
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
File: mUqt73Cb43uczULMK4xzLDlxUPo.mft (raw, json)
Hash identifier: rl9ks3bO+POpSkE9xjj7ylpwYlCyIi9IXfCwCqFBrlg=
Subject key identifier: 7B:06:48:FD:23:A5:D5:39:46:7F:15:E0:06:05:55:DA:F0:97:2C:0E
Authority key identifier: 99:4A:AD:EF:70:9B:E3:7B:9C:CD:42:CC:2B:8C:73:2C:39:71:50:FA
Certificate issuer: /CN=994aadef709be37b9ccd42cc2b8c732c397150fa
Certificate serial: 0199FB46361F04328C9658ECDABA8FC01C40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
Manifest number: 16C5
Signing time: Sun 19 Oct 2025 07:01:46 +0000
Manifest this update: Sun 19 Oct 2025 07:01:46 +0000
Manifest next update: Mon 20 Oct 2025 07:01:46 +0000
Files and hashes: 1: mUqt73Cb43uczULMK4xzLDlxUPo.crl (hash: FqgdhrhPwIixFTlXjFfKnANMmVI0ZDpuGLl9q3J4AN4=)
2: rCQFs6YvGWUAxg9vVWInZlNxQI4.roa (hash: +0NX89cMUvPysuXc7Y1nf0CYHUBQMqz9BTCGNPE3tAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:36:1f:04:32:8c:96:58:ec:da:ba:8f:c0:1c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994aadef709be37b9ccd42cc2b8c732c397150fa
Validity
Not Before: Oct 19 07:01:46 2025 GMT
Not After : Oct 20 07:01:46 2025 GMT
Subject: CN=7b0648fd23a5d539467f15e0060555daf0972c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ff:6e:58:b4:b7:fa:4c:70:d9:4f:a7:be:aa:
4e:8b:7b:00:93:c5:6f:71:11:4c:eb:b0:20:03:da:
62:39:17:27:00:3b:79:79:ae:65:19:b3:8c:a5:3d:
0b:6c:6a:85:11:14:d4:b5:6e:dc:83:8e:26:d3:85:
45:42:69:7d:40:e6:5d:03:8c:0d:4c:d6:d9:18:d3:
8e:63:ca:1d:e6:ab:77:9f:ca:78:69:53:00:ec:26:
3a:ce:2e:8b:58:19:41:d8:1a:f3:a6:d3:e4:2a:57:
40:8d:29:a2:36:b4:a8:6a:88:b6:bf:05:b1:cc:7d:
a7:8b:d4:98:cd:ee:ef:78:e9:da:1f:bb:54:53:1d:
05:a1:4b:32:81:fd:56:af:e9:3f:d2:8c:7d:16:36:
50:a7:71:39:7f:d3:45:57:ae:27:a5:7b:53:d2:c6:
fd:d3:7f:61:ba:47:9e:f0:cb:99:e4:ae:1d:65:97:
8b:19:0f:93:91:0b:22:fd:a1:d5:f5:b5:ec:94:6a:
bb:cd:f4:55:a9:f8:a1:1f:25:54:98:67:04:37:63:
b8:c8:27:80:5c:36:2c:3b:51:64:2f:23:3a:52:6e:
5d:13:1b:2a:6f:8b:1c:65:ec:77:a0:69:4c:28:59:
44:31:ca:c7:91:c8:e2:4c:81:37:c5:4f:f5:8f:6c:
b2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:06:48:FD:23:A5:D5:39:46:7F:15:E0:06:05:55:DA:F0:97:2C:0E
X509v3 Authority Key Identifier:
keyid:99:4A:AD:EF:70:9B:E3:7B:9C:CD:42:CC:2B:8C:73:2C:39:71:50:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2c:95:31:fc:24:83:2f:1a:82:7f:15:6c:22:8c:13:1c:eb:
41:ff:74:b0:04:2a:c7:79:8d:fe:6f:24:3d:5d:7c:01:3f:f7:
8c:18:1e:fc:74:60:d9:9b:9c:a6:49:a3:3d:ea:72:92:58:43:
00:e4:8c:61:e6:89:f9:ba:39:50:b6:7f:f1:f9:c0:4a:10:91:
66:f3:f8:77:33:d0:1b:bd:3a:31:43:8b:6d:d4:89:35:05:01:
bc:14:57:64:4f:78:ac:4c:aa:6e:e2:6b:35:a1:9a:fe:15:91:
b9:a8:df:43:c9:81:01:10:02:b7:81:01:7f:a4:23:7c:fb:2c:
af:93:84:8e:b9:73:f7:ea:0e:d3:1d:a2:b3:ba:78:11:d6:72:
92:e3:65:22:09:f4:c7:67:5b:a0:70:7a:40:37:74:bf:4f:b7:
ee:29:54:f0:63:45:81:12:f8:50:21:91:29:13:dd:2f:00:05:
ba:b7:22:08:19:06:52:e5:21:c6:0f:da:fb:51:1c:fd:2e:dd:
ac:df:f0:bb:0a:a0:be:83:55:cd:4f:d6:17:a5:43:4a:4b:a0:
10:2e:a0:d5:6f:95:0e:f5:ae:a6:81:0c:cc:82:70:92:00:fa:
26:11:7b:82:b7:ce:5d:8a:7a:b5:94:74:33:41:b9:42:a7:13:
57:3f:16:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:45 2025 by rpki-client