Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
File: MusrUeN0jCUnQC5oYBqIkSiDoFg.mft (raw, json)
Hash identifier: pN9Xm+l7ei2819r83KazgMoAaxDTFWroJsrdp1cN7DY=
Subject key identifier: 90:91:C0:BE:31:9E:DF:AE:E3:C5:AA:E9:64:6E:CC:03:90:3D:AF:22
Authority key identifier: 32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58
Certificate issuer: /CN=32eb2b51e3748c2527402e68601a88912883a058
Certificate serial: 019A4EF5AC90F0B148BD2F26B37C6F17BEB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:01:54 +0000
Manifest this update: Tue 04 Nov 2025 13:01:54 +0000
Manifest next update: Wed 05 Nov 2025 13:01:54 +0000
Files and hashes: 1: KhlRzejfpvDxwhcPEcTkW8z6UJk.roa (hash: OH1bpS6azjDuSrz2eDsCxiLR1IWtc/vamDUbBv4QJmc=)
2: MusrUeN0jCUnQC5oYBqIkSiDoFg.crl (hash: RHYrWz9nW6yiBvvzXQPhaIKtYONjm7RU/YQ/gto2HPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:ac:90:f0:b1:48:bd:2f:26:b3:7c:6f:17:be:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32eb2b51e3748c2527402e68601a88912883a058
Validity
Not Before: Nov 4 13:01:54 2025 GMT
Not After : Nov 5 13:01:54 2025 GMT
Subject: CN=9091c0be319edfaee3c5aae9646ecc03903daf22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c2:4e:0b:8d:ab:0b:80:ef:ad:ad:0d:3c:fa:
4b:97:60:49:3c:ff:2a:e2:f3:1c:4f:6b:87:4f:31:
f1:80:a2:74:3d:cb:49:27:ef:0d:03:24:12:dd:d7:
fc:ca:08:3a:5a:36:8b:51:07:7c:8c:e2:99:5e:c2:
05:76:a7:75:76:e5:08:3d:c6:b1:88:62:6e:5b:8c:
94:66:73:a2:e8:be:32:75:86:90:9a:64:26:82:64:
b5:0a:c4:f6:c7:9d:6c:e6:b6:2e:54:82:89:ca:f1:
a4:4c:8f:c5:24:24:32:0e:ba:47:07:75:e1:bf:cc:
5a:d6:e7:9f:6f:2a:b9:6d:92:6c:fd:b8:e7:ba:14:
a6:bd:06:9d:46:87:6f:4d:54:e0:22:8b:bd:61:25:
f4:8d:37:58:a8:3a:ad:c0:24:f9:b5:0d:86:7c:d9:
c8:77:83:d8:bf:33:a4:2f:7f:bf:fa:92:49:69:f7:
05:33:9b:22:43:48:8e:aa:93:aa:ae:20:f5:06:24:
98:17:22:a7:fa:91:a9:ca:16:9c:da:1b:26:c5:12:
7d:a0:4c:a4:5e:af:ac:5e:99:5c:9c:d1:1b:5a:ee:
7a:f4:83:9c:2d:cc:68:cb:89:b6:f6:e6:94:bb:2d:
17:bb:6a:bc:a1:06:17:1f:b1:43:4e:11:a8:5a:43:
6f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:91:C0:BE:31:9E:DF:AE:E3:C5:AA:E9:64:6E:CC:03:90:3D:AF:22
X509v3 Authority Key Identifier:
keyid:32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ee:dd:9b:63:8d:59:53:e2:30:f3:38:b4:1e:9f:74:e0:6c:
45:8b:54:66:8b:0a:98:31:73:ab:6f:2a:fb:3e:53:91:5e:8b:
50:f0:ae:9e:ba:ea:8e:19:f6:96:1e:54:05:b3:75:96:e4:06:
e2:2e:a5:9e:98:d5:20:4d:f7:45:a6:dd:18:d5:d8:27:5a:66:
e4:a9:ed:da:75:bf:f0:b6:4b:c8:06:57:5f:fa:cd:bf:e1:c2:
b4:fe:ef:4e:c8:c8:61:f1:ab:b1:87:4f:74:f6:97:58:39:11:
1e:1b:33:cc:4d:b2:ff:d2:77:a7:e4:0a:3e:52:80:f0:97:cd:
b2:76:f3:28:93:d8:65:d1:5f:d2:75:49:ab:e0:4d:b6:a4:24:
4b:43:c6:aa:77:01:3f:83:8e:87:a8:75:86:ab:df:46:f0:74:
fc:43:cf:f8:36:eb:d1:81:ea:8e:27:b0:27:5c:36:00:74:ab:
f2:d9:5e:8f:97:8c:0f:51:19:5f:b8:64:77:21:d4:be:a5:13:
8f:b3:74:ad:05:4b:9e:43:ef:9f:bb:76:d1:38:fa:25:0f:6c:
67:62:59:7a:8d:10:e7:da:3f:6b:1b:e3:b5:ed:06:8e:00:1b:
6a:79:8a:15:91:25:0a:8c:75:3d:3f:b9:0c:d7:04:2e:57:2e:
0c:bf:09:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:19 2025 by rpki-client