Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
File: kMuqazbmzWh0x47UWk-N1xcwMdk.mft (raw, json)
Hash identifier: jRhrhtzz/n6BZOtlUBHKrzzK5Rw7TiI1jwbvG7g5/9w=
Subject key identifier: 0B:D8:47:EE:11:37:3A:51:0C:50:D0:D0:E9:4D:1B:63:91:99:17:E8
Authority key identifier: 90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9
Certificate issuer: /CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
Certificate serial: 0199FE47472AEB536EB4F2A76EDFC2E177E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
Manifest number: 0C54
Signing time: Sun 19 Oct 2025 21:01:47 +0000
Manifest this update: Sun 19 Oct 2025 21:01:47 +0000
Manifest next update: Mon 20 Oct 2025 21:01:47 +0000
Files and hashes: 1: c4U2evb93678CsrZ2ZQQemAPoFw.roa (hash: 5ZLOIZ+BzX8i3ipSMR9csvqZ6+nojKYy3y5RkNukgEE=)
2: kMuqazbmzWh0x47UWk-N1xcwMdk.crl (hash: w+bjGBPcFoA5JCG07fIKECa1vGrgbI+cVRNad3FgA08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:47:2a:eb:53:6e:b4:f2:a7:6e:df:c2:e1:77:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
Validity
Not Before: Oct 19 21:01:47 2025 GMT
Not After : Oct 20 21:01:47 2025 GMT
Subject: CN=0bd847ee11373a510c50d0d0e94d1b63919917e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6b:43:39:7c:d7:e9:f8:ca:bf:e1:21:c8:8f:
ec:80:92:a0:9a:c2:a8:ab:b2:02:2e:d5:08:38:89:
ea:ad:da:83:57:4d:3b:b3:22:20:8f:28:df:b0:01:
eb:9f:0e:39:c7:f8:24:e7:fb:ce:c2:3f:0c:6d:10:
56:30:b5:75:aa:7d:f7:3b:4b:6a:7e:67:c6:cc:8c:
df:0d:01:2e:2d:1b:e9:8b:77:15:46:c4:79:54:08:
60:5f:cf:f9:dd:f6:f1:09:79:25:c6:42:cc:27:ca:
5c:fe:b1:e8:73:18:97:cd:39:a5:db:41:85:85:7c:
e9:21:25:fb:e8:62:49:48:49:e8:e7:08:c0:9d:84:
ae:a5:e6:d6:8d:22:7b:2f:e6:af:98:f4:b1:17:34:
96:07:2d:6f:4a:d8:3d:b1:d9:fd:6f:94:4c:eb:10:
6e:fc:db:cd:b2:ac:3c:60:f2:a9:49:21:4e:d4:37:
7c:21:7a:c4:c1:cc:b9:1a:4b:07:db:53:2f:fb:84:
0b:7d:94:81:b4:5d:4b:22:58:af:a5:f1:d2:c4:dc:
f8:33:6a:5e:3d:48:73:91:3b:3f:c8:a3:18:68:34:
d5:97:18:13:0a:ea:41:13:d0:bb:b1:4f:cf:e7:7b:
42:bf:ea:95:ca:d2:2b:da:1e:5b:83:b5:7f:0b:bb:
4c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D8:47:EE:11:37:3A:51:0C:50:D0:D0:E9:4D:1B:63:91:99:17:E8
X509v3 Authority Key Identifier:
keyid:90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c5:4e:42:66:27:f3:30:44:ba:ae:c7:1e:c3:84:6c:a2:d9:
33:f6:16:d1:19:41:34:eb:cf:79:f0:35:c3:85:92:e6:29:e0:
57:36:97:b4:1c:07:8d:48:ed:cd:76:e1:aa:f4:47:6d:06:6c:
ed:d4:11:df:77:c4:80:14:00:f1:34:0c:55:62:5b:50:5b:60:
61:98:ba:f5:69:c9:6a:e4:62:b0:8b:83:4d:dc:6a:f1:0d:8c:
f0:ed:4d:6c:a3:5b:50:d0:36:67:cf:39:6e:2c:80:c4:c0:4b:
79:66:10:a2:9f:df:e4:c3:b9:0b:5e:53:09:96:e6:d4:d5:c5:
63:c2:cb:1b:bb:9b:44:a5:a0:2d:db:d9:14:23:5d:3f:7f:59:
3b:ca:ca:ff:b2:c7:b6:62:f7:37:b0:a0:9b:54:84:4f:8f:26:
41:3c:75:c8:b0:6a:69:d6:88:4b:16:3b:c7:b9:51:9b:07:b6:
81:4f:4a:22:e4:b3:42:69:88:80:0e:d7:9e:cb:1a:00:a0:75:
95:36:a4:d9:81:7a:83:1c:b5:0c:99:6f:f0:5f:4b:32:20:77:
0c:ea:fd:99:ae:1d:2e:6a:4b:12:49:f6:f3:f4:df:c1:7e:72:
a9:a7:33:b5:d2:2d:61:e7:6f:37:88:54:2f:97:a2:91:7f:ad:
6f:fc:b2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:19:32 2025 by rpki-client