Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
File: mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft (raw, json)
Hash identifier: rSwnh5ktQGMi7Ca21xlrdd1kQ4KMuUnj8KJ6tU5iZv8=
Subject key identifier: B2:E4:37:85:D6:5E:EB:24:B8:94:7E:B1:D6:8E:9C:F2:9F:29:F7:13
Authority key identifier: 9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
Certificate issuer: /CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Certificate serial: 0198D69850DA90026039976AD719492EA5FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
Manifest number: 0F38
Signing time: Sat 23 Aug 2025 11:02:42 +0000
Manifest this update: Sat 23 Aug 2025 11:02:42 +0000
Manifest next update: Sun 24 Aug 2025 11:02:42 +0000
Files and hashes: 1: mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl (hash: 3s/B1AuCZfCmPDJkYUDmy07PaqIEPO5zagdMg8bW7O0=)
2: zAfXaaTLSsRoB5kUrFVM41jmKKM.roa (hash: Qyk65ct/H4EE3CmFVP3i+QvaSpxHvWaeOqI7968YDoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:50:da:90:02:60:39:97:6a:d7:19:49:2e:a5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Validity
Not Before: Aug 23 11:02:42 2025 GMT
Not After : Aug 24 11:02:42 2025 GMT
Subject: CN=b2e43785d65eeb24b8947eb1d68e9cf29f29f713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:ab:bd:87:1d:04:7d:87:6a:5f:0e:07:0f:
a9:c0:42:3d:d6:18:96:99:20:91:cd:f2:bf:b8:74:
7e:47:e4:57:97:ed:2d:1a:51:6f:b1:47:81:96:db:
21:73:3a:7f:b0:2f:e8:49:fa:dc:7c:bb:d7:56:89:
9c:82:bd:eb:93:e2:5e:67:51:03:33:4b:f1:a4:eb:
9d:56:22:4e:68:28:67:0c:97:2b:47:33:13:9b:39:
0f:09:71:61:1a:1a:8a:fe:81:e2:8a:db:d6:ef:37:
a4:3a:05:e5:d7:8e:60:14:b7:e7:10:c5:e8:3b:28:
66:3f:d4:8e:51:16:c2:9e:d3:94:e4:f3:29:03:93:
cc:d9:a9:fd:c7:f1:1a:6f:2d:a3:6d:7c:b1:9d:08:
30:2b:ca:0b:f6:8a:19:71:d6:80:d7:4d:5a:e9:0a:
fa:e7:71:57:5a:c6:f3:af:68:cb:1d:39:17:35:9a:
28:df:76:56:98:8b:0d:56:37:a0:d7:19:49:19:df:
c9:da:f1:97:46:0c:39:15:d6:40:2e:f5:d8:c0:5f:
82:c5:50:4b:17:4e:6c:1f:cc:8e:ba:de:93:97:1c:
b4:ee:93:34:3e:21:25:8d:af:bd:a6:13:ff:0c:e4:
91:3e:60:fc:66:c9:10:c2:54:6b:f5:ef:a8:1a:ca:
1d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E4:37:85:D6:5E:EB:24:B8:94:7E:B1:D6:8E:9C:F2:9F:29:F7:13
X509v3 Authority Key Identifier:
keyid:9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d5:eb:73:70:b9:29:7a:73:e5:2f:6f:8e:a3:cf:cf:e8:43:
af:44:cc:d6:2a:71:b4:b9:44:78:1d:30:88:f9:83:ee:e1:ae:
