Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
File: muB8lKimr3pdGPTqrqeeJt-TIhQ.mft (raw, json)
Hash identifier: qEdWJhAcGkdsIzYsiQIJuXlQdiqQVDD8JnNhcvQ4ue0=
Subject key identifier: E3:F1:1B:6E:12:53:06:D4:9A:EC:A1:BF:C7:7C:DD:21:D9:B1:43:18
Authority key identifier: 9A:E0:7C:94:A8:A6:AF:7A:5D:18:F4:EA:AE:A7:9E:26:DF:93:22:14
Certificate issuer: /CN=9ae07c94a8a6af7a5d18f4eaaea79e26df932214
Certificate serial: 019A172A30BD36775D075D3C45F93EE72A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
Manifest number: 16F6
Signing time: Fri 24 Oct 2025 17:00:32 +0000
Manifest this update: Fri 24 Oct 2025 17:00:32 +0000
Manifest next update: Sat 25 Oct 2025 17:00:32 +0000
Files and hashes: 1: hirmv4l90daqtziUonbqzbb8z94.roa (hash: 2pWfc5u+sM7C4s4+z6TKeGnl46lQEVqcp+2HcKGG7wg=)
2: muB8lKimr3pdGPTqrqeeJt-TIhQ.crl (hash: GP9Rjq0Gwc/bTxm8RiN+kLa8iR5LzfFYziiL5/vHctc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 17:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:2a:30:bd:36:77:5d:07:5d:3c:45:f9:3e:e7:2a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae07c94a8a6af7a5d18f4eaaea79e26df932214
Validity
Not Before: Oct 24 17:00:32 2025 GMT
Not After : Oct 25 17:00:32 2025 GMT
Subject: CN=e3f11b6e125306d49aeca1bfc77cdd21d9b14318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:54:66:8d:77:6e:b7:6a:95:92:77:19:99:
56:23:93:e8:85:66:3a:aa:54:c7:d6:db:4a:e1:2f:
aa:7a:d5:e4:dc:73:89:25:19:55:25:22:87:5f:c4:
08:ea:06:b8:ed:4f:2e:c2:9d:e8:d6:30:17:c3:06:
fb:c5:8b:79:5b:1b:5f:95:96:e9:ee:36:9c:e9:2e:
7f:ae:b1:e5:d9:47:2e:ed:f3:ee:4c:20:d3:9e:ec:
d3:5a:52:3c:27:4a:0d:73:27:80:a9:3a:5f:1c:a9:
9c:d3:c8:58:cd:d9:53:96:47:3d:24:b5:da:d4:13:
06:26:eb:ec:41:26:a2:e2:be:70:2e:6c:e5:65:de:
99:b2:58:25:c6:96:88:fd:d6:21:56:1d:89:aa:f5:
8a:e4:2b:d4:2e:7c:bc:b7:65:b3:6e:9c:5b:5c:24:
2c:1d:fd:41:43:a8:c9:28:76:87:7f:6c:14:72:16:
5f:d4:de:cc:3c:e5:ec:4f:a2:d7:38:f0:d6:d1:ce:
f8:ea:12:9f:98:e5:c3:21:47:14:5d:46:e2:cb:87:
13:22:27:17:6a:06:b9:fc:35:ff:34:6a:30:e3:b4:
5b:1a:27:d1:cf:1f:67:63:b4:c7:9a:1c:56:ab:50:
86:69:8e:e8:cd:85:8a:b5:e5:2f:c3:75:c4:33:e6:
b3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F1:1B:6E:12:53:06:D4:9A:EC:A1:BF:C7:7C:DD:21:D9:B1:43:18
X509v3 Authority Key Identifier:
keyid:9A:E0:7C:94:A8:A6:AF:7A:5D:18:F4:EA:AE:A7:9E:26:DF:93:22:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:3b:c7:2e:b7:07:e1:e7:7f:e6:7e:14:b3:fb:f6:04:b0:42:
70:d5:85:34:bb:9e:6c:81:72:87:5a:2c:e8:16:b3:04:1b:bd:
c4:6e:8a:0f:3f:f3:e1:27:63:b2:b3:b5:6a:01:b6:1a:16:56:
7f:4a:31:6a:a0:f9:b6:93:8b:d0:cc:77:36:79:4d:b0:be:6c:
94:b6:c6:26:4e:0e:a0:83:d9:79:be:15:b4:41:a9:75:93:03:
e5:68:a4:6b:b0:41:21:32:7b:29:f2:97:ab:55:98:8a:88:56:
d8:47:dd:82:0f:77:c3:36:c4:90:a9:51:11:e9:23:06:ff:12:
72:dd:3d:f5:ea:6c:8c:46:9a:c8:2a:d4:1c:5c:08:50:89:ee:
d3:54:63:4d:0e:f9:7b:49:cd:94:0a:3a:67:13:b3:dd:75:85:
4f:f6:a6:be:7e:f7:78:bf:f5:5e:a6:9a:06:8a:c1:f5:ec:e2:
ae:43:0b:d8:e4:54:a5:8f:e6:a0:a5:f2:a8:3d:d0:b0:49:0c:
27:5d:4e:1e:66:8b:6e:e7:cb:b1:be:82:8a:e7:68:13:d6:ce:
66:56:bc:f4:2b:f6:8a:45:46:63:45:e5:7c:43:a2:aa:8c:d8:
3f:b8:70:8b:82:6b:2e:80:a5:b3:13:0d:30:00:75:d1:82:8d:
d4:45:9f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 03:24:06 2025 by rpki-client