Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
File: mu2VdsknICkWjE0aQXXRp8ocUe4.mft (raw, json)
Hash identifier: FKEO06dcFBEqmkjzj7prSuHCztgf9CDd5KKulGj8NQw=
Subject key identifier: 8F:2B:59:E5:0D:DD:6D:0F:6F:21:B2:76:9A:0F:8F:5C:29:E6:F0:BB
Authority key identifier: 9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE
Certificate issuer: /CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee
Certificate serial: 019A2778A3243984DDDADD90736ECBC7071A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
Manifest number: 101A
Signing time: Mon 27 Oct 2025 21:00:08 +0000
Manifest this update: Mon 27 Oct 2025 21:00:08 +0000
Manifest next update: Tue 28 Oct 2025 21:00:08 +0000
Files and hashes: 1: MiKRdbGABW7H7vIb5R-saUTi7Ps.roa (hash: IcsqNxh/vQa5gPXIyGMaar+4UAAjRSfgokvENVkA4RM=)
2: mu2VdsknICkWjE0aQXXRp8ocUe4.crl (hash: tCCkn/cBj9ZfHSXyr/6TFYrEmZOHGtgUOa/vV6zoRwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:78:a3:24:39:84:dd:da:dd:90:73:6e:cb:c7:07:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee
Validity
Not Before: Oct 27 21:00:08 2025 GMT
Not After : Oct 28 21:00:08 2025 GMT
Subject: CN=8f2b59e50ddd6d0f6f21b2769a0f8f5c29e6f0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:06:93:6e:49:e2:99:98:9e:c4:67:e7:e1:32:
01:0a:ba:c9:5c:cb:1a:ce:4b:52:b9:cd:7c:ab:66:
76:50:c1:b0:af:34:40:7d:c4:fe:c5:aa:e9:ee:08:
98:c0:f4:ed:18:7c:35:a0:66:04:2a:42:2c:83:00:
a4:ee:de:97:5a:d6:c9:ec:9d:b4:ff:23:0d:2b:37:
cc:db:31:29:11:a2:ad:35:b6:15:9a:a4:a6:1b:6a:
3d:30:e8:5f:ce:18:c6:c3:a3:da:a0:f0:da:0b:c3:
1c:3d:eb:63:6e:f6:c9:c3:87:cc:74:d3:7e:34:60:
f1:67:3e:36:5a:b6:31:7c:56:43:a3:67:a6:81:09:
6f:b9:6c:08:a4:b4:54:a8:9f:40:c6:98:be:30:39:
9a:56:a0:1a:28:97:31:25:5f:8f:88:66:90:4a:9f:
20:55:77:9a:19:15:4a:14:08:8d:ff:8e:96:84:90:
b9:9e:6e:86:d2:95:92:a8:f9:54:95:7f:3a:0f:4d:
4f:57:5d:52:d5:98:54:2a:41:2a:36:53:6a:57:f0:
80:15:60:40:4c:73:4a:67:99:86:3e:17:ca:27:96:
b1:e6:39:2b:ec:10:62:25:3c:2f:97:01:1e:ff:97:
f8:25:47:2a:75:23:48:3a:70:37:50:62:c5:38:8a:
d9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2B:59:E5:0D:DD:6D:0F:6F:21:B2:76:9A:0F:8F:5C:29:E6:F0:BB
X509v3 Authority Key Identifier:
keyid:9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:2d:24:d8:c1:5d:dd:32:ce:4f:94:84:a0:83:69:b7:a0:1f:
88:2c:3a:0c:34:a8:a1:74:12:b3:80:4c:31:87:ec:0e:5c:4a:
75:a5:8e:c1:f1:90:38:93:6a:4b:c2:bc:be:56:34:20:ea:89:
31:b9:68:a6:f9:4e:10:e0:63:b7:ec:9e:55:0d:64:db:81:e7:
17:7a:32:d2:1a:96:1e:0c:9f:aa:68:40:d6:37:9d:35:7f:4e:
ea:3b:85:3a:46:69:1e:f8:e4:36:45:c2:82:77:ee:04:07:f6:
32:0b:88:4a:2f:7d:9f:d9:fd:63:d6:d7:68:ca:bc:bb:61:66:
40:42:b4:ac:6a:d8:a1:21:89:20:c5:c4:6a:64:68:33:83:65:
d5:35:8e:7f:f2:80:4d:04:a0:53:c2:55:3c:eb:08:d7:ba:8d:
50:89:3b:40:7c:c2:37:be:88:18:86:b2:71:5f:c2:a4:c5:51:
ac:3e:26:60:e0:28:9c:ef:a1:15:14:6b:e5:fd:cc:ad:e2:17:
b7:9a:0d:d8:e0:ce:30:db:b8:ff:d7:8d:22:36:db:fc:f5:b5:
df:ac:99:27:76:bf:00:ae:3d:18:33:23:5f:3d:9c:d8:ae:49:
e3:1a:ed:02:f1:e7:15:dd:43:86:6f:d4:86:de:06:dc:85:bf:
ad:93:7d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:45:21 2025 by rpki-client