Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
File: mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft (raw, json)
Hash identifier: pKDDXB5VLdDR4HL4fi8wSlPskgBaIX+YHFHVeaRFeKc=
Subject key identifier: F7:DE:4E:8D:33:C0:B6:B1:75:B3:82:7B:2F:1D:88:32:C4:1E:7F:71
Authority key identifier: 9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
Certificate issuer: /CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Certificate serial: 019923D651F78F8FEFEEF5AD09A88B2A718A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
Manifest number: 0F60
Signing time: Sun 07 Sep 2025 11:01:12 +0000
Manifest this update: Sun 07 Sep 2025 11:01:12 +0000
Manifest next update: Mon 08 Sep 2025 11:01:12 +0000
Files and hashes: 1: mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl (hash: 7dhqlUlt0lBEvsZRjLdPHPNMwfls52lLjx+n0OI/cg4=)
2: zAfXaaTLSsRoB5kUrFVM41jmKKM.roa (hash: Qyk65ct/H4EE3CmFVP3i+QvaSpxHvWaeOqI7968YDoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:51:f7:8f:8f:ef:ee:f5:ad:09:a8:8b:2a:71:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Validity
Not Before: Sep 7 11:01:12 2025 GMT
Not After : Sep 8 11:01:12 2025 GMT
Subject: CN=f7de4e8d33c0b6b175b3827b2f1d8832c41e7f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1d:6e:31:14:c9:ae:d3:1e:40:d8:6f:7d:c3:
9e:9e:3f:cb:66:7d:8e:51:20:8a:c9:74:18:ef:fb:
c5:11:83:3f:41:a3:97:2e:d5:89:12:8d:ae:f0:8d:
f0:40:3c:a3:e2:c8:2a:1b:b7:d0:60:ce:5b:1b:be:
b5:87:cb:d0:7f:1b:c1:2f:67:89:3a:c8:67:28:f7:
07:fd:0a:a9:b3:f0:4b:ab:c7:da:88:b2:f1:c2:d5:
c8:00:6a:b8:49:ae:08:e0:a4:fd:1a:df:c9:a9:2a:
49:53:da:7e:46:d4:09:e1:95:24:1b:47:61:b0:e6:
4a:7c:4e:b3:d2:7c:ab:4a:bd:9c:97:95:88:46:5f:
44:56:da:d5:12:3c:d7:7b:e0:0d:25:f1:27:02:ca:
f7:51:6a:c0:d6:a7:8b:fb:54:2b:9b:33:be:60:d9:
d2:2d:a6:00:30:7b:49:ad:74:aa:38:f8:2f:e6:d6:
78:e0:b4:37:e5:96:7a:5b:2e:fa:22:8a:51:04:1c:
39:af:94:4e:65:79:2a:76:e1:d0:45:50:66:c3:cc:
d3:b8:b9:eb:9e:57:a3:80:2c:72:03:aa:06:b1:14:
37:59:f2:65:2f:4d:2d:58:99:d7:3b:2c:46:28:39:
45:2b:4e:1f:d7:fa:60:0b:c9:30:a2:b2:9c:1f:03:
02:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DE:4E:8D:33:C0:B6:B1:75:B3:82:7B:2F:1D:88:32:C4:1E:7F:71
X509v3 Authority Key Identifier:
keyid:9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:8e:98:cc:2c:5a:6f:70:e9:bf:a3:56:2d:cb:2b:6c:83:d9:
0b:4a:e4:72:2a:70:68:a3:b0:4c:0c:5e:d4:b5:01:21:7b:20:
