Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
File: Mu0BRXesc_-H7yDKb3V5XkyTf84.mft (raw, json)
Hash identifier: Zxuri/EjLDlzUQFA8aUOGv4FwGVLUoJszrdHIcKHZ8U=
Subject key identifier: CE:D1:8C:0A:83:A6:03:47:E7:48:92:0B:97:F0:B5:EF:EA:A0:F6:6D
Authority key identifier: 32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
Certificate issuer: /CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
Certificate serial: 019A7293D2676AA20088C8C7BC56CDAB54EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
Manifest number: 0910
Signing time: Tue 11 Nov 2025 11:01:21 +0000
Manifest this update: Tue 11 Nov 2025 11:01:21 +0000
Manifest next update: Wed 12 Nov 2025 11:01:21 +0000
Files and hashes: 1: Mu0BRXesc_-H7yDKb3V5XkyTf84.crl (hash: tmx+U/72ZCc4L4pAVNzFgz2V/8AA1Of7FPmLMb1rxe8=)
2: Szpv7SbbTq_ZPkpVt0ZS-yigLYQ.roa (hash: tot/yU4vNOc3RqisHsJwZZdti1Jdkg5nZCtY1DuBRp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:d2:67:6a:a2:00:88:c8:c7:bc:56:cd:ab:54:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
Validity
Not Before: Nov 11 11:01:21 2025 GMT
Not After : Nov 12 11:01:21 2025 GMT
Subject: CN=ced18c0a83a60347e748920b97f0b5efeaa0f66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:dd:a9:13:f1:2f:5e:ea:7f:8f:ce:bd:89:7a:
5f:94:fb:61:5c:1a:d2:90:3b:b3:06:80:8f:f9:b7:
93:75:b2:09:6d:5f:37:fd:67:ee:c0:80:6c:20:df:
18:ed:ed:a4:40:38:4d:7c:a9:5e:f2:5e:03:70:75:
73:43:73:67:55:eb:41:c1:89:7e:e5:a4:7e:c5:8d:
64:a9:fa:b3:1e:bd:de:d6:46:a3:ba:03:0e:ef:4f:
da:2e:65:fa:00:b9:97:fc:4c:45:86:97:f7:d0:20:
f5:ea:cb:7d:d1:15:5f:ab:e8:d2:35:66:96:a5:4c:
50:ba:95:66:3e:8d:72:d5:97:4f:ec:a8:76:ac:ae:
1b:61:b0:2c:7e:53:96:3f:49:95:e5:97:be:fe:d4:
d9:38:82:bf:72:50:90:35:c3:cb:7f:4a:b3:24:37:
7c:dd:4a:67:be:96:f6:f8:be:1b:a0:a9:04:f7:ba:
09:38:6b:06:74:78:f4:12:6f:7b:37:ac:4f:62:d6:
6d:fb:b7:90:88:ed:14:e1:0f:bf:1d:af:88:07:dd:
44:fc:0d:9a:b8:21:14:56:87:06:21:1b:b3:fb:06:
90:32:73:c0:9f:94:fd:f9:b4:4f:5a:0c:9d:26:88:
c5:12:ad:e9:38:84:b2:99:bd:bb:5c:7c:50:6c:42:
77:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D1:8C:0A:83:A6:03:47:E7:48:92:0B:97:F0:B5:EF:EA:A0:F6:6D
X509v3 Authority Key Identifier:
keyid:32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c6:86:3a:48:c6:6d:e0:c9:78:c5:43:a1:d3:1a:30:c1:f5:
b3:e8:76:9b:a4:12:73:ce:31:c8:6d:c5:43:d6:16:05:11:27:
58:ed:e7:5c:15:d5:97:c2:86:da:87:29:e1:f4:53:70:5f:74:
fa:7e:ea:c9:ab:97:f3:e1:72:b6:32:30:4a:f9:d5:a5:f8:1f:
25:db:5e:42:e3:1b:b5:b5:c3:86:c6:42:65:e2:a3:49:09:03:
55:1f:22:25:15:e7:14:65:d7:2a:43:34:a8:5c:14:b0:b6:87:
a1:63:fc:8b:b0:84:91:7e:a4:95:e6:f4:2e:1c:b7:5e:7b:c1:
fc:6d:99:e6:1b:6b:89:58:c4:4e:40:19:be:b5:c1:d9:58:f8:
cc:fa:8c:97:c1:3f:d3:de:2f:30:96:c4:ee:b9:9d:7d:c0:a4:
09:fc:e0:67:64:1d:5a:3a:cc:1a:fc:57:18:79:5b:42:99:44:
4d:88:1d:ba:31:a7:a5:46:01:b6:dd:97:5b:f2:fc:ce:5d:35:
b7:c9:19:d1:cf:2e:72:b8:6d:d2:85:c4:2d:66:97:3e:15:8a:
69:d1:39:fd:6b:df:00:5d:83:85:d6:c5:f0:96:93:5b:9a:f8:
05:62:93:3c:f8:8b:cf:e8:4d:e6:13:4f:e8:c4:13:21:9a:de:
3e:b1:f5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:14 2025 by rpki-client