Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
File: mupW9uHBw1kAHsImfvD-4bRW3f0.mft (raw, json)
Hash identifier: L2tubC7RdYsSAyzKRMi1Zt+g8feLQR02vLkfZlRxd8M=
Subject key identifier: AC:68:EC:B3:E1:18:0E:AC:6F:4C:61:B5:6F:C1:35:6E:66:B7:38:03
Authority key identifier: 9A:EA:56:F6:E1:C1:C3:59:00:1E:C2:26:7E:F0:FE:E1:B4:56:DD:FD
Certificate issuer: /CN=9aea56f6e1c1c359001ec2267ef0fee1b456ddfd
Certificate serial: 019A71B8624EB7C50C0C3155558A2E5E1874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mupW9uHBw1kAHsImfvD-4bRW3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:01:40 +0000
Manifest this update: Tue 11 Nov 2025 07:01:40 +0000
Manifest next update: Wed 12 Nov 2025 07:01:40 +0000
Files and hashes: 1: mupW9uHBw1kAHsImfvD-4bRW3f0.crl (hash: fdmAALAK2aZdsr5wjRXAvCMWRhXaAI3wATsHdBq126I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mupW9uHBw1kAHsImfvD-4bRW3f0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:62:4e:b7:c5:0c:0c:31:55:55:8a:2e:5e:18:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aea56f6e1c1c359001ec2267ef0fee1b456ddfd
Validity
Not Before: Nov 11 07:01:40 2025 GMT
Not After : Nov 12 07:01:40 2025 GMT
Subject: CN=ac68ecb3e1180eac6f4c61b56fc1356e66b73803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:36:ba:3e:24:3e:b3:52:6f:86:a4:74:00:a1:
39:88:81:37:d2:44:53:68:a6:b3:c5:c7:d7:34:35:
4d:98:b1:d0:27:07:35:18:9e:b8:f1:8e:67:8a:dd:
74:23:30:1d:95:c4:a1:ff:f7:a6:48:22:fa:dd:74:
6b:76:6e:2e:47:21:a1:ff:af:58:c6:a9:d8:8c:46:
a6:a8:81:7b:37:83:31:0f:c0:96:03:e6:08:77:50:
d2:31:ba:53:31:55:05:74:70:c9:c2:0b:2d:d4:8c:
a8:3e:d5:ed:44:32:b3:3c:b0:ae:95:4d:27:08:23:
a7:c9:82:6a:f5:18:8a:79:31:12:12:20:2e:b4:ae:
e3:6c:e9:3d:0a:b7:64:15:1b:91:a1:49:23:2c:22:
91:00:9a:1c:57:e0:21:1b:69:d5:69:58:c1:a5:af:
7d:ad:91:c1:d6:e7:36:c3:7f:48:52:26:5d:44:53:
3a:8f:9d:2c:4d:66:cd:da:34:dc:fb:8a:88:46:1f:
9f:43:50:65:b5:f9:3d:d0:7f:ed:68:b1:b8:5c:05:
67:6a:20:20:8a:0d:27:de:44:a1:e8:79:e1:cc:da:
7f:04:bc:02:83:ef:73:a6:93:ae:96:79:40:b7:48:
98:d8:20:75:53:09:8a:c9:ca:91:8a:d4:ba:16:c4:
8d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:68:EC:B3:E1:18:0E:AC:6F:4C:61:B5:6F:C1:35:6E:66:B7:38:03
X509v3 Authority Key Identifier:
keyid:9A:EA:56:F6:E1:C1:C3:59:00:1E:C2:26:7E:F0:FE:E1:B4:56:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mupW9uHBw1kAHsImfvD-4bRW3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a9:f0:16:91:0f:6f:c5:ee:c2:9e:b3:47:96:15:c5:b5:4e:
40:49:4c:21:fc:8b:16:0a:b5:dd:52:94:b1:2f:25:7d:cc:05:
0e:ba:2f:36:70:f6:33:c6:9b:14:56:62:28:8e:fa:65:1a:62:
a4:c4:b4:93:bf:da:ec:b1:7c:cc:bd:d2:a2:4b:54:69:36:f7:
c0:df:1c:41:59:28:5e:03:07:5c:cd:ab:92:59:24:ba:9b:90:
d8:48:e8:62:41:5b:8b:74:fb:da:6b:fa:44:08:f7:7a:ff:63:
3b:fb:f8:95:7c:ad:f7:10:90:10:ef:db:a2:d9:3d:fe:66:a3:
2c:c1:71:42:34:a0:09:27:25:63:71:18:bb:49:ca:99:cd:29:
ef:bb:80:86:4b:54:bd:bd:71:34:7e:f7:fb:f0:ae:dc:46:9d:
8c:42:31:d8:d9:a1:f7:a4:e8:36:80:4a:33:aa:48:04:cc:7f:
16:e3:97:44:1d:9d:3e:3b:56:9a:26:3b:ff:a8:b9:e2:ac:f9:
99:16:d5:9d:56:5d:bf:c7:40:4e:15:14:16:93:f7:9d:06:4b:
4c:84:a6:de:c4:d0:fb:8f:19:70:80:60:b5:83:7e:ce:a3:d2:
34:93:97:0d:a5:b9:b1:de:49:fc:91:a4:61:d4:24:4e:ab:fb:
9f:ec:0a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:35 2025 by rpki-client