Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
File: rMUN9rAd_29U64A5skl6p_TvEs0.mft (raw, json)
Hash identifier: VtandMPcLSBZp7LMgGWJNxJN81KxvB7D9GlAzkm/9gs=
Subject key identifier: DB:2A:25:76:D1:92:CA:DB:E6:1F:50:DE:DB:AD:E5:93:C2:BD:1A:9B
Authority key identifier: AC:C5:0D:F6:B0:1D:FF:6F:54:EB:80:39:B2:49:7A:A7:F4:EF:12:CD
Certificate issuer: /CN=acc50df6b01dff6f54eb8039b2497aa7f4ef12cd
Certificate serial: 019A367E1DF1D4032C2ED29F54B5AC403BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
Manifest number: 054B
Signing time: Thu 30 Oct 2025 19:00:25 +0000
Manifest this update: Thu 30 Oct 2025 19:00:25 +0000
Manifest next update: Fri 31 Oct 2025 19:00:25 +0000
Files and hashes: 1: VNZ2uED23ISvSNUvT20r4GsH7oo.roa (hash: rxCWfcG9ljPfy4GNB4ws8osuxRP7WV5ZXyCpBXvN7MU=)
2: rMUN9rAd_29U64A5skl6p_TvEs0.crl (hash: 8TPj6LR6qgNugRqOK1qLqH9JqjqBsJGrTDe58Bhx1/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 15:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:36:7e:1d:f1:d4:03:2c:2e:d2:9f:54:b5:ac:40:3b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc50df6b01dff6f54eb8039b2497aa7f4ef12cd
Validity
Not Before: Oct 30 19:00:25 2025 GMT
Not After : Oct 31 19:00:25 2025 GMT
Subject: CN=db2a2576d192cadbe61f50dedbade593c2bd1a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9e:8b:f4:68:c7:f8:4f:47:05:ff:ff:ce:fe:
bc:fb:90:22:bf:51:ac:63:58:db:65:6e:c2:22:f9:
79:b7:23:21:92:5d:f2:0f:be:c6:dd:ac:a5:e1:76:
77:1f:15:76:06:b6:08:db:6b:b9:79:a9:37:23:10:
8e:57:e7:cb:19:46:29:02:c5:af:70:b9:9d:b0:84:
01:59:45:35:97:be:87:70:c4:74:52:1a:08:24:10:
2a:46:86:c2:24:3e:70:8b:78:1f:d2:3d:97:2f:27:
97:5a:a0:7e:1a:7e:07:32:4f:95:91:09:ff:f8:c2:
74:22:01:70:3e:b8:d9:44:f8:18:59:22:6b:0f:49:
e8:6a:17:ef:c8:c8:36:e2:80:79:9e:02:9d:2f:99:
2b:8e:eb:04:04:77:e5:dc:17:a0:03:a3:e0:f7:4d:
70:cc:52:1b:e7:29:d8:77:ed:96:3b:63:64:f4:b0:
a9:19:89:17:49:f4:7d:3c:41:a5:28:b2:98:c0:3b:
a1:9f:89:ad:6b:e3:0c:aa:8a:cb:31:d6:36:15:e9:
5e:26:c9:02:62:fd:4c:52:1b:c1:79:8e:a7:ab:59:
ea:2a:52:47:bc:69:c6:7e:0f:c7:5e:38:be:c1:bf:
78:fc:7e:b7:73:e0:50:c2:23:8c:59:e5:5c:76:23:
14:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2A:25:76:D1:92:CA:DB:E6:1F:50:DE:DB:AD:E5:93:C2:BD:1A:9B
X509v3 Authority Key Identifier:
keyid:AC:C5:0D:F6:B0:1D:FF:6F:54:EB:80:39:B2:49:7A:A7:F4:EF:12:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c2:5b:57:38:fb:c0:f8:8f:e9:a1:57:98:50:01:60:3b:cc:
1c:58:6d:c5:cc:be:ba:b4:33:ee:bc:29:d3:53:20:9c:60:56:
cd:62:62:e5:1a:1a:ef:a9:71:dc:51:f3:7f:34:77:05:e7:de:
30:d6:6f:99:31:77:7c:01:eb:91:02:15:8a:38:2b:35:0e:82:
aa:0f:77:fc:e7:1c:63:f1:e9:42:32:ab:01:93:c7:98:45:7c:
91:60:b1:91:f8:5e:ad:0e:88:c7:c1:2f:b3:90:63:a0:e3:49:
74:64:13:f6:12:7e:27:96:95:ec:61:32:9f:f5:43:ea:d2:96:
bb:e0:78:5d:80:9f:86:ed:ed:59:d0:08:be:2d:e7:d0:ca:b6:
42:f0:de:e5:b2:75:91:00:d2:10:ce:9b:1c:4a:e9:46:db:8d:
c4:da:07:67:6e:28:90:1d:53:50:a8:dc:5b:29:e0:e6:84:f9:
c2:6d:0f:5a:5d:32:96:d5:8c:b2:21:6d:5b:49:27:f8:56:38:
ef:60:57:60:7d:f5:c4:56:81:35:c7:42:fd:0b:eb:b5:2c:65:
d8:1f:6d:85:31:2b:2d:1c:2f:2f:ed:eb:de:6c:f9:05:17:09:
e9:cd:8f:46:95:8c:3b:ad:fb:8f:53:50:12:16:97:b5:f7:6f:
7b:78:62:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 21:53:36 2025 by rpki-client