Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
File: rMUN9rAd_29U64A5skl6p_TvEs0.mft (raw, json)
Hash identifier: Y2Xj+oEVLWI16noayl/qbaqrOczjUQB7kcrxd6aeONQ=
Subject key identifier: D2:86:FE:1C:A8:C9:05:80:B9:75:B2:B8:39:BD:03:A7:F9:EE:AA:42
Authority key identifier: AC:C5:0D:F6:B0:1D:FF:6F:54:EB:80:39:B2:49:7A:A7:F4:EF:12:CD
Certificate issuer: /CN=acc50df6b01dff6f54eb8039b2497aa7f4ef12cd
Certificate serial: 0199413BEDC54444BEF32BA949FD77A47256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
Manifest number: 04CC
Signing time: Sat 13 Sep 2025 04:01:10 +0000
Manifest this update: Sat 13 Sep 2025 04:01:10 +0000
Manifest next update: Sun 14 Sep 2025 04:01:10 +0000
Files and hashes: 1: VNZ2uED23ISvSNUvT20r4GsH7oo.roa (hash: rxCWfcG9ljPfy4GNB4ws8osuxRP7WV5ZXyCpBXvN7MU=)
2: rMUN9rAd_29U64A5skl6p_TvEs0.crl (hash: hlEJMkUTh2xJNl4lFm5zPwJisRAr3P7q8O26jQsNCn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Sep 2025 02:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:41:3b:ed:c5:44:44:be:f3:2b:a9:49:fd:77:a4:72:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc50df6b01dff6f54eb8039b2497aa7f4ef12cd
Validity
Not Before: Sep 13 04:01:10 2025 GMT
Not After : Sep 14 04:01:10 2025 GMT
Subject: CN=d286fe1ca8c90580b975b2b839bd03a7f9eeaa42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:70:25:58:e9:74:1a:c2:29:af:c3:24:d8:af:
ff:b8:54:46:d2:01:db:42:5e:dc:6e:c9:7e:9f:8e:
17:40:e8:ce:c5:53:3f:13:3f:5a:21:87:92:d7:34:
98:f3:05:69:b0:29:cf:be:77:b7:29:ba:72:72:0c:
92:d7:3d:c2:14:15:0a:c4:27:1f:6d:43:5f:20:e0:
9f:17:01:63:aa:0d:e1:2c:b4:c3:67:4e:1c:c0:88:
71:54:c3:3a:d0:d1:46:9b:08:b0:4d:33:95:29:41:
23:b5:9e:34:b0:f0:bd:22:e8:cd:26:ec:66:74:73:
db:b0:96:4e:f3:c1:b8:f0:ba:7a:ea:34:d3:68:d2:
0d:38:b9:c4:e1:76:7d:77:e2:45:e3:64:80:e8:f9:
2c:44:74:d5:1e:e6:d8:fe:43:b1:87:cd:d7:54:42:
c9:86:a0:a6:4f:51:9a:3a:2b:3f:77:3c:15:db:78:
22:b8:28:3f:b9:17:a5:c4:bd:a4:11:f9:55:01:95:
03:48:1c:e6:a5:6e:6a:29:01:1c:de:5b:ab:c5:74:
f3:48:2e:eb:b5:06:ba:45:c9:ce:25:8b:27:57:cb:
21:39:84:17:5c:0e:95:bd:58:32:4d:1a:27:a3:f7:
31:c1:5c:c8:01:0e:80:16:7c:11:41:7f:7b:84:b8:
cf:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:86:FE:1C:A8:C9:05:80:B9:75:B2:B8:39:BD:03:A7:F9:EE:AA:42
X509v3 Authority Key Identifier:
keyid:AC:C5:0D:F6:B0:1D:FF:6F:54:EB:80:39:B2:49:7A:A7:F4:EF:12:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ae:54:20:92:c3:15:fb:d1:3d:7a:bf:1b:45:54:41:61:29:
