Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.mft
File: muVOVVW5meWct0g6YG1rJMv2GYw.mft (raw, json)
Hash identifier: RH0UWsFy4S7W23nDIAPCK6GYh2E9RFnBIiKF90F4dFo=
Subject key identifier: 69:9D:B9:B2:E4:96:11:0B:4E:55:EA:EC:E1:97:5F:FB:12:D7:CE:9A
Authority key identifier: 9A:E5:4E:55:55:B9:99:E5:9C:B7:48:3A:60:6D:6B:24:CB:F6:19:8C
Certificate issuer: /CN=9ae54e5555b999e59cb7483a606d6b24cbf6198c
Certificate serial: 0199FE100228901DCCFC1F8FA9537FB1F377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muVOVVW5meWct0g6YG1rJMv2GYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.mft
Manifest number: 01B5
Signing time: Sun 19 Oct 2025 20:01:25 +0000
Manifest this update: Sun 19 Oct 2025 20:01:25 +0000
Manifest next update: Mon 20 Oct 2025 20:01:25 +0000
Files and hashes: 1: muVOVVW5meWct0g6YG1rJMv2GYw.crl (hash: ySl3SXSkPAZWNtUTKMzm/6A1LKR7AiOvTTQQiRfeF3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/muVOVVW5meWct0g6YG1rJMv2GYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:02:28:90:1d:cc:fc:1f:8f:a9:53:7f:b1:f3:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae54e5555b999e59cb7483a606d6b24cbf6198c
Validity
Not Before: Oct 19 20:01:25 2025 GMT
Not After : Oct 20 20:01:25 2025 GMT
Subject: CN=699db9b2e496110b4e55eaece1975ffb12d7ce9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:df:b0:4a:62:21:57:64:f7:98:0d:05:16:46:
c0:2e:64:b2:b0:51:ca:c6:34:b3:80:0f:a1:b3:61:
ac:fd:7b:f6:85:64:11:c4:f9:3a:8d:16:bc:2a:86:
97:fd:3c:c5:3c:b5:38:65:13:9f:3c:fb:81:04:6d:
ca:d7:b4:7a:a5:56:52:72:c4:3d:46:d9:25:c0:76:
20:e9:db:ad:d7:f3:77:4b:f3:e9:b5:ce:71:48:eb:
6a:29:bd:06:b4:ef:af:8d:9d:aa:6e:13:74:2a:b2:
17:96:b1:74:2c:d8:0c:01:5f:b9:cb:64:41:b4:47:
05:70:06:7b:1c:c6:eb:ab:98:2b:4e:37:6b:e8:4a:
a6:f3:3a:bb:59:21:e5:83:76:ca:69:82:b7:43:cb:
ac:ab:04:ba:d4:c7:6b:8f:f4:21:d6:23:c4:10:f7:
05:bf:31:8f:7d:84:8e:5a:79:2f:d6:3a:3f:ef:13:
5d:af:3c:2c:fc:8b:dc:6e:16:30:c8:0c:1a:8f:1c:
a9:f3:ba:3a:cb:7a:bc:8c:4f:c6:c6:ef:3b:70:92:
ab:88:90:d5:f8:00:af:8b:17:91:be:6e:49:88:62:
d1:bc:28:d5:82:bc:51:4c:ee:75:a4:41:5b:37:f2:
c7:33:0c:76:c2:2c:ef:98:e7:bc:85:43:83:1d:53:
56:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9D:B9:B2:E4:96:11:0B:4E:55:EA:EC:E1:97:5F:FB:12:D7:CE:9A
X509v3 Authority Key Identifier:
keyid:9A:E5:4E:55:55:B9:99:E5:9C:B7:48:3A:60:6D:6B:24:CB:F6:19:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muVOVVW5meWct0g6YG1rJMv2GYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:40:3a:5b:62:bc:3e:dd:f8:cd:0b:4d:ad:b8:6c:96:3b:12:
03:cb:a0:53:f1:10:f3:5c:06:be:82:25:36:b3:e4:e4:f4:71:
fe:41:e0:85:b8:33:35:03:7f:a6:60:46:e9:e2:bc:7f:9d:94:
3b:da:24:14:b2:c4:17:02:42:c4:18:f3:ae:e6:8e:2c:04:bc:
94:9b:76:40:68:b1:61:c4:08:bd:ff:4d:94:25:99:0c:69:83:
34:13:cc:b0:52:f8:e5:ab:5a:f1:c5:1d:57:0f:e1:ad:97:ac:
d7:7f:b2:04:e0:22:cf:b9:70:0e:0d:e0:64:05:59:ed:f3:fa:
04:4b:99:32:60:ff:ce:ea:a2:b7:e7:1a:96:17:99:7b:54:53:
e9:fd:b9:ee:00:9e:ff:ca:4d:d5:d2:96:e7:73:70:e7:d3:11:
03:55:52:28:5a:14:7e:97:83:b0:11:6e:3a:99:59:ec:12:cb:
3c:67:d9:05:a7:ea:95:2a:43:fe:79:ef:8b:8b:46:85:ad:7c:
fd:db:1e:76:b3:19:d5:55:ab:de:5c:55:5f:25:0b:5d:b9:66:
b8:0e:43:bc:48:dc:39:b9:b4:fc:30:c7:8e:a1:ad:34:5f:5e:
05:f5:2d:f9:f6:2b:4c:ec:2f:07:ea:f9:36:73:fa:8f:81:6d:
ee:a6:cd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:58:49 2025 by rpki-client