Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft
File: mur6lsnVY-ZQulkv-wbizutqCFk.mft (raw, json)
Hash identifier: xUmo91kSsLkBrVYcNwLfuhtJbU26auvzT8uTlYxSy1M=
Subject key identifier: D5:EB:3A:40:86:81:A0:15:A4:E1:18:7B:1F:6F:80:0D:0F:C3:32:AB
Authority key identifier: 9A:EA:FA:96:C9:D5:63:E6:50:BA:59:2F:FB:06:E2:CE:EB:6A:08:59
Certificate issuer: /CN=9aeafa96c9d563e650ba592ffb06e2ceeb6a0859
Certificate serial: 019A2B8C84F8DBC865EDF4573E3CDDFAF1CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft
Manifest number: 16FD
Signing time: Tue 28 Oct 2025 16:00:20 +0000
Manifest this update: Tue 28 Oct 2025 16:00:20 +0000
Manifest next update: Wed 29 Oct 2025 16:00:20 +0000
Files and hashes: 1: Uwd9Y3NnCMGZmVRE34P-tV7c6CA.roa (hash: 7yboFI0VfCPRE/G2/gMEN7pPuKOLyqEoyViA8/cI6kQ=)
2: irj1HjAurNUv-4zFYoq9zYDgdlE.roa (hash: Q709g8riB8kWPE65HcwVtvNF/Lb15QFI8yUUJR0G7Y0=)
3: mur6lsnVY-ZQulkv-wbizutqCFk.crl (hash: cj38dWLV/wLoQuDeI5lZGdITw7VG9QUe4wuxh3O6FYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:8c:84:f8:db:c8:65:ed:f4:57:3e:3c:dd:fa:f1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aeafa96c9d563e650ba592ffb06e2ceeb6a0859
Validity
Not Before: Oct 28 16:00:20 2025 GMT
Not After : Oct 29 16:00:20 2025 GMT
Subject: CN=d5eb3a408681a015a4e1187b1f6f800d0fc332ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:96:df:3e:d3:eb:8b:13:1c:1b:a7:52:ae:38:
24:02:1c:46:88:55:07:fd:bc:86:f2:a3:07:4e:14:
ac:b8:32:59:d7:b9:b4:82:72:91:b3:5e:b9:16:fc:
48:b9:72:99:a8:8b:45:f4:e8:b9:43:56:92:a3:a1:
95:28:8d:db:df:7e:70:02:0c:e0:20:14:9b:c7:db:
c6:52:dc:a6:a9:7b:4d:eb:fe:33:dc:63:2e:29:7a:
0e:e0:4b:12:66:ee:34:5c:d4:49:ab:60:14:9a:cd:
5e:2c:23:a1:7c:8a:6f:1e:93:f9:27:97:d1:fd:9a:
ec:35:c7:69:e1:53:c4:5a:a6:f9:a3:8e:d1:c1:54:
3c:c7:92:0d:fd:8c:f9:d5:0b:4c:56:47:4e:0e:8a:
50:77:b2:bf:2c:b6:57:c3:df:8a:27:51:7e:4a:a8:
72:84:7e:3b:52:67:b5:40:d0:9e:37:f2:2a:60:d3:
69:65:a1:1b:dd:de:79:56:98:69:94:4f:95:4d:3e:
e3:18:7f:62:eb:ed:6e:17:7d:f6:be:eb:0a:fe:2e:
70:ad:d0:42:80:cb:2f:30:bb:79:f3:55:90:83:c6:
f5:48:45:8e:d0:6f:a5:2a:30:fe:07:f7:23:0b:bd:
05:55:76:93:f9:17:80:15:11:51:1b:04:bf:da:b9:
84:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EB:3A:40:86:81:A0:15:A4:E1:18:7B:1F:6F:80:0D:0F:C3:32:AB
X509v3 Authority Key Identifier:
keyid:9A:EA:FA:96:C9:D5:63:E6:50:BA:59:2F:FB:06:E2:CE:EB:6A:08:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:8b:bb:c7:4c:8a:a7:01:4d:b9:dd:93:fa:08:2b:fe:bc:f0:
9a:48:55:0a:23:a0:80:9e:16:10:e5:15:63:ad:82:24:27:91:
99:3b:65:ce:9f:ab:a9:7d:86:24:28:a5:22:69:c2:59:7a:05:
b8:ea:8c:aa:b1:6f:fa:69:d8:3d:f6:f7:f6:94:a8:4b:8b:d3:
52:23:1d:4e:92:67:55:95:45:4e:d6:aa:f2:6e:26:51:ae:cf:
2d:f7:4b:65:95:cf:b8:70:db:db:69:50:67:86:32:59:5b:1a:
9b:82:ba:b9:9f:3f:4a:18:00:03:d7:3d:a6:a8:36:a0:6e:1a:
2e:f6:42:29:3f:af:df:12:ce:8e:4f:6b:e5:69:6c:37:f7:3d:
79:8b:65:03:f4:a8:17:00:02:6e:6c:b7:69:42:d9:ce:d1:30:
6c:17:a8:99:2d:92:9b:3f:3c:71:8c:bc:1a:eb:c7:30:28:5c:
e2:49:26:16:31:8d:4d:52:4d:28:8b:59:18:d6:9b:cf:c4:2d:
56:91:61:74:08:10:eb:82:30:cf:a7:a9:52:09:e7:b9:2c:c0:
1f:f8:94:c8:b1:97:d2:94:d8:25:50:2c:79:c4:11:bd:0f:84:
79:93:d0:df:06:75:e5:fa:54:85:37:e9:c4:3b:3a:d5:47:8c:
b4:29:a4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 21:49:33 2025 by rpki-client