Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
File: muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft (raw, json)
Hash identifier: YF6rerFtrwevA9FXb64Bo1Ffgua1ltNqvc/GxYhSlbg=
Subject key identifier: B1:ED:AF:C6:B2:7E:B4:3B:FD:45:5F:17:2B:9F:72:DF:15:E3:9F:ED
Authority key identifier: 9A:E0:08:15:D2:BD:04:1D:CC:0E:CE:06:76:56:BE:5E:6E:B1:2B:62
Certificate issuer: /CN=9ae00815d2bd041dcc0ece067656be5e6eb12b62
Certificate serial: 019A71B7C716F048939CA47096875900CE7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
Manifest number: 01D3
Signing time: Tue 11 Nov 2025 07:01:00 +0000
Manifest this update: Tue 11 Nov 2025 07:01:00 +0000
Manifest next update: Wed 12 Nov 2025 07:01:00 +0000
Files and hashes: 1: muAIFdK9BB3MDs4Gdla-Xm6xK2I.crl (hash: QmoqICtcD+FN6RP1/xoYvZHVZ99Fx2mDu4wSfG5++EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c7:16:f0:48:93:9c:a4:70:96:87:59:00:ce:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae00815d2bd041dcc0ece067656be5e6eb12b62
Validity
Not Before: Nov 11 07:01:00 2025 GMT
Not After : Nov 12 07:01:00 2025 GMT
Subject: CN=b1edafc6b27eb43bfd455f172b9f72df15e39fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ad:82:99:0b:8e:a7:a0:60:08:8f:8c:7b:b9:
90:9d:c6:da:1e:f8:c6:ed:55:46:c2:ba:ba:e7:5a:
29:42:c9:06:d6:9f:eb:f7:4a:2a:c2:25:c2:2d:82:
ec:73:e0:61:25:72:eb:8f:87:f7:04:7b:b6:0a:cc:
4a:69:d8:43:f6:96:33:ba:d1:0f:a0:91:05:dd:34:
8a:8c:88:53:e7:a0:dc:84:e5:4a:aa:89:17:77:e8:
29:60:cd:6d:9a:fe:63:ae:41:46:65:c5:2a:72:f8:
f8:99:89:a5:63:ca:36:79:bc:f0:86:e1:46:b0:95:
f9:e7:43:95:ff:bd:6e:f6:9d:5c:a7:60:57:df:9d:
85:85:93:23:3a:a0:73:22:5b:23:39:a0:2f:d8:3f:
bb:b6:fa:49:9b:27:35:67:f6:f6:8d:ae:bf:3e:1a:
8b:d4:e7:c9:ba:8b:9f:b9:29:48:34:1c:0a:a5:57:
2c:d4:fe:1e:32:bc:18:f2:9d:de:cd:c6:fd:92:d2:
38:36:7f:67:ea:61:8d:fb:13:fa:b8:01:04:ed:9b:
b3:4a:30:0b:e1:38:46:7a:60:79:0c:27:85:f5:d9:
0a:8e:ae:64:2e:ed:52:a8:76:cd:4b:bf:35:c0:27:
5e:57:66:84:98:0e:91:5f:bd:0f:2f:f5:a1:46:12:
94:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:ED:AF:C6:B2:7E:B4:3B:FD:45:5F:17:2B:9F:72:DF:15:E3:9F:ED
X509v3 Authority Key Identifier:
keyid:9A:E0:08:15:D2:BD:04:1D:CC:0E:CE:06:76:56:BE:5E:6E:B1:2B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:50:76:30:d0:36:04:36:66:be:5c:97:44:4f:d6:12:1b:20:
b3:bb:f5:18:4e:c2:c6:04:36:9b:7b:27:45:da:0d:6d:d8:1e:
fe:17:05:14:64:19:f0:bd:1a:53:5a:fd:ef:c3:f8:8e:f7:c7:
27:bd:27:cf:f7:18:75:63:a9:bf:61:17:5f:d9:5e:ba:4d:6f:
13:62:d8:0e:bf:1a:91:33:04:fe:ca:92:32:bf:51:3b:a1:26:
19:be:e5:a6:83:a7:1b:10:32:6d:93:15:97:34:a7:22:1c:27:
99:99:3c:05:f7:87:dd:66:91:20:a1:7c:93:1e:eb:86:fb:87:
5a:c2:50:5a:fc:15:a6:92:3c:ff:ca:b1:3f:dc:70:22:f9:c2:
5d:ae:53:23:cb:3e:5c:dc:8c:58:5e:5c:ba:6d:90:64:6d:25:
6e:73:8a:d3:24:fc:e3:83:f5:21:de:f5:63:58:da:55:a8:d0:
c2:8f:b4:8a:e7:51:eb:f0:0a:9c:8c:28:5a:27:cc:55:e1:05:
d7:29:8a:f5:99:6b:68:13:83:2a:70:23:52:11:f6:ef:40:77:
e6:c4:bd:db:85:6c:62:8a:4e:b7:b9:13:83:88:8b:b2:46:b7:
1d:0f:88:d6:59:e1:14:86:87:ca:53:27:0b:a5:24:7a:8c:18:
be:38:40:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:42 2025 by rpki-client