Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
File: muOJscw5niFvztjTnsPuifwguDk.mft (raw, json)
Hash identifier: 8bGZEpyXjEphnuQjOA4cNB5mRxQW4aH2ywt8Ydgv1y8=
Subject key identifier: 44:72:8C:BA:6B:F5:E0:10:3D:D0:36:69:E5:26:F5:E7:60:45:7B:4C
Authority key identifier: 9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39
Certificate issuer: /CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839
Certificate serial: 019A526320A4C69B5492B529413916BDE3CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 05:00:19 +0000
Manifest this update: Wed 05 Nov 2025 05:00:19 +0000
Manifest next update: Thu 06 Nov 2025 05:00:19 +0000
Files and hashes: 1: muOJscw5niFvztjTnsPuifwguDk.crl (hash: q7I83ZKcmn9LFf8pr+cwqOE3jT0O/Idiz8Qi3pa2Hw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:20:a4:c6:9b:54:92:b5:29:41:39:16:bd:e3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839
Validity
Not Before: Nov 5 05:00:19 2025 GMT
Not After : Nov 6 05:00:19 2025 GMT
Subject: CN=44728cba6bf5e0103dd03669e526f5e760457b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:11:4e:a6:a0:fc:2c:a5:0d:a0:19:11:97:44:
9c:08:64:31:db:d3:6b:36:e5:6b:b5:ad:3a:d1:87:
1e:24:7a:56:34:ed:d1:42:08:a8:58:89:c5:7c:39:
47:f7:2a:fb:b8:53:6b:94:00:7d:fd:cb:63:25:2e:
f8:15:35:0d:fc:f3:66:40:09:c7:0e:41:73:f6:af:
dd:b1:b1:4c:fa:93:39:e5:dc:38:cc:ff:c2:1d:14:
4f:85:86:63:02:38:9c:fa:f9:f3:49:28:9c:4e:4f:
10:a4:16:53:0a:fe:07:e1:99:be:b2:64:64:35:a4:
f0:89:81:0c:74:c2:d5:6f:41:95:2d:4f:1c:16:87:
ad:b4:c3:37:79:47:3b:29:28:c9:d9:12:2c:08:e9:
16:75:c6:2f:e8:9f:07:b5:df:77:33:d9:e1:13:ce:
d9:7d:71:f5:d2:7f:f9:b7:2d:b9:17:5e:81:14:5a:
1d:e3:50:b0:00:65:4b:a6:4c:00:3f:8e:c9:92:c3:
1f:b5:82:e3:f1:21:57:e4:4c:f6:73:65:09:7a:62:
b1:5c:9d:e7:7f:08:44:dd:4e:ac:ec:d9:d2:4c:9a:
e6:a6:c0:15:51:b4:10:b8:82:4c:b3:11:42:2b:a5:
40:d9:34:39:24:d4:fa:60:5b:3b:da:81:0f:f2:c2:
55:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:72:8C:BA:6B:F5:E0:10:3D:D0:36:69:E5:26:F5:E7:60:45:7B:4C
X509v3 Authority Key Identifier:
keyid:9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:59:0c:81:a0:7d:97:e3:ed:94:e4:3d:6e:d3:19:8a:37:24:
b0:04:34:0d:df:86:64:c8:5d:8f:65:7c:7d:8d:6b:3a:56:80:
0e:24:56:ad:a1:40:c3:94:3b:fe:50:f2:82:e5:bc:82:5c:b1:
9e:cc:7d:4f:b1:f9:fc:64:13:72:b2:39:9f:42:0d:0b:a4:7d:
ee:05:26:80:d7:bd:51:f4:39:01:8c:be:df:36:d2:8f:e1:67:
a4:69:9c:72:01:f1:69:39:20:c6:d6:33:f8:e4:f3:0b:da:ff:
39:cd:61:8a:f5:8b:52:97:36:2c:4d:4c:6b:74:19:67:b9:ca:
2f:bd:e9:de:c7:79:ba:37:07:30:28:75:f4:05:a8:52:37:49:
fe:b0:35:82:30:76:cf:18:6b:e6:db:a9:da:44:f2:79:21:0f:
49:2d:26:7e:16:d1:d4:37:1c:85:87:5a:0f:dc:e8:21:58:6c:
e3:da:f6:23:46:c5:21:1a:bf:a3:4a:5b:94:88:43:4d:f1:08:
9d:6c:c5:88:65:d9:04:ac:8d:3d:78:6b:8f:7a:01:c4:dd:b4:
11:96:11:0d:23:db:1c:2f:30:88:93:2c:7c:dd:fe:4d:44:7f:
92:dd:7e:2a:13:26:3b:db:3c:ac:36:97:11:92:bc:99:98:94:
82:44:83:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:06:52 2025 by rpki-client