Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
File: mUT4EqDgAsOOhOR2KL26A4WYCQs.mft (raw, json)
Hash identifier: la6cQwTDs2Vd+x1SK4hWKfVGz7aO5gclO/2qVLCCcrA=
Subject key identifier: D8:BE:A5:28:CB:E8:20:E2:02:EA:70:DB:5A:D7:DE:50:13:94:37:F1
Authority key identifier: 99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B
Certificate issuer: /CN=9944f812a0e002c38e84e47628bdba038598090b
Certificate serial: 019A6C5AF84F88B0B2D4E1A85EB7730C2CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
Manifest number: 0CA9
Signing time: Mon 10 Nov 2025 06:01:32 +0000
Manifest this update: Mon 10 Nov 2025 06:01:32 +0000
Manifest next update: Tue 11 Nov 2025 06:01:32 +0000
Files and hashes: 1: 8bKL0IbQOSgAyNHMsOTwdqXxmBA.roa (hash: SiMZDaqzDjVBWVjWC+CfQKEVMp/aAzgNg3WOueNrYnY=)
2: TOZ32S2cTtEqOAugUTe4Diokmjc.roa (hash: ZfLvnSZb+3P/Lwkuj8mzNGrvWl0G71GHwv4eE3pKqaY=)
3: aWPrtGmH1Yyr9JygOmf8I8XXZSE.roa (hash: rxPNfyseh9mYpYa5sMESZMtb8GzaNyszUYWBRocITXE=)
4: mUT4EqDgAsOOhOR2KL26A4WYCQs.crl (hash: 7UZciBwQy6UFgaSD8ck1BD9oLIun/3bFr1sVo/7Dwk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Nov 2025 06:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:6c:5a:f8:4f:88:b0:b2:d4:e1:a8:5e:b7:73:0c:2c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9944f812a0e002c38e84e47628bdba038598090b
Validity
Not Before: Nov 10 06:01:32 2025 GMT
Not After : Nov 11 06:01:32 2025 GMT
Subject: CN=d8bea528cbe820e202ea70db5ad7de50139437f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:42:68:7c:ed:24:ea:49:63:fa:d1:8c:dc:ea:
d0:7d:b7:20:1d:c4:4b:0b:24:40:39:83:6a:03:e7:
32:cf:db:06:ed:5a:3d:ee:fc:e3:b0:cb:e9:ab:18:
c8:eb:1f:dd:35:16:23:c5:5a:43:8e:18:2e:a3:0b:
52:47:49:b7:a2:fe:19:55:e8:0a:74:34:2f:16:d6:
de:ec:82:76:14:7b:39:28:ff:0e:fc:28:ad:b5:0f:
7d:24:c3:18:5e:f6:59:b7:59:3a:89:9d:99:a8:30:
3c:96:dc:71:63:43:a8:ee:d2:47:d8:c7:09:40:bc:
4d:98:23:df:a4:5d:80:94:1b:09:89:09:f1:77:9c:
d2:51:13:fd:94:b9:36:19:e8:11:c4:fe:00:62:9a:
a5:ce:d0:9f:6b:a0:05:4b:fd:83:10:98:17:6c:c4:
88:56:46:1c:ef:5c:60:74:b6:15:e3:cc:07:5d:0e:
24:87:31:77:e5:7a:bd:c7:68:7e:9c:bd:ce:c3:fc:
2b:d3:c8:82:eb:a6:31:d1:35:e2:3d:db:50:b4:e5:
da:6e:13:a9:5f:c9:98:a8:5e:c3:67:6b:eb:5e:73:
b1:df:de:f0:9f:82:13:9c:14:10:a2:65:80:9d:b1:
32:2c:e4:dd:ea:ec:cb:1b:ac:03:13:b7:52:c6:8e:
ca:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BE:A5:28:CB:E8:20:E2:02:EA:70:DB:5A:D7:DE:50:13:94:37:F1
X509v3 Authority Key Identifier:
keyid:99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:73:78:6e:c5:f3:62:d8:87:62:a2:58:9b:2f:ac:4d:91:81:
0d:75:c1:bb:2a:20:5a:1c:41:8c:a9:43:e2:bd:7e:1b:ca:5d:
5d:0f:68:d2:a8:02:25:4e:66:1f:c7:ef:87:96:55:68:67:1c:
d4:8f:12:82:f9:e7:f5:e9:ae:2c:7d:01:7d:25:50:fd:3a:32:
d0:f2:f5:62:57:90:26:9e:41:18:79:ad:83:c2:23:43:d9:e1:
df:c8:53:ce:19:2c:77:6b:90:e3:fb:ab:83:50:d2:9c:e3:77:
da:08:83:95:b4:e4:f6:44:f1:4a:56:31:99:77:ec:1a:b3:0e:
4a:7b:6e:10:ea:7f:5a:7e:6a:63:14:2a:2d:0e:7c:91:d7:00:
5a:43:17:c5:19:a6:56:47:2b:3c:d5:3c:e5:55:9f:fe:c0:04:
7d:3e:17:e5:07:32:0d:da:84:28:65:7d:23:af:c6:8a:94:0e:
c1:ee:49:d2:c7:3d:3a:a4:eb:e0:b3:30:45:36:3d:87:94:c7:
94:cf:ed:84:ca:27:45:11:18:8f:ac:a8:04:69:af:31:9b:4f:
67:83:03:4e:64:7b:af:7c:81:d9:fb:00:85:93:eb:2d:b9:a0:
25:a4:b1:37:c6:1a:19:3a:1a:17:cf:1e:27:a8:a6:28:ca:bd:
af:66:8a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 10 15:40:11 2025 by rpki-client