Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
File: Mu0BRXesc_-H7yDKb3V5XkyTf84.mft (raw, json)
Hash identifier: 5CoQYOMI2KHQDpew06R5M+9tBn6KKMtoMlv3S3k3gP8=
Subject key identifier: EC:E7:86:00:CF:E5:32:F1:9F:7D:C1:50:13:BB:DF:6B:4E:5D:FF:90
Authority key identifier: 32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
Certificate issuer: /CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
Certificate serial: 0198D54E528025172B6A0947CB511B0EF521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
Manifest number: 083A
Signing time: Sat 23 Aug 2025 05:02:16 +0000
Manifest this update: Sat 23 Aug 2025 05:02:16 +0000
Manifest next update: Sun 24 Aug 2025 05:02:16 +0000
Files and hashes: 1: Mu0BRXesc_-H7yDKb3V5XkyTf84.crl (hash: HdRk3IG0jW3/ulInln3YDU/dFEpziHBALa9nLXOnHPI=)
2: Szpv7SbbTq_ZPkpVt0ZS-yigLYQ.roa (hash: tot/yU4vNOc3RqisHsJwZZdti1Jdkg5nZCtY1DuBRp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:52:80:25:17:2b:6a:09:47:cb:51:1b:0e:f5:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
Validity
Not Before: Aug 23 05:02:16 2025 GMT
Not After : Aug 24 05:02:16 2025 GMT
Subject: CN=ece78600cfe532f19f7dc15013bbdf6b4e5dff90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d3:21:63:3c:72:b1:46:2b:9c:6b:96:01:cc:
0c:7b:d2:15:d5:26:bd:34:b9:eb:4a:4a:1e:36:e1:
56:36:3d:49:25:93:56:ca:e8:f1:74:25:81:34:e0:
24:d0:3e:ff:cc:6b:64:76:74:24:85:46:e8:5e:62:
f7:73:fd:8d:09:32:5e:be:3f:5f:19:0c:de:65:8c:
7f:d1:6b:9b:a4:18:c5:77:b0:23:dd:60:d7:af:45:
26:45:3e:1c:c5:5c:67:3b:b4:c8:eb:25:3b:91:7e:
3c:2b:40:13:01:ad:7d:6a:d5:bb:07:9d:58:71:a2:
17:f9:a0:50:37:35:e1:18:2c:3e:fc:50:01:78:6f:
df:7a:ed:91:c7:86:36:69:0c:e9:da:13:83:33:74:
40:6b:e9:77:0a:f1:a4:91:50:7b:e5:6d:af:e5:8b:
85:65:97:b3:7d:42:f4:aa:3e:13:83:15:cb:e5:2a:
95:12:9f:e0:83:b8:57:af:b0:c3:b9:09:70:c9:8b:
9b:e0:f4:01:29:f0:ba:3b:76:3b:e5:98:b1:e4:6e:
5e:ca:d2:79:7e:89:5b:4f:e6:e9:f4:b5:80:e2:f7:
51:83:ab:8f:51:b9:89:7a:2e:ca:08:69:b4:fe:cf:
15:c6:cb:69:5d:09:37:85:b7:00:55:f6:2b:2c:4a:
a7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E7:86:00:CF:E5:32:F1:9F:7D:C1:50:13:BB:DF:6B:4E:5D:FF:90
X509v3 Authority Key Identifier:
keyid:32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:18:fb:7a:54:2a:c6:46:da:b2:dd:76:b7:ae:7a:1a:a6:a0:
2c:b9:89:92:5c:0b:28:e2:9f:30:05:5d:7b:8a:54:59:4e:30:
ea:83:d5:32:33:41:35:4b:15:65:97:c4:29:6a:48:13:c3:1e:
7e:d7:d7:d9:0f:44:d2:86:2d:ec:46:25:85:9e:44:b4:c1:c7:
c6:a2:e2:46:bc:61:d4:49:73:ab:02:b7:9a:04:60:23:e7:78:
ed:e8:17:1c:67:93:ec:b5:fb:4c:13:dd:99:a0:85:32:09:24:
a0:0a:ad:1b:f0:f9:2f:d8:55:0a:49:84:18:86:55:59:5d:9b:
87:70:fe:e4:36:4f:d7:29:94:51:1a:e7:c7:21:be:f5:83:b8:
6d:3d:5d:24:bd:25:c7:68:a2:1c:5c:73:12:d2:01:f0:22:95:
53:b1:ee:c4:e3:6d:d5:b7:aa:50:d0:f5:5c:6b:b9:11:cb:8e:
0d:90:5c:da:57:8c:a2:5f:ab:41:b2:18:2d:f3:16:82:5a:0d:
63:41:61:59:07:ca:c5:a1:2e:6f:a4:4a:9a:eb:08:c0:7a:bf:
36:db:5f:f9:81:e1:89:76:1c:83:d4:a1:7b:0c:25:27:bd:89:
00:3c:b4:d8:0d:f0:95:01:f5:90:00:45:9b:c9:24:0c:24:7a:
1e:f5:96:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:51 2025 by rpki-client