Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
File: MU0IhXjsDimwS0PpAUk1hnJjZP0.mft (raw, json)
Hash identifier: m1SaK6Zd8ZR6EWUPbDNt/GWks5fnm+zVVqHvGT7OQZM=
Subject key identifier: CE:1F:83:74:1F:03:86:DE:BB:1C:03:BA:3A:52:DE:A8:1D:54:0D:C9
Authority key identifier: 31:4D:08:85:78:EC:0E:29:B0:4B:43:E9:01:49:35:86:72:63:64:FD
Certificate issuer: /CN=314d088578ec0e29b04b43e901493586726364fd
Certificate serial: 0199FBEA82CAF8EFB993DDB0F08859C55459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
Manifest number: 141A
Signing time: Sun 19 Oct 2025 10:01:13 +0000
Manifest this update: Sun 19 Oct 2025 10:01:13 +0000
Manifest next update: Mon 20 Oct 2025 10:01:13 +0000
Files and hashes: 1: MU0IhXjsDimwS0PpAUk1hnJjZP0.crl (hash: E5MBCPBmrs/jkWhcMKWiAgi59qNNALkfkbL2ZMywOKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:82:ca:f8:ef:b9:93:dd:b0:f0:88:59:c5:54:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=314d088578ec0e29b04b43e901493586726364fd
Validity
Not Before: Oct 19 10:01:13 2025 GMT
Not After : Oct 20 10:01:13 2025 GMT
Subject: CN=ce1f83741f0386debb1c03ba3a52dea81d540dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:dc:7b:b2:93:30:b5:65:44:7e:05:8a:34:a5:
03:15:11:fd:e0:bf:07:4c:02:d2:77:7d:db:03:01:
4c:ca:e5:07:6a:e3:47:4d:0c:43:fe:6c:f4:d4:27:
2e:a4:3b:32:7e:ff:46:3c:fe:d7:ed:93:fc:8d:e9:
e3:9d:f6:3d:e8:43:88:58:7a:1d:48:8b:4e:a8:7b:
9d:9a:5a:2e:21:ee:5a:b4:07:c6:01:4b:f3:fa:85:
52:56:93:a4:38:d6:1b:60:7d:9e:91:20:75:5c:dd:
eb:f0:78:79:3f:c9:ae:16:4b:96:d8:1f:4b:74:c1:
4a:1d:56:3c:39:a2:f9:02:5e:a7:3a:72:4a:60:a0:
2a:de:f2:2f:41:23:d8:bb:86:72:0c:09:88:f2:38:
17:1d:38:b2:a1:28:ee:09:bb:2a:dc:9c:a7:05:1f:
53:72:22:64:b3:c5:e2:a6:ca:25:ed:01:07:38:01:
c6:18:95:d2:23:79:63:86:a4:b9:05:9a:bd:d9:42:
e7:43:7d:c5:50:1c:89:48:6c:a8:3c:a7:10:b9:3c:
17:f2:17:cd:36:1b:ed:fc:6c:b2:2b:4f:0f:ea:fe:
d0:a1:3d:d4:6a:88:b7:9b:db:5d:30:88:5f:38:77:
6a:14:f5:99:87:5d:8d:8f:21:17:48:50:a7:52:a7:
bd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1F:83:74:1F:03:86:DE:BB:1C:03:BA:3A:52:DE:A8:1D:54:0D:C9
X509v3 Authority Key Identifier:
keyid:31:4D:08:85:78:EC:0E:29:B0:4B:43:E9:01:49:35:86:72:63:64:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ae:bc:23:ce:1d:d4:50:73:92:02:f4:22:96:bb:98:52:11:
65:03:46:a1:65:ac:1a:a2:eb:0d:9f:85:7b:48:b0:57:cd:93:
