Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
File: mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft (raw, json)
Hash identifier: HTfiYdE7Qc1E0D7005NSrryqVtAsol9wLYEJl6emS08=
Subject key identifier: 82:F9:BE:80:6F:52:A9:87:FF:6E:72:CB:C4:9B:1A:12:9D:81:14:97
Authority key identifier: 9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
Certificate issuer: /CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Certificate serial: 0199FC21AC7277B14C27EDCE619DE66516A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
Manifest number: 0FD0
Signing time: Sun 19 Oct 2025 11:01:29 +0000
Manifest this update: Sun 19 Oct 2025 11:01:29 +0000
Manifest next update: Mon 20 Oct 2025 11:01:29 +0000
Files and hashes: 1: mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl (hash: /1Dya/YWx7IQqS0+3JiNQbxrK3mgVOM3wwLTWmFNacA=)
2: zAfXaaTLSsRoB5kUrFVM41jmKKM.roa (hash: Qyk65ct/H4EE3CmFVP3i+QvaSpxHvWaeOqI7968YDoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:ac:72:77:b1:4c:27:ed:ce:61:9d:e6:65:16:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Validity
Not Before: Oct 19 11:01:29 2025 GMT
Not After : Oct 20 11:01:29 2025 GMT
Subject: CN=82f9be806f52a987ff6e72cbc49b1a129d811497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3d:6f:2c:b3:7c:ac:4b:a4:6b:e2:b3:1b:88:
51:69:e8:6e:0f:4c:16:81:e0:98:db:af:f7:cb:00:
d0:eb:a4:82:73:c1:5f:55:d4:6d:e6:2f:54:f5:c1:
34:78:46:ab:ce:8a:e7:65:62:b1:a0:8e:1c:fe:c1:
5f:28:62:6e:30:ab:02:39:ff:49:d2:49:99:89:a3:
56:0d:02:5c:c7:4c:f0:52:a8:a1:b2:7a:32:c0:7a:
84:3d:79:8e:d4:11:43:0d:a1:e5:0b:72:3b:27:74:
c8:23:61:17:de:fc:aa:b0:3b:bf:f2:61:90:22:c8:
38:58:5d:79:7e:d0:3f:62:89:62:1d:6b:a6:39:6f:
a5:8e:1e:81:c1:59:bb:82:4e:96:e1:a5:5c:32:22:
f1:b2:7f:5c:21:10:7c:1f:e6:f4:09:8a:8a:cb:db:
33:1a:9c:a6:52:c4:f1:19:bc:23:62:4a:f4:d4:2e:
21:b1:60:05:21:5f:8c:7c:2e:76:e1:fb:23:90:db:
90:61:a9:18:9a:96:ef:39:f8:2c:37:02:a8:64:d5:
97:14:e5:1d:41:03:32:a5:2d:82:4f:fd:bd:12:b7:
30:86:11:ab:19:18:b7:02:9a:95:93:ef:38:e3:3e:
86:5a:68:de:41:55:1a:11:04:53:f6:ae:57:c7:d4:
fa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F9:BE:80:6F:52:A9:87:FF:6E:72:CB:C4:9B:1A:12:9D:81:14:97
X509v3 Authority Key Identifier:
keyid:9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:43:cb:0a:da:98:f9:88:3c:90:68:5c:b8:7b:28:ef:05:22:
80:a7:56:71:43:cd:1b:21:03:36:d4:e2:8f:c5:9e:b2:29:3d:
4e:e2:22:59:69:70:38:43:d7:4a:64:22:91:44:e0:ec:0a:8f:
77:15:f2:c7:e7:11:71:a3:cd:8e:90:1d:6c:65:28:fc:1b:81:
fc:ef:06:a4:8f:32:0c:fc:7c:c6:24:8f:29:05:7c:4f:07:c0:
f3:38:c5:0a:3d:bf:f0:40:60:ac:0e:94:a1:cb:62:a2:1c:00:
97:a1:36:5c:a8:40:4a:2e:b4:2d:c6:f6:52:87:ef:24:e3:6a:
b6:86:e9:34:2e:39:46:e4:db:75:c8:29:e1:b9:65:bb:fe:40:
57:dd:cd:d6:11:b7:16:80:c7:48:55:20:65:20:bf:bb:f0:97:
47:ab:b7:65:69:66:b1:44:67:77:2d:ab:7c:44:20:f7:5a:21:
98:06:73:e9:d2:df:95:29:f2:35:a0:b7:b0:d9:bf:24:4d:2c:
08:57:86:cd:88:55:46:80:a3:af:4b:07:7f:1f:81:8c:88:22:
c3:d7:e8:6b:15:34:32:98:c7:bf:6d:b5:53:ec:4e:8d:69:22:
9f:64:69:48:e3:59:4a:e7:d2:36:f2:ae:7a:b8:6d:0d:71:80:
1b:10:b6:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8Iaxyd7FMJ+3OYZ3mZRanMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZWVjYjM1M2YxY2RjNWZkM2E5ZDU0YTg4NzM1MzFlZmQy
ODVjNDYwHhcNMjUxMDE5MTEwMTI5WhcNMjUxMDIwMTEwMTI5WjAzMTEwLwYDVQQD
Eyg4MmY5YmU4MDZmNTJhOTg3ZmY2ZTcyY2JjNDliMWExMjlkODExNDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD1vLLN8rEuka+KzG4hRaehuD0wW
geCY26/3ywDQ66SCc8FfVdRt5i9U9cE0eEarzornZWKxoI4c/sFfKGJuMKsCOf9J
0kmZiaNWDQJcx0zwUqihsnoywHqEPXmO1BFDDaHlC3I7J3TII2EX3vyqsDu/8mGQ
Isg4WF15ftA/YoliHWumOW+ljh6BwVm7gk6W4aVcMiLxsn9cIRB8H+b0CYqKy9sz
GpymUsTxGbwjYkr01C4hsWAFIV+MfC524fsjkNuQYakYmpbvOfgsNwKoZNWXFOUd
QQMypS2CT/29ErcwhhGrGRi3ApqVk+844z6GWmjeQVUaEQRT9q5Xx9T61wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIL5voBvUqmH/25yy8SbGhKdgRSXMB8GA1UdIwQY
MBaAFJruyzU/HNxf06nVSohzUx79KFxGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXU3TE5UOGMzRl9UcWRWS2lITlRIdjBvWEVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8xNTg2M2ItNzg3Zi00MDg0LWI3ZjYt
NTk0NDk2MGUzMWNmLzEvbXU3TE5UOGMzRl9UcWRWS2lITlRIdjBvWEVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8xNTg2M2ItNzg3Zi00MDg0LWI3ZjYtNTk0NDk2MGUzMWNm
LzEvbXU3TE5UOGMzRl9UcWRWS2lITlRIdjBvWEVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxkPLCtqY
+Yg8kGhcuHso7wUigKdWcUPNGyEDNtTij8Wesik9TuIiWWlwOEPXSmQikUTg7AqP
dxXyx+cRcaPNjpAdbGUo/BuB/O8GpI8yDPx8xiSPKQV8TwfA8zjFCj2/8EBgrA6U
octiohwAl6E2XKhASi60Lcb2UofvJONqtobpNC45RuTbdcgp4bllu/5AV93N1hG3
FoDHSFUgZSC/u/CXR6u3ZWlmsURndy2rfEQg91ohmAZz6dLflSnyNaC3sNm/JE0s
CFeGzYhVRoCjr0sHfx+BjIgiw9foaxU0MpjHv221U+xOjWkin2RpSONZSufSNvKu
erhtDXGAGxC2ZQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:24 2025 by rpki-client