Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
File: mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft (raw, json)
Hash identifier: +hxdRgnoXHMc0whQGc8MpCvDc6ib1YUSqyoRHSyVEMY=
Subject key identifier: D5:BB:C1:DD:BB:49:CD:AD:60:ED:25:6E:46:C1:00:9E:D6:66:11:9E
Authority key identifier: 9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
Certificate issuer: /CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Certificate serial: 019A71EEFF0DAF56AA13C6C404C4660350B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
Manifest number: 100D
Signing time: Tue 11 Nov 2025 08:01:19 +0000
Manifest this update: Tue 11 Nov 2025 08:01:19 +0000
Manifest next update: Wed 12 Nov 2025 08:01:19 +0000
Files and hashes: 1: mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl (hash: W2VeumNqarkDNo6R7kcNnt5GU+EHvnxzMiMv4Stznks=)
2: zAfXaaTLSsRoB5kUrFVM41jmKKM.roa (hash: Qyk65ct/H4EE3CmFVP3i+QvaSpxHvWaeOqI7968YDoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ff:0d:af:56:aa:13:c6:c4:04:c4:66:03:50:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Validity
Not Before: Nov 11 08:01:19 2025 GMT
Not After : Nov 12 08:01:19 2025 GMT
Subject: CN=d5bbc1ddbb49cdad60ed256e46c1009ed666119e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:25:d6:7d:24:99:60:9b:91:3f:08:e6:d0:2e:
97:55:58:30:74:8f:75:4a:e6:d9:bf:4c:74:e8:1c:
cc:bc:3a:2d:e3:d4:61:1a:0a:74:97:ba:42:df:0e:
04:8d:64:fa:3a:89:83:a0:91:ab:c6:84:11:2b:f2:
4c:16:84:08:88:41:38:42:6e:75:8c:6b:62:43:b3:
22:80:ba:da:bf:79:c3:02:c8:30:00:82:46:4f:4e:
2c:7a:45:ba:95:ec:9c:01:a0:d1:05:36:63:17:00:
52:e4:47:53:f8:76:c7:6c:04:e1:17:bb:7b:6e:fa:
d6:89:9d:e4:b1:60:e9:81:4a:99:70:15:84:0b:78:
5f:ea:2c:e3:97:fe:50:b8:d1:8f:a6:55:f4:9b:5b:
d7:3d:60:6a:67:13:8b:56:c0:14:30:6f:13:4e:61:
78:c2:3a:b0:3d:a6:28:af:8b:e5:82:73:52:ac:08:
66:a8:dc:c8:66:52:c7:c3:e1:76:5a:2e:c7:d9:67:
10:a0:2d:5a:b7:cb:e9:75:de:e9:d8:cb:e5:4f:7b:
94:29:f3:ec:96:16:39:be:c0:29:65:fe:74:e7:cc:
7f:7c:00:04:21:97:e4:e2:e2:a9:ee:c0:01:64:26:
2a:ee:7b:69:fd:c0:6e:63:dd:30:2e:1f:4e:cd:a7:
85:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BB:C1:DD:BB:49:CD:AD:60:ED:25:6E:46:C1:00:9E:D6:66:11:9E
X509v3 Authority Key Identifier:
keyid:9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a5:57:11:06:c7:a1:24:e6:2d:20:ca:38:b9:84:b1:c7:25:
3b:00:94:bc:6f:67:95:58:14:d0:7c:b9:3a:1d:2a:15:0d:56:
0f:52:e3:0d:11:e7:ef:ce:98:c1:ef:f5:1f:5f:ec:d7:18:5e:
c9:0c:c2:d5:70:d0:3e:9e:ec:c4:7c:1d:fa:6a:94:61:1b:64:
70:81:d8:7e:cb:0d:2e:a2:25:67:79:30:5d:84:7d:a4:4b:da:
cc:e6:60:1d:49:e3:8d:24:5b:2f:bb:ea:f5:9a:88:6b:0d:d3:
ec:1b:58:0e:f6:d2:dc:2e:8e:47:ff:e6:49:4c:fe:35:9a:72:
56:2e:2f:75:91:a7:45:0d:ad:fa:73:28:eb:4b:d0:83:45:ab:
ec:92:57:2c:73:4f:19:f7:bf:e4:39:b6:b8:17:69:15:ea:14:
03:e3:e0:b5:4b:f1:46:ac:dc:e2:67:23:2e:4e:1f:97:a4:de:
3a:c1:ba:5b:1d:95:d3:95:41:1c:d6:13:fd:9b:86:10:aa:97:
3e:94:2d:25:3c:94:e1:63:c7:a2:92:20:b7:d5:be:fc:86:e7:
bc:f5:a3:17:71:d6:bf:02:e3:e3:83:ba:4d:e4:e6:e5:ed:cd:
10:7a:9f:ed:ae:7d:74:4f:b9:18:fc:1f:93:71:14:0f:85:d4:
9b:47:99:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:39:45 2025 by rpki-client