Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
File: rMUN9rAd_29U64A5skl6p_TvEs0.mft (raw, json)
Hash identifier: H6a8r2QvK/0DtqIxj36z+iZJpMuNSITD6CMcmfDb4mc=
Subject key identifier: 5F:BE:78:A9:6D:B0:52:37:1E:D9:86:8C:9D:C1:D6:98:70:71:7B:73
Authority key identifier: AC:C5:0D:F6:B0:1D:FF:6F:54:EB:80:39:B2:49:7A:A7:F4:EF:12:CD
Certificate issuer: /CN=acc50df6b01dff6f54eb8039b2497aa7f4ef12cd
Certificate serial: 0199FC8F67AF193E66FE7790D141BFCE2D84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
Manifest number: 052D
Signing time: Sun 19 Oct 2025 13:01:20 +0000
Manifest this update: Sun 19 Oct 2025 13:01:20 +0000
Manifest next update: Mon 20 Oct 2025 13:01:20 +0000
Files and hashes: 1: VNZ2uED23ISvSNUvT20r4GsH7oo.roa (hash: rxCWfcG9ljPfy4GNB4ws8osuxRP7WV5ZXyCpBXvN7MU=)
2: rMUN9rAd_29U64A5skl6p_TvEs0.crl (hash: RDdv9MBit7YwUZLexyFrHcs1+r57grI7U/B3lmiD2W4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:67:af:19:3e:66:fe:77:90:d1:41:bf:ce:2d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc50df6b01dff6f54eb8039b2497aa7f4ef12cd
Validity
Not Before: Oct 19 13:01:20 2025 GMT
Not After : Oct 20 13:01:20 2025 GMT
Subject: CN=5fbe78a96db052371ed9868c9dc1d69870717b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:54:76:5a:65:c1:98:d2:5a:2e:cc:eb:64:64:
6e:ca:03:e3:a8:20:5c:ec:aa:fd:c0:10:54:2d:a7:
f8:79:1e:28:f1:8a:0a:8d:f0:6f:e0:a4:86:e3:9f:
e4:b5:4b:2c:85:06:89:3c:56:5f:6b:ac:6a:5b:b9:
51:a5:93:ea:ea:58:14:ab:e0:f9:81:12:be:1c:b4:
61:58:9c:85:cc:b1:52:ee:10:27:27:96:51:7a:12:
67:d1:cc:9b:69:b4:96:bc:61:87:cb:19:1b:c5:50:
9e:b2:31:66:ac:67:06:74:d4:a9:57:70:8e:5c:af:
82:d5:26:14:9e:bf:f6:4f:8a:76:52:e5:a8:28:69:
b2:04:40:85:08:91:a2:43:57:df:de:4d:22:55:8c:
a9:f5:b3:c9:4d:be:64:37:be:6e:f0:a5:e4:c9:23:
ae:89:01:49:15:0c:36:0b:42:e3:35:9d:89:9c:c9:
91:6f:ca:7a:75:86:49:3b:7e:b5:3d:36:0a:b4:5c:
e3:85:b6:d4:11:2b:70:a1:8d:0d:fd:24:54:5a:98:
49:92:c8:f5:15:99:38:8d:b3:be:b1:39:2b:67:7c:
55:07:34:cd:8f:f9:f9:45:cf:34:cd:08:78:d4:4d:
81:3d:c6:02:87:03:4e:bf:31:f7:c6:5c:e2:f6:b6:
02:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BE:78:A9:6D:B0:52:37:1E:D9:86:8C:9D:C1:D6:98:70:71:7B:73
X509v3 Authority Key Identifier:
keyid:AC:C5:0D:F6:B0:1D:FF:6F:54:EB:80:39:B2:49:7A:A7:F4:EF:12:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3f:3e:ca:be:17:3e:1e:77:e2:eb:65:dc:20:ba:c4:21:8e:
d9:7d:19:4e:12:57:66:ce:6e:5d:f7:8e:e8:86:23:79:40:9c:
33:05:ae:7a:0f:ab:49:f9:5d:0e:0e:61:d3:fa:ff:d6:e4:d9:
a4:bc:58:2e:26:fd:2f:50:c4:fa:43:54:eb:60:a5:d6:5e:6e:
10:6d:b3:92:43:cc:01:97:99:ab:9e:71:98:0a:ea:8b:cf:a4:
84:31:7b:a8:55:6e:ef:63:4b:41:fc:b1:06:03:5b:20:65:80:
f7:31:87:08:35:c6:0f:fe:2b:16:1f:21:0c:56:87:fb:4d:95:
4f:7f:4d:e1:1c:8c:80:7f:4a:2b:35:f1:e4:73:ac:9b:69:58:
0d:e9:76:0f:8d:6e:e2:43:41:4d:cc:01:71:34:81:0f:f0:63:
7a:a6:a4:fb:a9:06:ba:96:15:13:e1:56:73:3c:63:a4:0d:32:
8b:5f:df:dc:dd:38:50:6e:1f:27:be:89:68:ad:67:7d:22:1f:
69:2b:af:15:4f:3e:84:3a:44:fa:8d:de:15:f9:94:6b:d2:68:
59:da:3d:c9:d2:c1:75:a8:8c:23:35:d8:1a:e5:88:70:01:50:
30:2d:0f:43:51:31:b2:a6:d3:35:d5:64:af:ba:89:04:f7:76:
7d:76:e2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:21 2025 by rpki-client