42:a7:70:88:57:a4:16:1a:7d:dc:41:bc:fe:86:e5:6e:06:16:
0d:84:94:1d:80:84:2f:e8:b2:fa:ac:01:cb:8c:d6:46:00:68:
ac:05:3e:94:93:88:3d:4b:55:4f:26:aa:a5:43:fe:d9:5e:df:
2a:6f:ea:1a:72:43:cc:de:b5:50:d5:64:10:65:51:56:96:e7:
f8:4c:01:40:65:4e:36:3e:84:25:ce:a6:2d:14:64:92:fd:5d:
b8:26:15:b0:10:cd:9d:f7:b5:17:3b:56:20:c2:e0:62:9c:7f:
12:72:50:77:08:89:9b:1f:23:72:29:d3:17:50:91:d1:88:1b:
89:e8:fc:7f:51:89:ea:d7:32:17:e6:3d:1d:81:c0:3d:3f:39:
f8:4c:1d:16:dc:f6:b4:da:aa:c6:bd:c1:f5:e8:37:f4:45:fc:
95:62:6b:e8:e4:87:fc:77:25:c0:73:a0:f3:df:03:15:73:b6:
7c:18:e2:c0:bc:6f:3b:1a:f0:65:eb:73:f1:cf:73:fa:7d:3c:
99:63:bf:89:07:6a:90:29:ef:3f:40:a3:87:df:c1:95:2d:3e:
96:57:f8:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76oLK+O+5k92w8IhZxVRZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxNGQwODg1NzhlYzBlMjliMDRiNDNlOTAxNDkzNTg2NzI2
MzY0ZmQwHhcNMjUxMDE5MTAwMTEzWhcNMjUxMDIwMTAwMTEzWjAzMTEwLwYDVQQD
EyhjZTFmODM3NDFmMDM4NmRlYmIxYzAzYmEzYTUyZGVhODFkNTQwZGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNx7spMwtWVEfgWKNKUDFRH94L8H
TALSd33bAwFMyuUHauNHTQxD/mz01CcupDsyfv9GPP7X7ZP8jenjnfY96EOIWHod
SItOqHudmlouIe5atAfGAUvz+oVSVpOkONYbYH2ekSB1XN3r8Hh5P8muFkuW2B9L
dMFKHVY8OaL5Al6nOnJKYKAq3vIvQSPYu4ZyDAmI8jgXHTiyoSjuCbsq3JynBR9T
ciJks8Xipsol7QEHOAHGGJXSI3ljhqS5BZq92ULnQ33FUByJSGyoPKcQuTwX8hfN
Nhvt/GyyK08P6v7QoT3Uaoi3m9tdMIhfOHdqFPWZh12NjyEXSFCnUqe9TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4fg3QfA4beuxwDujpS3qgdVA3JMB8GA1UdIwQY
MBaAFDFNCIV47A4psEtD6QFJNYZyY2T9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVUwSWhYanNEaW13UzBQcEFVazFobkpqWlAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zNzM4NzQtMzRmZC00ZTY0LWI2YTkt
MTgwMDZiNjY0M2FmLzEvTVUwSWhYanNEaW13UzBQcEFVazFobkpqWlAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8zNzM4NzQtMzRmZC00ZTY0LWI2YTktMTgwMDZiNjY0M2Fm
LzEvTVUwSWhYanNEaW13UzBQcEFVazFobkpqWlAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG668I84d
1FBzkgL0Ipa7mFIRZQNGoWWsGqLrDZ+Fe0iwV82TQqdwiFekFhp93EG8/oblbgYW
DYSUHYCEL+iy+qwBy4zWRgBorAU+lJOIPUtVTyaqpUP+2V7fKm/qGnJDzN61UNVk
EGVRVpbn+EwBQGVONj6EJc6mLRRkkv1duCYVsBDNnfe1FztWIMLgYpx/EnJQdwiJ
mx8jcinTF1CR0Ygbiej8f1GJ6tcyF+Y9HYHAPT85+EwdFtz2tNqqxr3B9eg39EX8
lWJr6OSH/HclwHOg898DFXO2fBjiwLxvOxrwZetz8c9z+n08mWO/iQdqkCnvP0Cj
h9/BlS0+llf4cA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:30 2025 by rpki-client