Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
File: 1-muQgEgTpldoh5it3nvb0ObQ5T4.mft (raw, json)
Hash identifier: rM7JSXjeixfFbmxud90oJP3SPc32U6iBsxEm8J6ECHY=
Subject key identifier: 79:38:FB:80:14:1D:79:BD:0C:D3:3D:63:26:BA:E5:60:14:85:5B:3A
Authority key identifier: FA:6B:90:80:48:13:A6:57:68:87:98:AD:DE:7B:DB:D0:E6:D0:E5:3E
Certificate issuer: /CN=fa6b90804813a657688798adde7bdbd0e6d0e53e
Certificate serial: 019A06A41E61E420E9329BBA0F327FE8AD91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
Manifest number: 060C
Signing time: Tue 21 Oct 2025 12:00:10 +0000
Manifest this update: Tue 21 Oct 2025 12:00:10 +0000
Manifest next update: Wed 22 Oct 2025 12:00:10 +0000
Files and hashes: 1: 1-muQgEgTpldoh5it3nvb0ObQ5T4.crl (hash: l0gwbXIhWsdEiKS1F9bAGI2pIMQMueMlchmmcgY0Rpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:a4:1e:61:e4:20:e9:32:9b:ba:0f:32:7f:e8:ad:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa6b90804813a657688798adde7bdbd0e6d0e53e
Validity
Not Before: Oct 21 12:00:10 2025 GMT
Not After : Oct 22 12:00:10 2025 GMT
Subject: CN=7938fb80141d79bd0cd33d6326bae56014855b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:13:49:fb:01:de:cd:01:78:53:36:76:ec:c3:
ea:42:aa:42:49:47:0c:35:e4:8a:de:e7:36:68:d6:
3f:d4:ba:43:60:7a:83:a6:3f:0b:58:b0:1b:a5:9f:
13:bc:91:07:53:02:ba:ae:5d:3b:ae:6a:03:70:b5:
52:7e:b7:e5:81:a4:b2:ff:c5:a5:da:39:c5:b7:e6:
d8:91:53:13:e1:3d:00:51:79:85:08:93:81:9d:e6:
fb:1e:c1:91:8e:d0:1e:66:93:42:00:0c:10:73:8d:
43:65:28:39:79:7a:8c:bd:bd:8e:a2:e1:84:32:e5:
aa:7c:75:98:d7:fb:b0:a0:3b:b1:df:57:1b:09:65:
5a:0f:a3:59:4d:80:92:8f:4e:9d:91:92:2d:d8:f0:
cf:a7:54:fd:4c:c2:77:76:5a:18:6f:aa:84:0b:a0:
2f:4a:dc:17:fa:22:14:50:b5:d9:c8:03:28:8b:64:
49:f2:e3:88:ee:ee:af:44:30:a2:8b:97:1e:88:6c:
78:51:76:9a:02:a6:fd:f3:c7:8f:60:94:ea:dc:89:
ef:97:4c:92:4e:07:16:42:9d:ae:2e:e6:fc:e0:39:
db:d9:96:c6:93:a5:5b:74:ef:0d:95:f0:59:05:87:
fb:55:c0:0a:2d:cb:85:a5:3f:52:d6:73:12:f8:74:
f3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:38:FB:80:14:1D:79:BD:0C:D3:3D:63:26:BA:E5:60:14:85:5B:3A
X509v3 Authority Key Identifier:
keyid:FA:6B:90:80:48:13:A6:57:68:87:98:AD:DE:7B:DB:D0:E6:D0:E5:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e4:b5:55:29:82:50:fb:7d:8e:f8:de:c2:e8:c5:4b:83:3f:
bf:f7:b6:61:d0:7b:3a:4a:69:8c:42:1a:e6:fb:8b:ef:73:0e:
8a:d0:19:8a:56:7c:c3:ec:e7:99:c1:5d:b3:ec:b9:6d:51:c4:
fb:ee:2c:60:cb:ec:3d:58:34:80:0e:ca:8e:bf:e7:37:bc:d7:
03:c6:ba:c6:6e:e8:c6:83:a2:d4:7c:4b:cc:05:ec:da:a9:6f:
97:59:c8:65:a2:1e:da:cb:a7:8d:3c:63:32:a8:11:a6:5c:ea:
30:09:d6:cf:f2:b6:80:39:d8:23:bb:ae:85:ee:06:70:a3:ea:
39:ae:8f:16:28:4e:ff:46:96:dd:af:d4:4c:62:f5:de:8a:bf:
ba:36:15:e0:6d:56:7b:6f:8e:c9:30:ed:c4:bb:49:24:61:ba:
af:83:58:91:92:8b:f5:6e:b9:ce:39:97:79:e3:87:52:51:05:
6a:b2:45:91:11:df:5a:31:4e:e2:25:94:19:1f:8b:f3:4b:d4:
00:87:37:c8:9e:06:fc:2b:68:ab:0a:03:f9:4b:c0:6f:e2:76:
d1:e0:a4:74:e5:16:84:17:36:35:37:8a:97:44:ae:ba:d7:c6:
80:8d:bd:ce:72:99:64:4e:3c:52:9d:56:0b:e0:29:ec:f5:57:
49:e2:5e:3f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZoGpB5h5CDpMpu6DzJ/6K2RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNmI5MDgwNDgxM2E2NTc2ODg3OThhZGRlN2JkYmQwZTZk
MGU1M2UwHhcNMjUxMDIxMTIwMDEwWhcNMjUxMDIyMTIwMDEwWjAzMTEwLwYDVQQD
Eyg3OTM4ZmI4MDE0MWQ3OWJkMGNkMzNkNjMyNmJhZTU2MDE0ODU1YjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hNJ+wHezQF4UzZ27MPqQqpCSUcM
NeSK3uc2aNY/1LpDYHqDpj8LWLAbpZ8TvJEHUwK6rl07rmoDcLVSfrflgaSy/8Wl
2jnFt+bYkVMT4T0AUXmFCJOBneb7HsGRjtAeZpNCAAwQc41DZSg5eXqMvb2OouGE
MuWqfHWY1/uwoDux31cbCWVaD6NZTYCSj06dkZIt2PDPp1T9TMJ3dloYb6qEC6Av
StwX+iIUULXZyAMoi2RJ8uOI7u6vRDCii5ceiGx4UXaaAqb988ePYJTq3Invl0yS
TgcWQp2uLub84Dnb2ZbGk6VbdO8NlfBZBYf7VcAKLcuFpT9S1nMS+HTzdQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHk4+4AUHXm9DNM9Yya65WAUhVs6MB8GA1UdIwQY
MBaAFPprkIBIE6ZXaIeYrd5729Dm0OU+MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1tdVFnRWdUcGxkb2g1aXQzbnZiME9iUTVUNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvYTllM2RiLTIyNmQtNDFlMi1iZTA5
LThkN2Q0YWZmYjU5Zi8xLzEtbXVRZ0VnVHBsZG9oNWl0M252YjBPYlE1VDQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Y2L2E5ZTNkYi0yMjZkLTQxZTItYmUwOS04ZDdkNGFmZmI1
OWYvMS8xLW11UWdFZ1RwbGRvaDVpdDNudmIwT2JRNVQ0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs+S1
VSmCUPt9jvjewujFS4M/v/e2YdB7OkppjEIa5vuL73MOitAZilZ8w+znmcFds+y5
bVHE++4sYMvsPVg0gA7Kjr/nN7zXA8a6xm7oxoOi1HxLzAXs2qlvl1nIZaIe2sun
jTxjMqgRplzqMAnWz/K2gDnYI7uuhe4GcKPqOa6PFihO/0aW3a/UTGL13oq/ujYV
4G1We2+OyTDtxLtJJGG6r4NYkZKL9W65zjmXeeOHUlEFarJFkRHfWjFO4iWUGR+L
80vUAIc3yJ4G/CtoqwoD+UvAb+J20eCkdOUWhBc2NTeKl0SuutfGgI29znKZZE48
Up1WC+Ap7PVXSeJePw==
-----END CERTIFICATE-----
Generated at Tue Oct 21 16:04:46 2025 by rpki-client