Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
File: mupW9uHBw1kAHsImfvD-4bRW3f0.mft (raw, json)
Hash identifier: U/3XSP4bMNWofrSe9aEeaCOrntlhglS2bPxJYpGNOiQ=
Subject key identifier: 9F:40:46:D2:E8:3A:21:80:FB:5F:3A:B5:D9:0F:8D:4E:A6:8B:14:42
Authority key identifier: 9A:EA:56:F6:E1:C1:C3:59:00:1E:C2:26:7E:F0:FE:E1:B4:56:DD:FD
Certificate issuer: /CN=9aea56f6e1c1c359001ec2267ef0fee1b456ddfd
Certificate serial: 0199FBEB693A79077D14463CCFD91A5A7F2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mupW9uHBw1kAHsImfvD-4bRW3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:02:12 +0000
Manifest this update: Sun 19 Oct 2025 10:02:12 +0000
Manifest next update: Mon 20 Oct 2025 10:02:12 +0000
Files and hashes: 1: mupW9uHBw1kAHsImfvD-4bRW3f0.crl (hash: 85yBjCafgEia3Scp3k01W9WeWpBk9+vdEfSJIWOMLyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mupW9uHBw1kAHsImfvD-4bRW3f0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:69:3a:79:07:7d:14:46:3c:cf:d9:1a:5a:7f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aea56f6e1c1c359001ec2267ef0fee1b456ddfd
Validity
Not Before: Oct 19 10:02:12 2025 GMT
Not After : Oct 20 10:02:12 2025 GMT
Subject: CN=9f4046d2e83a2180fb5f3ab5d90f8d4ea68b1442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:91:38:28:d4:52:b0:05:a9:13:27:62:db:08:
f0:75:bb:ef:47:78:4b:8d:32:73:ba:ee:da:e7:f0:
6b:35:b6:3d:f9:bc:93:55:be:7c:24:52:8f:e4:fe:
58:9d:f0:d7:ee:94:b8:1a:d8:8a:6e:06:da:16:f6:
c8:69:7e:29:2e:c0:fe:84:46:e5:40:36:1f:18:c2:
ef:ad:06:29:60:cb:f6:f9:4d:13:fe:a2:f1:ce:4b:
b8:6f:5b:7f:1b:d2:61:e8:ed:40:87:8c:4b:d3:fe:
ef:e0:66:b6:f8:e2:35:5e:3b:64:58:f2:ea:ad:99:
6e:44:83:4f:ca:08:00:16:5b:b7:1b:50:f8:f7:5e:
ce:17:1c:b7:68:9e:e5:a2:15:aa:07:ba:7d:88:8a:
bf:54:80:8b:0e:57:22:f7:d4:6a:a9:00:45:53:0a:
17:97:69:66:0f:ef:57:55:74:65:19:85:55:98:2e:
61:ee:f7:c4:06:d6:d3:0f:9d:68:71:ac:c7:00:1a:
69:00:65:d7:01:dc:82:68:02:8c:0d:0e:69:85:09:
a5:f2:97:07:b1:e9:5c:5f:a7:c9:47:86:2a:c8:b5:
45:47:f6:45:f0:7d:e3:63:bf:68:f8:b2:7b:72:62:
49:ad:6a:60:94:e1:00:ce:34:a5:f4:46:9f:c7:d7:
4e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:40:46:D2:E8:3A:21:80:FB:5F:3A:B5:D9:0F:8D:4E:A6:8B:14:42
X509v3 Authority Key Identifier:
keyid:9A:EA:56:F6:E1:C1:C3:59:00:1E:C2:26:7E:F0:FE:E1:B4:56:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mupW9uHBw1kAHsImfvD-4bRW3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f5:54:f2:b5:d4:cc:23:c4:a6:5f:33:83:5a:e9:99:35:3a:
61:d0:c3:34:82:3a:57:f3:32:24:6a:ee:09:93:1d:56:9a:35:
13:4d:04:00:c0:8a:3d:62:a3:17:a6:88:32:71:d2:4c:75:59:
08:74:86:ca:24:76:0d:38:49:2d:40:c2:99:ef:bd:88:cc:c5:
2e:4e:15:27:b4:4c:87:ac:29:dc:2b:3f:b7:86:03:bd:a7:46:
90:4a:95:4d:9e:e5:73:62:2a:1d:31:9f:7f:ab:9d:89:7e:c9:
84:44:83:ba:04:fe:9c:d5:98:8f:25:46:a5:70:de:32:05:44:
69:b5:9b:e5:df:ba:3f:8c:05:2d:a4:6d:d5:93:08:51:fa:d7:
fd:f6:98:83:12:74:de:f8:44:8c:de:8e:07:ce:16:7a:f2:8d:
d2:61:00:c3:c3:37:32:5d:7a:61:5a:3b:7a:81:c0:51:6a:0a:
08:03:4e:b2:4a:f5:ab:45:79:4a:1d:38:eb:ab:23:9c:36:f5:
c4:1c:05:e3:22:27:4d:cc:97:82:34:ff:8d:13:3f:cb:29:a3:
99:d1:a1:ba:93:bb:20:fe:2b:54:ba:79:fc:7e:b4:d0:d5:4b:
6d:38:ad:e5:de:3b:e5:76:38:8b:b8:ac:7b:74:d6:0d:41:28:
fb:a3:e1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:04 2025 by rpki-client