Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
File: mu2VdsknICkWjE0aQXXRp8ocUe4.mft (raw, json)
Hash identifier: AtI1c9vrrW6Ka5SqK8fJsCfHZE5EvQ6EyYi9DoQrCkU=
Subject key identifier: BA:FA:31:D1:AB:DF:5C:06:A9:7E:25:7C:67:FF:FC:3C:0A:66:8E:DD
Authority key identifier: 9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE
Certificate issuer: /CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee
Certificate serial: 0199FCFD22BC84C778D31FD780E73B756C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
Manifest number: 1004
Signing time: Sun 19 Oct 2025 15:01:11 +0000
Manifest this update: Sun 19 Oct 2025 15:01:11 +0000
Manifest next update: Mon 20 Oct 2025 15:01:11 +0000
Files and hashes: 1: MiKRdbGABW7H7vIb5R-saUTi7Ps.roa (hash: IcsqNxh/vQa5gPXIyGMaar+4UAAjRSfgokvENVkA4RM=)
2: mu2VdsknICkWjE0aQXXRp8ocUe4.crl (hash: nx3VwTF7/zFyf/12SH1ViaJbSmVIjlRQ1fxPYkTgwCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:22:bc:84:c7:78:d3:1f:d7:80:e7:3b:75:6c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee
Validity
Not Before: Oct 19 15:01:11 2025 GMT
Not After : Oct 20 15:01:11 2025 GMT
Subject: CN=bafa31d1abdf5c06a97e257c67fffc3c0a668edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:cb:e9:6d:4e:e8:b7:06:67:09:52:ea:bd:
99:a6:a0:dd:8d:93:0f:54:ad:02:e9:b3:5f:a3:4a:
c4:fd:d8:f4:04:2c:06:6a:d4:89:f1:9f:39:fc:b2:
8d:20:d2:fb:a0:6a:3a:95:93:a0:b8:27:ca:fd:0a:
50:e5:fd:2c:cd:dc:74:f4:02:23:dc:a6:52:07:fc:
8e:c3:7d:96:3c:c7:5c:00:22:0c:64:83:30:84:e1:
b6:5c:85:53:d3:12:bf:34:a7:d6:ad:9e:23:44:36:
e4:34:5a:af:26:90:0d:65:a9:c6:fe:68:88:ec:e8:
b2:69:da:11:dd:5d:78:cc:70:29:95:7e:49:6f:7d:
7b:29:34:11:a7:79:dd:62:1b:80:57:24:73:36:7e:
50:d8:52:5d:24:43:7b:e5:67:31:67:cf:b9:e7:da:
d8:2d:ca:86:c7:95:b5:7a:25:a5:b7:fc:f8:01:05:
d3:92:20:93:e6:54:f8:e9:82:ad:a3:b3:10:3a:0f:
fe:d6:1e:75:c8:5c:c1:9e:40:48:e2:1c:1f:3c:db:
07:3d:62:f1:44:de:13:d1:e4:6c:e9:c6:d2:59:b0:
42:68:06:ad:e1:5f:c0:fa:ba:46:e1:a8:ed:c5:af:
f8:3d:b9:de:dc:33:80:07:88:7d:40:9f:0a:f7:ff:
e7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FA:31:D1:AB:DF:5C:06:A9:7E:25:7C:67:FF:FC:3C:0A:66:8E:DD
X509v3 Authority Key Identifier:
keyid:9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:38:8e:f3:d3:fa:37:65:e7:2a:a1:37:64:d4:6c:b1:c4:e1:
11:13:54:26:ee:c4:3c:6a:eb:cb:61:6f:ad:9b:8e:74:17:05:
36:f4:e6:51:7f:f1:ed:ee:d2:df:a8:90:2a:95:91:d5:37:6a:
3b:76:a0:cc:8f:b1:29:d7:98:93:9d:c7:e3:50:53:99:fb:fa:
c0:48:fe:a0:4b:2a:a4:80:fc:8d:8a:1f:a1:4a:35:07:f6:d4:
30:42:55:b2:99:be:7d:46:84:73:96:69:09:1c:70:2b:8a:86:
1d:25:cc:29:2b:5f:e0:b2:77:91:c8:49:ef:ac:1f:49:8b:e3:
4d:4a:b8:c7:9d:7c:51:f6:af:dd:09:28:0d:ed:c5:86:de:ea:
2d:3d:7f:f0:31:53:e7:ac:e5:90:af:16:81:fa:c0:b3:9e:3f:
01:50:5d:ad:50:83:c8:63:de:7a:e5:fe:84:63:b3:7f:a5:3e:
b4:b6:e9:11:3c:c4:95:06:d2:af:3e:a4:b6:22:ea:32:8b:c7:
d2:b4:99:d4:6a:b8:8e:bb:62:29:4b:1c:2c:ae:1c:77:85:2e:
57:06:31:63:fa:2b:14:73:61:81:ce:91:e1:0f:f5:2d:e5:8b:
e6:fb:31:d8:68:b0:be:62:69:0e:d4:ca:80:df:e5:c2:73:12:
74:4e:93:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:16 2025 by rpki-client