ab:9a:8d:a9:15:2e:65:a6:4a:55:8a:1f:19:8d:68:21:d5:fd:
bd:80:1f:e2:86:7c:d0:4f:0a:56:78:ab:06:28:ed:e1:cd:43:
95:b3:8e:2f:b8:ca:09:14:a9:6c:db:12:65:a4:f9:7e:fd:76:
53:1a:71:8e:6e:b5:d0:29:fa:b0:5c:58:c7:40:e8:14:13:d8:
81:34:dc:1d:4f:d8:91:ec:3b:07:66:04:6d:f3:07:d2:30:96:
00:8e:01:6f:9a:3f:f5:b5:6a:99:4a:74:35:15:12:8a:a4:10:
bd:03:8c:6a:19:3e:83:21:bc:f7:46:5c:d0:6a:2d:e1:e6:89:
ef:c5:b3:bf:9c:07:24:94:8d:4c:53:27:6e:dd:0f:d8:d6:1d:
d8:fe:68:ab:c2:43:06:9b:e5:36:cb:3a:3e:38:32:82:43:f0:
d7:c5:b8:96:e6:64:23:60:ac:6c:65:e0:74:e4:a4:dc:f0:dd:
da:e9:d7:c7:f5:1f:f1:b0:0b:34:e0:75:3c:10:0d:f9:47:cf:
1c:48:ab:87:c0:b5:8a:d8:ce:7c:49:63:5b:79:23:1e:12:ed:
29:22:25:5b:1b:de:59:90:cf:97:0a:7f:43:96:54:af:a8:54:
4c:99:10:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlBO+3FRES+8yupSf13pHJWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYzUwZGY2YjAxZGZmNmY1NGViODAzOWIyNDk3YWE3ZjRl
ZjEyY2QwHhcNMjUwOTEzMDQwMTEwWhcNMjUwOTE0MDQwMTEwWjAzMTEwLwYDVQQD
EyhkMjg2ZmUxY2E4YzkwNTgwYjk3NWIyYjgzOWJkMDNhN2Y5ZWVhYTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnAlWOl0GsIpr8Mk2K//uFRG0gHb
Ql7cbsl+n44XQOjOxVM/Ez9aIYeS1zSY8wVpsCnPvne3KbpycgyS1z3CFBUKxCcf
bUNfIOCfFwFjqg3hLLTDZ04cwIhxVMM60NFGmwiwTTOVKUEjtZ40sPC9IujNJuxm
dHPbsJZO88G48Lp66jTTaNINOLnE4XZ9d+JF42SA6PksRHTVHubY/kOxh83XVELJ
hqCmT1GaOis/dzwV23giuCg/uRelxL2kEflVAZUDSBzmpW5qKQEc3lurxXTzSC7r
tQa6RcnOJYsnV8shOYQXXA6VvVgyTRono/cxwVzIAQ6AFnwRQX97hLjPbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKG/hyoyQWAuXWyuDm9A6f57qpCMB8GA1UdIwQY
MBaAFKzFDfawHf9vVOuAObJJeqf07xLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck1VTjlyQWRfMjlVNjRBNXNrbDZwX1R2RXMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iZjM1MjgtYTEzMS00ZjUxLWE1OWQt
MzFjOTMxM2Y5ZjY2LzEvck1VTjlyQWRfMjlVNjRBNXNrbDZwX1R2RXMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9iZjM1MjgtYTEzMS00ZjUxLWE1OWQtMzFjOTMxM2Y5ZjY2
LzEvck1VTjlyQWRfMjlVNjRBNXNrbDZwX1R2RXMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN65UIJLD
FfvRPXq/G0VUQWEpq5qNqRUuZaZKVYofGY1oIdX9vYAf4oZ80E8KVnirBijt4c1D
lbOOL7jKCRSpbNsSZaT5fv12Uxpxjm610Cn6sFxYx0DoFBPYgTTcHU/Ykew7B2YE
bfMH0jCWAI4Bb5o/9bVqmUp0NRUSiqQQvQOMahk+gyG890Zc0Got4eaJ78Wzv5wH
JJSNTFMnbt0P2NYd2P5oq8JDBpvlNss6PjgygkPw18W4luZkI2CsbGXgdOSk3PDd
2unXx/Uf8bALNOB1PBAN+UfPHEirh8C1itjOfEljW3kjHhLtKSIlWxveWZDPlwp/
Q5ZUr6hUTJkQiw==
-----END CERTIFICATE-----
Generated at Sat Sep 13 06:42:27 2025 by rpki-client