Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
File: 1-MUB87-tSa1OVubkwY90Dt6gXSE.mft (raw, json)
Hash identifier: ZEDzqivs6wCdPbUVYVbgJxP6IRYOceD6615CkvI8PYA=
Subject key identifier: 76:73:B5:CC:17:67:4E:82:CA:58:D5:35:F9:3A:AF:B5:A1:D6:5C:EB
Authority key identifier: F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
Certificate issuer: /CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Certificate serial: 0199FD343AB54F843043FD5608E4B8FCE1E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
Manifest number: 12C7
Signing time: Sun 19 Oct 2025 16:01:22 +0000
Manifest this update: Sun 19 Oct 2025 16:01:22 +0000
Manifest next update: Mon 20 Oct 2025 16:01:22 +0000
Files and hashes: 1: 1-MUB87-tSa1OVubkwY90Dt6gXSE.crl (hash: emhD1loSUNAKGOvNePuGy34vM7FeYM1PJjXhOK2a3xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:3a:b5:4f:84:30:43:fd:56:08:e4:b8:fc:e1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Validity
Not Before: Oct 19 16:01:22 2025 GMT
Not After : Oct 20 16:01:22 2025 GMT
Subject: CN=7673b5cc17674e82ca58d535f93aafb5a1d65ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d6:55:fc:6d:f8:b0:5f:8c:42:0a:b6:68:79:
5d:00:c5:89:f6:7a:d5:19:be:d9:d6:32:fe:76:33:
0a:0d:11:23:fd:7b:02:4f:24:80:4f:2e:02:39:73:
d2:60:56:46:e9:75:12:5c:c5:ca:79:01:12:ad:00:
66:14:0d:9b:e6:c2:3d:f4:8d:c7:46:70:e5:1f:1b:
d8:12:42:f0:30:f8:58:04:a3:f4:61:66:a4:4e:43:
72:87:88:69:bf:9d:cc:2e:2d:b7:74:01:4d:ae:a4:
ad:f3:4f:49:c7:fe:0e:25:31:75:bc:77:53:04:cc:
6e:ec:45:df:5a:fa:46:b7:a4:11:4b:65:bf:20:2a:
18:13:44:bd:90:5a:ba:cb:4a:de:cb:e5:bb:a6:9a:
7a:fe:e6:b8:4f:c9:24:d5:c3:bc:04:86:33:e4:08:
97:70:fc:32:a8:24:82:87:b4:69:c4:a6:d0:78:02:
69:5d:c1:6c:8a:b1:65:c3:ac:d2:65:a0:c8:c5:de:
32:dc:fd:7b:0f:4c:9b:07:f5:c4:a0:2b:88:2e:c6:
54:4a:1e:f5:01:77:4b:27:a8:4e:51:17:7f:c6:ac:
65:ec:16:27:d1:78:e3:92:3e:ad:cc:6a:f5:d5:87:
7b:4c:91:c9:e2:be:f1:0e:72:63:77:b6:b4:83:45:
7c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:73:B5:CC:17:67:4E:82:CA:58:D5:35:F9:3A:AF:B5:A1:D6:5C:EB
X509v3 Authority Key Identifier:
keyid:F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ef:d9:33:e2:80:4f:02:6c:47:df:77:c9:f0:90:8c:16:f2:
51:70:f8:9d:20:09:d9:0e:9a:2b:0b:a2:f3:9f:50:84:9b:1c:
6f:42:58:3a:ef:eb:3c:9d:ff:19:df:cd:f5:36:d9:bf:d2:34:
12:8d:7d:f9:6e:31:e7:79:02:b7:61:59:be:50:09:8c:fb:0e:
b1:6e:84:e0:6c:bd:c1:6a:39:b1:ed:19:df:9a:3c:0f:27:36:
25:14:67:0a:11:c8:f1:68:71:88:db:60:05:78:d3:91:55:62:
18:ea:b1:a8:b2:9a:c0:1b:27:9e:a8:92:e3:83:c0:2b:a7:50:
4b:c1:29:41:ca:60:33:d0:3b:4e:26:6b:1d:7d:2c:08:4a:1c:
30:25:9c:72:6b:41:d6:70:2b:73:f2:e8:e4:4f:f3:a6:80:f2:
ce:5d:33:d6:d3:37:ec:43:87:8f:c2:56:c8:58:22:ec:f0:55:
92:b0:81:f5:48:db:53:6e:92:df:21:87:b9:5c:8c:19:48:ae:
27:f0:11:56:9d:c2:f4:4d:aa:5b:b4:ed:98:8c:17:a2:55:c9:
94:02:ce:93:3b:9c:a5:e8:0b:45:42:e9:5b:10:70:e2:a0:3e:
00:ba:b5:33:49:ce:9b:86:50:2c:00:12:1c:eb:c3:76:04:89:
9b:b5:64:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:25 2025 by rpki-client