64:58:a5:37:88:cd:06:20:f6:61:ca:38:4a:68:76:e3:88:48:
09:14:24:2f:4b:1f:9d:77:fa:ec:e7:d5:fd:bd:dc:62:58:c6:
8d:3a:20:8d:c8:03:58:3e:a5:0a:f3:22:99:8d:24:c5:f3:c7:
bc:df:c6:5f:49:ce:42:64:71:a1:58:72:6c:0f:72:03:4c:df:
14:d2:fc:98:4a:d8:63:c9:a4:1a:a5:71:33:b6:cd:34:7f:f4:
8f:a5:2a:fa:58:be:36:1c:46:ac:a3:79:00:80:4a:f2:25:d5:
86:12:4d:8d:a5:bb:91:e4:62:fb:3d:e5:e9:a7:1a:9f:85:a8:
02:ff:30:2c:89:e2:0d:dc:5b:cb:bd:8b:e7:f4:75:65:32:9a:
ee:64:cb:b0:d9:2f:11:d6:18:4d:27:38:93:dd:e8:80:5b:aa:
fe:9e:ca:34:a2:38:60:39:fd:75:1c:06:1c:03:29:f5:e2:03:
c1:a4:a8:c6:f3:53:df:c1:0c:41:85:ea:82:0a:8b:fd:5c:0e:
df:7d:08:b1:d4:59:89:12:75:bd:33:ef:dd:5f:7a:a0:f8:fb:
99:67:7f:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkj1lH3j4/v7vWtCaiLKnGKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZWVjYjM1M2YxY2RjNWZkM2E5ZDU0YTg4NzM1MzFlZmQy
ODVjNDYwHhcNMjUwOTA3MTEwMTEyWhcNMjUwOTA4MTEwMTEyWjAzMTEwLwYDVQQD
EyhmN2RlNGU4ZDMzYzBiNmIxNzViMzgyN2IyZjFkODgzMmM0MWU3ZjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzR1uMRTJrtMeQNhvfcOenj/LZn2O
USCKyXQY7/vFEYM/QaOXLtWJEo2u8I3wQDyj4sgqG7fQYM5bG761h8vQfxvBL2eJ
OshnKPcH/Qqps/BLq8faiLLxwtXIAGq4Sa4I4KT9Gt/JqSpJU9p+RtQJ4ZUkG0dh
sOZKfE6z0nyrSr2cl5WIRl9EVtrVEjzXe+ANJfEnAsr3UWrA1qeL+1QrmzO+YNnS
LaYAMHtJrXSqOPgv5tZ44LQ35ZZ6Wy76IopRBBw5r5ROZXkqduHQRVBmw8zTuLnr
nlejgCxyA6oGsRQ3WfJlL00tWJnXOyxGKDlFK04f1/pgC8kworKcHwMCIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfeTo0zwLaxdbOCey8diDLEHn9xMB8GA1UdIwQY
MBaAFJruyzU/HNxf06nVSohzUx79KFxGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXU3TE5UOGMzRl9UcWRWS2lITlRIdjBvWEVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8xNTg2M2ItNzg3Zi00MDg0LWI3ZjYt
NTk0NDk2MGUzMWNmLzEvbXU3TE5UOGMzRl9UcWRWS2lITlRIdjBvWEVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8xNTg2M2ItNzg3Zi00MDg0LWI3ZjYtNTk0NDk2MGUzMWNm
LzEvbXU3TE5UOGMzRl9UcWRWS2lITlRIdjBvWEVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU46YzCxa
b3Dpv6NWLcsrbIPZC0rkcipwaKOwTAxe1LUBIXsgZFilN4jNBiD2Yco4Smh244hI
CRQkL0sfnXf67OfV/b3cYljGjTogjcgDWD6lCvMimY0kxfPHvN/GX0nOQmRxoVhy
bA9yA0zfFNL8mErYY8mkGqVxM7bNNH/0j6Uq+li+NhxGrKN5AIBK8iXVhhJNjaW7
keRi+z3l6acan4WoAv8wLIniDdxby72L5/R1ZTKa7mTLsNkvEdYYTSc4k93ogFuq
/p7KNKI4YDn9dRwGHAMp9eIDwaSoxvNT38EMQYXqggqL/VwO330IsdRZiRJ1vTPv
3V96oPj7mWd/LQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:08:23 2025 by rpki-client