Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
File: 1-MUB87-tSa1OVubkwY90Dt6gXSE.mft (raw, json)
Hash identifier: QEZFOL0U/IfZgooU/5iB9DzrHQBzZ8Pu0SNRqug64aI=
Subject key identifier: 0A:61:91:22:03:B9:FA:C9:73:6E:BD:FD:C3:EA:08:6C:3B:15:45:85
Authority key identifier: F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
Certificate issuer: /CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Certificate serial: 019A7112D588EABBAD44C0C3A15511A2F127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
Manifest number: 1303
Signing time: Tue 11 Nov 2025 04:00:50 +0000
Manifest this update: Tue 11 Nov 2025 04:00:50 +0000
Manifest next update: Wed 12 Nov 2025 04:00:50 +0000
Files and hashes: 1: 1-MUB87-tSa1OVubkwY90Dt6gXSE.crl (hash: fHHOeP42ASmUh5KGydbyd8mNmeEN2b7Wi1+Ks3vdzq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:d5:88:ea:bb:ad:44:c0:c3:a1:55:11:a2:f1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Validity
Not Before: Nov 11 04:00:50 2025 GMT
Not After : Nov 12 04:00:50 2025 GMT
Subject: CN=0a61912203b9fac9736ebdfdc3ea086c3b154585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:c9:d9:12:b9:80:d9:90:88:d6:d0:fe:09:
38:fa:f0:39:5f:a5:5b:a9:3a:d1:af:5c:d5:a9:d8:
e6:16:26:fb:f1:6a:9b:da:0b:52:55:11:0e:ad:b1:
0f:e1:51:09:28:3f:59:0c:98:28:1f:92:1d:96:ae:
83:c4:2c:c2:5a:00:47:3a:4e:fc:97:35:4d:b6:c5:
87:8a:9c:8f:ad:61:ba:82:a8:9f:a8:55:58:7b:56:
34:05:47:6f:88:55:b5:b7:b2:19:de:db:f6:c8:9a:
48:84:5a:48:f7:a0:2b:ff:49:d7:44:7a:78:1c:57:
78:16:e2:80:85:72:38:29:4a:ac:a4:47:ec:84:46:
f6:54:0b:b8:da:1b:99:3c:26:fc:97:0a:70:d5:15:
6f:38:14:62:9c:e9:b7:0b:66:83:6e:5b:e0:46:6c:
73:35:2f:fc:19:0b:28:32:d2:57:67:da:ad:b7:65:
59:36:f4:6a:3e:94:e5:e8:e7:f8:c1:cd:0d:6b:7f:
dc:cd:8f:fb:96:d3:e4:2f:15:ff:97:12:9f:3f:cb:
5d:ac:d4:fa:f0:1a:a5:99:c3:ad:f3:b8:13:82:d7:
06:b8:52:21:fd:c7:d6:71:38:94:9e:a1:07:81:96:
1f:0e:ef:c2:b5:84:db:af:ed:32:25:50:17:f1:1a:
a4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:61:91:22:03:B9:FA:C9:73:6E:BD:FD:C3:EA:08:6C:3B:15:45:85
X509v3 Authority Key Identifier:
keyid:F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:05:0a:7d:2c:86:f6:6b:bc:38:04:8a:39:8d:a3:3e:54:33:
b1:33:69:de:b3:ad:08:7f:a1:e6:59:99:50:47:8a:33:b0:e3:
c9:d7:98:39:fb:1a:06:08:5e:d7:76:58:da:39:ef:86:5f:b3:
8d:06:0d:db:ff:76:5b:cd:c6:fa:69:1a:fe:40:e3:b2:23:2c:
ad:38:d7:26:56:73:4b:e0:1a:19:f0:e0:b2:39:ef:6a:1c:2f:
be:4d:15:3e:76:ca:1c:90:ce:74:86:14:b1:83:e2:95:03:4b:
f4:86:cc:83:bc:db:be:86:77:c9:81:35:5a:38:90:8e:86:cf:
a4:36:20:38:5d:71:0a:29:61:65:37:d3:e3:b5:a8:13:21:4f:
bf:d5:4e:54:07:1b:bf:fc:a3:bf:a1:e9:cd:05:9e:29:be:04:
40:1c:d8:8f:95:d7:9f:6b:4c:f0:6c:33:48:ec:3d:74:81:a5:
cd:ab:39:9f:db:51:9f:47:56:71:77:97:bc:37:e4:a5:f9:0d:
4b:55:5b:29:43:ff:2d:df:c7:13:89:ea:3a:24:31:06:9d:9c:
b0:e6:01:ac:f5:c6:35:9a:ce:3f:8b:a5:95:3c:42:ce:42:09:
49:5d:93:df:6b:4b:b1:3a:1a:82:21:51:f6:6d:99:f8:3d:3b:
83:1f:e2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:14 2025 by rpki-client