:cd:55:c7:cf:ce:4f:a2:fc:b3:
8d:4a:9e:e6:96:3b:b8:bf:34:08:a2:db:41:c0:93:aa:7a:af:
27:1e:06:a8:73:56:7f:79:9f:0a:41:ff:aa:9a:fd:8b:bf:b6:
ad:96:4c:2c:c9:4a:42:be:0e:f2:d2:b8:45:8c:ec:81:21:c2:
70:ef:f1:44:98:dd:15:90:78:ee:97:1d:57:8c:63:20:87:e9:
19:b0:23:f3:ad:69:04:58:bc:f8:23:1f:fd:b5:b9:3d:36:d5:
1d:d3:b3:ce:ea:6c:01:e3:23:d5:69:56:3c:9e:28:58:17:d1:
b2:23:90:d1:67:6c:d9:65:13:58:b2:7a:26:da:f0:f6:f8:54:
ed:55:dc:c0:11:40:20:1b:6c:ac:49:32:76:b1:45:38:8f:d3:
97:bd:1e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:23:12 2025 by rpki-client