Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.mft
File: muVOVVW5meWct0g6YG1rJMv2GYw.mft (raw, json)
Hash identifier: DuDFP9xnq+vXQe2c3GPNeaVyeaOeJ1FunsfhLO7vWWw=
Subject key identifier: 71:3E:07:D2:A7:84:73:75:BA:F7:FA:F6:AB:37:F1:92:6B:2C:EF:A0
Authority key identifier: 9A:E5:4E:55:55:B9:99:E5:9C:B7:48:3A:60:6D:6B:24:CB:F6:19:8C
Certificate issuer: /CN=9ae54e5555b999e59cb7483a606d6b24cbf6198c
Certificate serial: 019A71EEB105CCBD8F458B82AB991E17173A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muVOVVW5meWct0g6YG1rJMv2GYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.mft
Manifest number: 01F1
Signing time: Tue 11 Nov 2025 08:00:59 +0000
Manifest this update: Tue 11 Nov 2025 08:00:59 +0000
Manifest next update: Wed 12 Nov 2025 08:00:59 +0000
Files and hashes: 1: muVOVVW5meWct0g6YG1rJMv2GYw.crl (hash: oHhHR0O0SKTbIRrPjyMuUIpdeyIf/WmvoPw1UfSZwnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/muVOVVW5meWct0g6YG1rJMv2GYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b1:05:cc:bd:8f:45:8b:82:ab:99:1e:17:17:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae54e5555b999e59cb7483a606d6b24cbf6198c
Validity
Not Before: Nov 11 08:00:59 2025 GMT
Not After : Nov 12 08:00:59 2025 GMT
Subject: CN=713e07d2a7847375baf7faf6ab37f1926b2cefa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fe:ac:cf:cc:0c:ea:19:ac:5e:f4:04:37:57:
3e:ea:de:12:7f:9c:53:29:23:e1:e4:fc:d1:07:a6:
04:3c:c9:cd:b2:c0:c7:4c:ad:20:72:aa:07:09:4d:
7c:16:36:a1:6c:80:fe:73:3c:b3:ed:b4:2e:eb:0f:
f2:f1:97:d1:e8:64:a5:86:d3:fd:52:4d:f5:82:a5:
0c:be:53:3b:75:36:b2:e4:33:3e:88:0c:f0:20:45:
af:80:62:22:26:7f:e2:5b:38:31:e2:3f:e1:68:68:
61:17:2b:b5:ec:20:de:c1:f8:52:89:15:3d:70:1e:
8f:2f:49:21:72:dd:0d:1d:34:86:ed:95:fe:a8:63:
92:d6:cd:23:9c:66:51:bb:1c:81:c2:03:99:fa:6f:
8c:69:01:62:10:44:19:6b:fe:19:49:8e:17:ac:4f:
9b:34:aa:cc:ba:68:eb:53:b9:1b:fb:2c:d2:b1:5b:
a2:7c:31:5d:1d:ca:99:6d:0a:9a:a3:99:8e:17:27:
81:e0:30:50:07:68:00:ae:92:64:a5:81:37:8c:a8:
49:9a:84:08:e9:b0:0f:86:4f:e5:4b:a5:8d:7d:2a:
17:fb:b0:26:09:03:eb:f4:da:02:e6:af:7b:72:34:
6e:26:0d:d9:41:06:8e:74:cd:c8:af:5a:86:c6:ca:
0c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3E:07:D2:A7:84:73:75:BA:F7:FA:F6:AB:37:F1:92:6B:2C:EF:A0
X509v3 Authority Key Identifier:
keyid:9A:E5:4E:55:55:B9:99:E5:9C:B7:48:3A:60:6D:6B:24:CB:F6:19:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muVOVVW5meWct0g6YG1rJMv2GYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:90:b8:c1:0d:97:63:a0:8f:95:07:2e:8b:45:ff:3b:20:60:
d7:c1:cd:27:a2:5b:a6:4f:eb:a6:c8:90:30:45:0f:8e:7b:fa:
e7:a1:30:a8:ac:06:bb:90:d6:a1:e8:c4:a5:a2:8f:87:1d:71:
46:24:34:6c:3c:6c:eb:e3:3a:bb:5c:c8:10:78:00:2e:1f:1f:
ba:a6:c2:fd:e5:37:da:cc:a6:43:84:ad:12:3c:7e:36:8b:d9:
d0:83:ea:c4:f7:35:29:62:17:4f:ad:d6:e4:d0:19:f1:b4:be:
02:63:56:75:66:16:88:80:27:5a:0a:71:76:5a:7a:3a:b1:6e:
cd:53:31:4f:0e:b2:50:aa:dd:f5:12:ca:ad:47:b0:cb:4d:21:
4d:27:77:50:46:00:a7:68:7c:3d:0c:c4:90:7b:c3:d2:ce:b6:
6e:52:56:c2:98:4e:e4:e4:b6:d8:02:b1:03:9a:fe:98:ab:f1:
85:93:d6:06:63:79:ff:1d:00:98:9d:0d:f0:e4:48:c4:55:ce:
6f:c2:50:d9:27:35:72:4e:1e:12:2f:7f:bf:4b:47:b5:8d:6e:
68:e5:e5:fa:6c:be:6c:9d:6f:8a:46:d6:85:71:cc:38:ca:28:
11:67:17:1b:2f:02:bc:21:d9:1a:8e:10:8a:b5:58:5d:06:bf:
08:b0:df:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:16 2025 by rpki-client