30:56:7f:af:4a:36:1f:8b:a8:c4:5d:ef:52:93:c0:05:b3:00:
c4:cc:90:0d:39:04:01:48:20:50:9f:4c:6f:e8:6c:40:78:b7:
c7:2e:03:1a:96:99:eb:54:d1:c4:8c:ef:be:05:0c:b5:d6:fc:
99:f3:a9:28:54:36:ba:c3:1a:8b:06:04:38:8e:ab:ae:da:cd:
ae:c1:5c:59:a4:61:ea:a7:f9:6f:59:10:a7:a2:6e:7c:b4:b1:
ac:7c:00:29:ad:a1:8d:0a:ed:1c:f7:d3:bb:3e:9f:fd:d9:9f:
3f:d3:d9:c1:0b:6e:d7:c2:d6:37:07:8c:3b:0d:4e:63:52:03:
ee:98:67:70:a9:29:30:08:68:af:48:ac:fc:1f:a0:ed:ec:aa:
be:e3:8c:db:46:c1:b9:34:81:a4:28:82:0b:37:d5:7d:f3:33:
97:b7:c3:e8:36:98:56:2e:47:7a:ab:90:7b:63:d2:6b:10:5b:
7b:9e:93:6a:37:72:41:c4:52:88:23:aa:c6:23:db:eb:ec:c0:
bd:4e:a8:3c:2f:97:a4:55:85:0d:a1:8c:33:40:d5:e2:ec:a6:
45:20:12:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmFDakAJgOZdq1xlJLqX/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZWVjYjM1M2YxY2RjNWZkM2E5ZDU0YTg4NzM1MzFlZmQy
ODVjNDYwHhcNMjUwODIzMTEwMjQyWhcNMjUwODI0MTEwMjQyWjAzMTEwLwYDVQQD
EyhiMmU0Mzc4NWQ2NWVlYjI0Yjg5NDdlYjFkNjhlOWNmMjlmMjlmNzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhurvYcdBH2Hal8OBw+pwEI91hiW
mSCRzfK/uHR+R+RXl+0tGlFvsUeBltshczp/sC/oSfrcfLvXVomcgr3rk+JeZ1ED
M0vxpOudViJOaChnDJcrRzMTmzkPCXFhGhqK/oHiitvW7zekOgXl145gFLfnEMXo
OyhmP9SOURbCntOU5PMpA5PM2an9x/Eaby2jbXyxnQgwK8oL9ooZcdaA101a6Qr6
53FXWsbzr2jLHTkXNZoo33ZWmIsNVjeg1xlJGd/J2vGXRgw5FdZALvXYwF+CxVBL
F05sH8yOut6Tlxy07pM0PiElja+9phP/DOSRPmD8ZskQwlRr9e+oGsodLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLkN4XWXuskuJR+sdaOnPKfKfcTMB8GA1UdIwQY
MBaAFJruyzU/HNxf06nVSohzUx79KFxGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXU3TE5UOGMzRl9UcWRWS2lITlRIdjBvWEVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8xNTg2M2ItNzg3Zi00MDg0LWI3ZjYt
NTk0NDk2MGUzMWNmLzEvbXU3TE5UOGMzRl9UcWRWS2lITlRIdjBvWEVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8xNTg2M2ItNzg3Zi00MDg0LWI3ZjYtNTk0NDk2MGUzMWNm
LzEvbXU3TE5UOGMzRl9UcWRWS2lITlRIdjBvWEVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdXrc3C5
KXpz5S9vjqPPz+hDr0TM1ipxtLlEeB0wiPmD7uGuMFZ/r0o2H4uoxF3vUpPABbMA
xMyQDTkEAUggUJ9Mb+hsQHi3xy4DGpaZ61TRxIzvvgUMtdb8mfOpKFQ2usMaiwYE
OI6rrtrNrsFcWaRh6qf5b1kQp6JufLSxrHwAKa2hjQrtHPfTuz6f/dmfP9PZwQtu
18LWNweMOw1OY1ID7phncKkpMAhor0is/B+g7eyqvuOM20bBuTSBpCiCCzfVffMz
l7fD6DaYVi5HequQe2PSaxBbe56TajdyQcRSiCOqxiPb6+zAvU6oPC+XpFWFDaGM
M0DV4uymRSASiQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:21:01 2025 by rpki-client