Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
File: mUqt73Cb43uczULMK4xzLDlxUPo.mft (raw, json)
Hash identifier: M0kVd4Y/MpD1N99fjA0uFPpFxAzcw+rUaEfcB+QCNqs=
Subject key identifier: DF:D9:96:A1:97:A9:0C:71:9A:36:49:13:F8:01:49:59:C0:26:D3:18
Authority key identifier: 99:4A:AD:EF:70:9B:E3:7B:9C:CD:42:CC:2B:8C:73:2C:39:71:50:FA
Certificate issuer: /CN=994aadef709be37b9ccd42cc2b8c732c397150fa
Certificate serial: 019A711315AAA9164EEB32BE6BE9326EA50A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
Manifest number: 1702
Signing time: Tue 11 Nov 2025 04:01:07 +0000
Manifest this update: Tue 11 Nov 2025 04:01:07 +0000
Manifest next update: Wed 12 Nov 2025 04:01:07 +0000
Files and hashes: 1: mUqt73Cb43uczULMK4xzLDlxUPo.crl (hash: ajwssQbkoBIrkpLNMd9MNbrzZS4sE5n2nNzB9z00knE=)
2: rCQFs6YvGWUAxg9vVWInZlNxQI4.roa (hash: +0NX89cMUvPysuXc7Y1nf0CYHUBQMqz9BTCGNPE3tAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:15:aa:a9:16:4e:eb:32:be:6b:e9:32:6e:a5:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994aadef709be37b9ccd42cc2b8c732c397150fa
Validity
Not Before: Nov 11 04:01:07 2025 GMT
Not After : Nov 12 04:01:07 2025 GMT
Subject: CN=dfd996a197a90c719a364913f8014959c026d318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ba:cd:e3:63:f1:d1:6a:86:07:95:b3:cc:ad:
87:31:01:51:30:5b:ea:fa:5c:27:33:a1:a6:f1:e5:
c2:2e:4c:02:8b:28:6a:8b:31:fa:8e:f6:00:1c:b1:
e4:3f:5a:0e:fd:39:5e:6e:fa:ec:17:79:de:4c:fb:
53:0f:ac:2d:2a:d4:57:c9:2a:a2:0e:ae:5d:b8:d7:
dd:4b:56:f2:da:3a:9c:39:7f:9a:56:10:89:4c:9d:
d7:02:49:59:8a:16:8e:3c:0f:b0:3b:7e:44:c5:1d:
a5:99:72:1b:9d:6a:e7:7d:56:e4:8b:bd:ca:e7:56:
3a:53:5e:34:d5:a7:f6:41:03:c3:de:27:90:0a:04:
5b:f0:a4:9f:70:6e:41:66:ad:49:b9:2a:56:5b:06:
58:6d:d0:b3:aa:2f:db:0b:13:0b:38:17:b9:1b:97:
34:cc:72:2e:eb:25:54:84:7f:a7:06:6f:ae:7c:dc:
fc:d6:ea:d5:d2:ef:fe:0c:33:cb:9f:03:4a:53:fb:
42:f0:a6:96:86:32:4d:ab:ea:6c:d5:87:49:4c:db:
dd:9c:4b:ac:10:79:08:be:db:6a:70:3e:76:44:70:
9d:1f:0e:d9:3b:4a:31:d3:89:c2:c1:50:e8:84:7b:
ba:a4:fb:0d:bc:0c:58:90:d8:36:e3:d4:ce:0e:b6:
e3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D9:96:A1:97:A9:0C:71:9A:36:49:13:F8:01:49:59:C0:26:D3:18
X509v3 Authority Key Identifier:
keyid:99:4A:AD:EF:70:9B:E3:7B:9C:CD:42:CC:2B:8C:73:2C:39:71:50:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6b:a0:9f:f1:77:09:88:d3:d0:0f:d9:d4:42:85:34:a3:f8:
e4:33:0b:5b:d4:97:88:7a:2d:f9:88:1e:f5:8b:11:2c:b3:e5:
9e:83:21:0c:b5:c5:d1:0e:81:ac:fb:39:85:54:87:a0:37:a6:
0a:96:05:ba:7b:bf:c0:9b:d9:ee:7e:61:27:ee:84:6e:38:62:
9a:73:66:a0:b0:1d:9d:97:80:43:66:7b:ab:63:66:ad:cf:4d:
01:dc:1f:7a:3a:13:f1:19:e7:6d:0e:6b:25:80:66:4f:e1:e0:
85:9f:4b:93:1c:ed:6b:ab:24:c3:0c:e9:30:57:20:44:2a:ee:
23:82:d2:d6:10:fd:b9:74:47:0d:5e:1e:aa:a1:98:b9:8e:c2:
16:ac:80:ce:1c:42:bd:97:ae:aa:bf:47:f1:67:76:e0:f7:7b:
74:fe:35:9f:d5:37:a7:03:cf:c6:86:11:5e:dc:e5:50:84:30:
25:e5:2b:36:cf:01:6e:f7:87:92:6f:bf:0a:0b:c2:a6:3f:4e:
9d:dc:38:f5:d6:a5:18:a3:c6:2b:33:8b:b9:ae:f3:25:cc:6c:
72:dd:8b:31:2c:b3:2c:ee:37:e3:61:f3:59:70:77:59:37:d2:
47:ca:40:23:3e:e9:12:00:f4:8b:5f:37:60:5d:83:80:24:02:
c9:ee:dc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:58 2025 by rpki-client