Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
File: 99MudSlBh9Rujq4Pj-crX9er-IY.mft (raw, json)
Hash identifier: 3RRAYTls74iS9ijJnG79KoPBvbJ7XyNuE8qnAiHxrv8=
Subject key identifier: D4:14:7D:8F:0F:C6:07:A9:FA:F4:1A:51:2F:64:DE:08:04:6B:85:47
Authority key identifier: F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86
Certificate issuer: /CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
Certificate serial: 019A00A3107B236C2BC8835B187E3996F89D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
Manifest number: 16EC
Signing time: Mon 20 Oct 2025 08:01:17 +0000
Manifest this update: Mon 20 Oct 2025 08:01:17 +0000
Manifest next update: Tue 21 Oct 2025 08:01:17 +0000
Files and hashes: 1: 99MudSlBh9Rujq4Pj-crX9er-IY.crl (hash: 487F2WU6qPCM4AktxacRvUMQFAEWB7tDM7EYxQBNJ+Y=)
2: FYg_psCFhdR_n5VNhP25gINYx6M.roa (hash: h+fjKLWgHVAllkPWeuz1NL6KyEoRyUzS/iNO+yf1JFI=)
3: ZhvVa7SGL0ihaaWqEDQl81ffNSw.roa (hash: ytKQDKvlQVK8AL0ByiBKUDRRuwN5/717YGo/cNpO++k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:10:7b:23:6c:2b:c8:83:5b:18:7e:39:96:f8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
Validity
Not Before: Oct 20 08:01:17 2025 GMT
Not After : Oct 21 08:01:17 2025 GMT
Subject: CN=d4147d8f0fc607a9faf41a512f64de08046b8547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:03:b8:c0:51:64:32:ff:d3:2d:4f:27:42:d6:
db:8a:c1:26:18:af:f1:9a:06:33:50:9c:d8:c1:da:
c4:3a:eb:15:fc:2e:25:94:a3:01:67:5b:c0:8c:a0:
92:1c:41:29:bf:40:c6:b0:e6:cc:1d:a3:8b:1a:8e:
00:e9:11:17:93:77:e3:ae:11:b4:d3:af:f4:0e:bb:
d3:1c:38:aa:1d:6b:43:eb:12:17:76:4c:1a:c1:91:
22:3f:26:63:a7:e6:ad:1a:69:d9:f3:7a:d2:92:4e:
81:db:1f:35:43:c9:5b:52:10:8f:23:8e:3c:cc:51:
c9:9b:cc:53:76:fa:78:dd:32:56:d0:b0:b5:b9:96:
3d:da:06:20:28:e1:47:73:88:a5:0a:54:8a:ac:85:
af:53:c7:ad:6f:68:d5:a1:d4:df:8b:4a:e0:e0:80:
88:38:d8:fc:2c:bb:48:6b:39:59:d1:b4:db:d0:ea:
ec:96:02:f9:f3:55:69:cc:51:3a:35:fe:0d:d2:85:
d3:99:87:3b:33:9c:0e:58:18:38:0b:67:f3:60:05:
ad:02:a4:ed:3b:77:bf:80:8a:3d:70:42:3a:0a:b6:
0d:ce:17:90:b0:62:63:4e:45:2c:bd:73:07:1e:2b:
b8:6a:d9:12:23:58:77:d4:09:3f:93:4d:66:0c:48:
0e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:14:7D:8F:0F:C6:07:A9:FA:F4:1A:51:2F:64:DE:08:04:6B:85:47
X509v3 Authority Key Identifier:
keyid:F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e1:96:9d:71:e2:af:42:6b:3e:d8:c5:5d:9e:a5:f4:8f:5e:
