Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
File: 99MudSlBh9Rujq4Pj-crX9er-IY.mft (raw, json)
Hash identifier: K3bOybfVcbTPYSFiNWGrsGOf1hUAjqkP5p5bfS63YZk=
Subject key identifier: 56:70:3A:2D:FD:EF:57:9D:10:C4:39:F6:EA:DF:60:EA:5E:15:0F:C5
Authority key identifier: F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86
Certificate issuer: /CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
Certificate serial: 019A7293EE082E7C6395714BA84BCA942FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
Manifest number: 1727
Signing time: Tue 11 Nov 2025 11:01:28 +0000
Manifest this update: Tue 11 Nov 2025 11:01:28 +0000
Manifest next update: Wed 12 Nov 2025 11:01:28 +0000
Files and hashes: 1: 99MudSlBh9Rujq4Pj-crX9er-IY.crl (hash: OfbJv2TqAkqO2XJGlFSAmcz4aqyMpdZ42bNqbiDojHo=)
2: FYg_psCFhdR_n5VNhP25gINYx6M.roa (hash: h+fjKLWgHVAllkPWeuz1NL6KyEoRyUzS/iNO+yf1JFI=)
3: ZhvVa7SGL0ihaaWqEDQl81ffNSw.roa (hash: ytKQDKvlQVK8AL0ByiBKUDRRuwN5/717YGo/cNpO++k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:ee:08:2e:7c:63:95:71:4b:a8:4b:ca:94:2f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
Validity
Not Before: Nov 11 11:01:28 2025 GMT
Not After : Nov 12 11:01:28 2025 GMT
Subject: CN=56703a2dfdef579d10c439f6eadf60ea5e150fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:45:7c:a7:ab:a7:de:87:5a:1d:04:a8:0c:5d:
80:1d:5e:d7:12:31:ea:bc:c6:c9:c9:6b:a3:a8:e1:
8c:a6:93:ef:a4:70:69:a7:82:9a:1b:ab:f1:79:b6:
03:87:eb:cc:49:ea:8b:94:04:97:aa:70:a4:d9:c4:
ac:4f:6f:11:f0:94:ae:8d:cd:fc:6e:d4:bc:fd:8f:
10:94:31:a9:b9:6e:37:ca:7e:21:f1:13:fe:d1:ee:
ee:77:8b:48:ab:14:7e:01:61:c9:ef:7e:a2:c9:c4:
68:fe:14:23:65:cc:2f:b1:2b:d6:43:a8:5e:9a:34:
62:76:c0:9c:66:7a:ad:69:92:ea:71:09:1f:5e:5e:
9a:76:f6:57:70:f0:de:ee:83:b9:5b:75:b7:32:92:
3a:82:ed:33:f7:7a:23:d4:b5:d6:5a:28:88:fb:68:
62:61:5b:4c:a6:d5:43:c1:15:d2:ec:83:d8:3e:0a:
7c:3a:37:b4:77:91:02:4f:55:82:25:6f:ac:78:36:
2e:aa:2e:4c:17:f4:62:10:aa:b5:2b:27:65:aa:04:
1a:c6:8f:5a:cd:06:8d:7e:f9:eb:33:a2:52:da:77:
54:5f:87:b7:69:e7:1b:3b:2a:2b:e4:b7:f5:f1:a3:
ae:38:87:53:ea:31:6a:fe:04:a4:05:2d:d6:6a:35:
cb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:70:3A:2D:FD:EF:57:9D:10:C4:39:F6:EA:DF:60:EA:5E:15:0F:C5
X509v3 Authority Key Identifier:
keyid:F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:bb:4d:c2:50:a0:3a:75:92:1f:1e:be:e0:ef:25:26:06:d4:
e6:3d:89:16:2d:94:19:ca:fb:31:a7:ba:7d:58:74:79:b1:4f:
c4:30:c8:51:bc:67:4b:45:a4:f7:34:69:6d:b2:70:cf:f1:78:
a7:95:84:2b:bc:fe:ee:0a:0f:5a:94:51:27:8a:bb:0f:28:a7:
8e:26:8e:a7:01:a3:c5:2c:ca:8a:9d:eb:00:5c:fd:da:1a:88:
56:90:b5:5c:19:d0:7f:6e:db:1d:f7:76:e5:9c:79:f6:dc:26:
8a:2c:12:ba:a1:9c:55:2c:fd:4a:11:87:39:ca:72:f4:9f:ab:
9d:aa:13:e2:77:a1:32:ba:e7:c6:58:75:f0:31:aa:76:53:36:
7a:50:e5:89:68:99:a1:f0:5f:90:64:33:0f:89:8c:ac:13:86:
22:fc:20:81:c6:1f:79:2e:a0:66:ab:2b:ea:56:7a:b6:23:c1:
42:36:00:0c:e6:ca:5f:f2:c8:98:51:c7:92:08:36:64:2a:f7:
5c:2d:f3:c5:12:0e:19:b7:3a:41:c9:0d:79:91:15:0b:96:0f:
ff:42:80:6d:d7:a5:b2:31:43:f5:46:1a:a9:0b:64:3f:33:a4:
a9:61:36:a7:24:77:2a:90:06:5d:09:c0:ee:78:0a:b5:2f:5d:
f1:ad:28:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:45 2025 by rpki-client