Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
File: FMuhsMMFzGL5KXwtmRiZRbl3leE.mft (raw, json)
Hash identifier: sNTPfoQrKcZcg2JZTR4lSsxTQdtiubdg+0ANQmP3PVQ=
Subject key identifier: 09:F7:E6:43:2C:5E:8C:07:AD:1F:18:AA:67:0F:74:E8:1E:CA:00:6D
Authority key identifier: 14:CB:A1:B0:C3:05:CC:62:F9:29:7C:2D:99:18:99:45:B9:77:95:E1
Certificate issuer: /CN=14cba1b0c305cc62f9297c2d99189945b97795e1
Certificate serial: 019A71135C404967F763322BD288FA20402E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 04:01:25 +0000
Manifest this update: Tue 11 Nov 2025 04:01:25 +0000
Manifest next update: Wed 12 Nov 2025 04:01:25 +0000
Files and hashes: 1: FMuhsMMFzGL5KXwtmRiZRbl3leE.crl (hash: wpVikxlKVKAmk6i6g5RzKgdl0bpnUWDmWLeEmZwJ88I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:5c:40:49:67:f7:63:32:2b:d2:88:fa:20:40:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14cba1b0c305cc62f9297c2d99189945b97795e1
Validity
Not Before: Nov 11 04:01:25 2025 GMT
Not After : Nov 12 04:01:25 2025 GMT
Subject: CN=09f7e6432c5e8c07ad1f18aa670f74e81eca006d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:28:6b:ad:23:d5:5e:6d:bc:64:36:97:ef:32:
3f:79:45:c3:8d:48:b2:c3:24:72:16:6c:6f:73:78:
fd:10:8c:db:77:87:b1:0e:7f:98:65:df:de:9d:cc:
3b:af:43:fc:a4:a8:f1:b4:09:61:29:01:89:c2:ce:
61:ba:f8:16:35:7d:f0:a2:f3:a9:ba:26:b8:1e:c0:
b1:c4:69:ee:6e:67:15:3f:dd:7d:96:85:83:21:e4:
3e:1b:88:40:d6:17:e8:1c:05:6c:11:8b:d1:ce:70:
33:58:2c:8b:c5:95:c8:60:a6:5d:00:6c:ee:06:0e:
f3:8f:4e:cc:3e:99:aa:67:65:bc:b6:cb:bd:ae:79:
29:ef:86:13:18:f8:bd:25:55:4c:02:94:fe:9d:38:
9b:8a:f7:87:6a:96:3c:ee:67:64:d7:0f:8b:53:86:
ff:e1:98:47:ec:72:5a:b5:71:ec:8c:26:52:1d:00:
9a:58:3e:3f:c1:c9:df:5d:f7:34:18:6e:5a:3d:ec:
a0:1d:da:ee:47:9f:5c:74:c1:59:5d:87:f9:f2:e4:
56:70:07:6c:f6:9c:3a:42:7b:68:aa:a1:d3:d6:2f:
5c:97:d5:f5:da:ce:78:55:5b:7a:e9:8e:2d:3e:6e:
54:a0:ce:92:cf:91:b0:cd:51:c3:3d:72:9e:92:ce:
df:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F7:E6:43:2C:5E:8C:07:AD:1F:18:AA:67:0F:74:E8:1E:CA:00:6D
X509v3 Authority Key Identifier:
keyid:14:CB:A1:B0:C3:05:CC:62:F9:29:7C:2D:99:18:99:45:B9:77:95:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:af:75:07:cf:5e:f7:2c:b5:2b:f1:a0:00:34:e9:f8:88:46:
58:21:12:6e:62:1b:ce:05:7f:96:3d:66:6b:f7:18:c9:d0:23:
0d:1a:5c:a0:0f:80:70:b7:9c:55:be:98:c9:31:aa:62:3c:e7:
35:e1:35:f4:f9:25:ac:cf:c9:a1:31:aa:99:c6:d4:26:53:22:
b9:90:02:51:f6:68:aa:a9:cd:9f:a5:bf:52:f2:90:c3:a2:13:
e5:47:ac:e6:b0:1f:a5:1b:43:54:e0:24:df:8d:a4:a6:97:ba:
30:94:34:63:1e:7b:10:04:4e:16:59:33:3c:81:7e:37:ee:23:
d5:7d:96:44:04:8a:0d:8e:63:1c:cb:67:57:72:ab:5a:73:28:
02:94:15:f3:f4:73:d8:0f:5b:f5:60:38:4a:57:cc:85:23:c6:
71:91:ef:93:b6:e2:1f:04:d7:8f:23:8a:8f:dc:77:c1:54:73:
6f:21:e5:46:75:bb:55:9a:90:00:2e:65:20:46:a6:44:ee:98:
86:11:d0:13:15:a6:ae:91:0c:7c:be:2d:fb:c2:e6:9c:dd:6e:
cc:aa:86:5c:40:27:5e:2b:65:cf:a2:e4:e6:ce:62:ad:0e:3d:
a7:30:af:97:70:58:d7:77:6b:a3:9e:a3:5c:63:16:f6:5b:67:
a7:1e:3b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:21 2025 by rpki-client