42:48:4a:29:e2:92:0c:36:a8:9c:12:32:33:9d:31:2d:f8:1b:
18:aa:10:35:2f:a1:a3:2e:e4:e8:33:60:30:5e:6c:c9:c1:d3:
87:1d:dd:80:c7:6c:a7:40:d4:cd:70:a1:f2:fa:75:f2:19:bc:
b2:8f:93:d8:03:2f:7c:d3:90:7a:40:4d:5b:b2:cd:b3:24:17:
5e:e6:54:cb:51:b6:3a:88:bb:59:ec:16:13:ae:f4:5b:66:49:
fe:f0:94:38:a3:08:75:a1:43:cd:bf:2c:ee:c5:60:9a:e6:80:
7e:4f:1d:c5:15:64:89:39:45:72:fc:c1:88:bb:e3:02:1d:6b:
8c:b3:b8:f5:a5:15:b7:2d:b3:ef:9a:7f:ba:ef:da:14:0b:35:
3d:ab:b3:cf:83:65:91:68:0e:09:f0:97:e6:71:01:7c:f5:d7:
ad:d6:a2:18:41:60:e0:80:fb:af:5f:aa:41:83:d3:47:3f:5d:
5a:c4:74:a8:bd:ec:2a:f3:6f:a4:68:8a:a4:d9:ff:e1:78:e0:
6f:70:cc:03:1b:71:39:06:54:50:ce:31:de:e6:fb:15:90:bf:
1b:90:28:12:ee:9a:50:39:bc:27:10:27:58:6a:07:41:03:0a:
2e:af:00:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAoxB7I2wryINbGH45lvidMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZDMyZTc1Mjk0MTg3ZDQ2ZThlYWUwZjhmZTcyYjVmZDdh
YmY4ODYwHhcNMjUxMDIwMDgwMTE3WhcNMjUxMDIxMDgwMTE3WjAzMTEwLwYDVQQD
EyhkNDE0N2Q4ZjBmYzYwN2E5ZmFmNDFhNTEyZjY0ZGUwODA0NmI4NTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQO4wFFkMv/TLU8nQtbbisEmGK/x
mgYzUJzYwdrEOusV/C4llKMBZ1vAjKCSHEEpv0DGsObMHaOLGo4A6REXk3fjrhG0
06/0DrvTHDiqHWtD6xIXdkwawZEiPyZjp+atGmnZ83rSkk6B2x81Q8lbUhCPI448
zFHJm8xTdvp43TJW0LC1uZY92gYgKOFHc4ilClSKrIWvU8etb2jVodTfi0rg4ICI
ONj8LLtIazlZ0bTb0OrslgL581VpzFE6Nf4N0oXTmYc7M5wOWBg4C2fzYAWtAqTt
O3e/gIo9cEI6CrYNzheQsGJjTkUsvXMHHiu4atkSI1h31Ak/k01mDEgOGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQUfY8Pxgep+vQaUS9k3ggEa4VHMB8GA1UdIwQY
MBaAFPfTLnUpQYfUbo6uD4/nK1/Xq/iGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTlNdWRTbEJoOVJ1anE0UGotY3JYOWVyLUlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kMGNjNDEtYzhmMS00YTQ0LTkxZjAt
ZDFhNDU5OWNiMGU1LzEvOTlNdWRTbEJoOVJ1anE0UGotY3JYOWVyLUlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9kMGNjNDEtYzhmMS00YTQ0LTkxZjAtZDFhNDU5OWNiMGU1
LzEvOTlNdWRTbEJoOVJ1anE0UGotY3JYOWVyLUlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASuGWnXHi
r0JrPtjFXZ6l9I9eQkhKKeKSDDaonBIyM50xLfgbGKoQNS+hoy7k6DNgMF5sycHT
hx3dgMdsp0DUzXCh8vp18hm8so+T2AMvfNOQekBNW7LNsyQXXuZUy1G2Ooi7WewW
E670W2ZJ/vCUOKMIdaFDzb8s7sVgmuaAfk8dxRVkiTlFcvzBiLvjAh1rjLO49aUV
ty2z75p/uu/aFAs1Pauzz4NlkWgOCfCX5nEBfPXXrdaiGEFg4ID7r1+qQYPTRz9d
WsR0qL3sKvNvpGiKpNn/4Xjgb3DMAxtxOQZUUM4x3ub7FZC/G5AoEu6aUDm8JxAn
WGoHQQMKLq8AJg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:33:28 2025 by rpki-client