Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
File: MuZYUVseanK5nzMmaeBp5hVPcN0.mft (raw, json)
Hash identifier: jBEDcGq1AqyL86qii3peAzeLP0jUWszQVraMImPrN8A=
Subject key identifier: D3:DE:97:17:49:5A:95:EC:78:F3:93:87:0B:EF:3D:6F:CC:51:02:AA
Authority key identifier: 32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD
Certificate issuer: /CN=32e658515b1e6a72b99f332669e069e6154f70dd
Certificate serial: 019A4D7485475D78267A2AE84EA9A5F90A83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
Manifest number: 11E6
Signing time: Tue 04 Nov 2025 06:01:13 +0000
Manifest this update: Tue 04 Nov 2025 06:01:13 +0000
Manifest next update: Wed 05 Nov 2025 06:01:13 +0000
Files and hashes: 1: IP2TA110bw-H4O1wamCYoNbCcjM.roa (hash: hPPZWdSxmIy27LNJGRF/m5E6I6iPJVLPz81w8YZa7M4=)
2: MuZYUVseanK5nzMmaeBp5hVPcN0.crl (hash: KpCtsJZLy5BIrbggtpgZ0mP3v9toi35gqYp/PbnCLew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:85:47:5d:78:26:7a:2a:e8:4e:a9:a5:f9:0a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32e658515b1e6a72b99f332669e069e6154f70dd
Validity
Not Before: Nov 4 06:01:13 2025 GMT
Not After : Nov 5 06:01:13 2025 GMT
Subject: CN=d3de9717495a95ec78f393870bef3d6fcc5102aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:33:d9:55:b9:71:5b:42:2f:46:d4:de:c7:21:
5e:e0:3f:92:47:5c:a9:22:e0:12:ff:b9:6d:87:bf:
80:5e:ea:bf:bf:7d:5c:66:13:cc:2a:f6:c8:01:95:
c7:e1:ed:d6:bd:f9:b0:3c:a1:01:ff:26:d0:b1:ae:
84:11:2d:88:f5:9b:12:b4:ce:8b:6f:23:2e:18:29:
e6:f2:56:38:87:09:28:40:05:c0:0c:4d:78:d9:92:
86:88:78:e1:df:a9:6a:9b:2a:91:09:c5:98:d5:c3:
fb:37:2d:d2:75:f9:03:da:a4:14:79:09:6f:1c:57:
24:61:81:f2:bf:b5:b1:d6:e9:bf:cf:42:03:e5:6d:
99:8e:58:4a:ca:e7:4d:e7:91:6f:15:57:71:a4:c0:
11:cf:35:d4:4f:2c:06:a5:81:84:e5:76:de:aa:8c:
5f:3a:51:f9:e9:ba:e1:d9:3d:36:92:44:dd:fa:f5:
e9:fc:99:46:34:1f:2c:62:e2:9b:0f:18:17:ec:6f:
19:1c:82:9f:b1:a7:da:31:6c:44:fc:73:43:e9:96:
9c:68:13:a4:1e:c8:a1:95:fe:ef:b9:29:67:71:45:
11:b7:bf:f2:05:c9:30:ee:2d:56:14:a4:9b:65:e6:
0a:2f:08:52:5b:d3:b7:67:de:42:e1:ed:c3:da:c5:
cc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DE:97:17:49:5A:95:EC:78:F3:93:87:0B:EF:3D:6F:CC:51:02:AA
X509v3 Authority Key Identifier:
keyid:32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:4b:72:6d:e8:b7:61:f4:22:38:33:78:32:89:54:3e:d0:b5:
44:3b:f9:28:54:54:a2:d7:4a:a2:11:22:8b:b8:ce:a1:5f:b8:
1b:86:03:52:36:67:6e:20:0c:81:a6:d6:0b:ff:f5:ed:c0:d7:
79:4c:6e:cd:b1:05:b5:66:7e:c6:05:42:fc:75:3e:b3:2d:6e:
18:87:b9:d9:6e:c9:83:b3:8a:d9:0a:02:25:4d:03:a7:0c:87:
6d:35:f3:2c:e7:65:c6:8e:ad:3a:f2:2c:34:8d:45:0a:c8:5f:
a5:61:02:63:cf:2d:2a:ba:f3:5e:f7:fe:04:5f:a2:49:bc:2d:
f4:53:60:35:95:3d:7e:23:c6:83:86:2f:33:7d:f9:8e:55:1b:
8e:84:2f:f6:87:31:1b:06:3c:18:ec:46:23:66:c6:8a:9c:24:
27:e6:aa:9b:0b:31:b1:3e:4f:e7:e4:86:24:7a:06:76:da:95:
2e:fe:e9:58:59:5e:8d:4d:05:27:e5:0c:17:0a:46:ff:9b:92:
d6:a4:d7:21:c7:16:09:3d:94:05:5c:66:82:db:49:e1:e0:ea:
62:6c:b9:be:9a:84:6f:39:ad:b0:13:e8:8f:11:e2:74:b7:99:
7e:1c:dd:56:06:93:82:4f:d7:c1:0b:9b:ec:e7:58:40:36:a5:
b7:0c:2e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:22 2025 by rpki-client