Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
File: MuZYUVseanK5nzMmaeBp5hVPcN0.mft (raw, json)
Hash identifier: MPqfG4axcW88ePhwADwBQqMG8PIiGmAJ0fMbvhMF70E=
Subject key identifier: 31:03:8A:5E:6E:35:83:0C:69:2F:97:87:02:15:B4:E9:6D:B8:B3:81
Authority key identifier: 32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD
Certificate issuer: /CN=32e658515b1e6a72b99f332669e069e6154f70dd
Certificate serial: 019874500D5826E89FE3A5C63E546FDB313F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
Manifest number: 10F1
Signing time: Mon 04 Aug 2025 09:01:00 +0000
Manifest this update: Mon 04 Aug 2025 09:01:00 +0000
Manifest next update: Tue 05 Aug 2025 09:01:00 +0000
Files and hashes: 1: IP2TA110bw-H4O1wamCYoNbCcjM.roa (hash: hPPZWdSxmIy27LNJGRF/m5E6I6iPJVLPz81w8YZa7M4=)
2: MuZYUVseanK5nzMmaeBp5hVPcN0.crl (hash: qcR11BzLWiEMlnHukuywj6cfHe5nZS21zTfAR6M3WlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:0d:58:26:e8:9f:e3:a5:c6:3e:54:6f:db:31:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32e658515b1e6a72b99f332669e069e6154f70dd
Validity
Not Before: Aug 4 09:01:00 2025 GMT
Not After : Aug 5 09:01:00 2025 GMT
Subject: CN=31038a5e6e35830c692f97870215b4e96db8b381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:25:c5:7d:60:5c:03:51:96:20:5a:09:95:48:
8b:ce:8b:e5:00:5e:0a:aa:f6:34:d6:db:7d:89:e8:
e7:80:0c:c2:27:c0:71:b2:53:11:13:e2:1a:f1:79:
e0:ac:fb:c3:b0:67:53:72:c6:3c:98:8d:2c:cd:0f:
3a:ae:a5:f4:50:2c:d9:93:52:62:2b:da:41:ac:5c:
31:48:27:af:6a:8a:05:ad:52:4c:b1:30:f6:51:b6:
57:77:eb:de:aa:66:d4:6a:98:ce:f1:33:0e:69:27:
07:11:df:17:b0:5d:36:e1:46:50:b5:99:41:c2:49:
5a:3a:cc:a9:11:86:cc:f7:79:12:b7:13:f5:1f:db:
a5:be:60:34:6e:f3:ae:0f:96:b3:a5:c5:5b:dc:c1:
30:56:e8:80:0e:21:26:a9:6a:ad:23:ca:f5:80:01:
eb:9c:2a:1f:f5:f4:2d:3d:c6:21:83:74:50:1b:4a:
9c:6c:00:45:5e:00:80:f2:b9:a9:3d:40:04:9d:51:
fc:8b:41:ad:46:2e:ce:7d:ea:b5:93:a5:6d:05:52:
09:ab:3e:ab:b6:53:18:12:3d:65:bc:68:a4:62:c9:
12:10:9b:8f:b9:35:d1:7e:05:f1:09:ac:49:aa:2d:
ad:b6:2a:1e:52:d4:e3:5c:f6:c8:3d:ab:44:5a:d0:
19:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:03:8A:5E:6E:35:83:0C:69:2F:97:87:02:15:B4:E9:6D:B8:B3:81
X509v3 Authority Key Identifier:
keyid:32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:9e:6b:51:09:b8:b7:54:2a:72:e9:6f:f0:bf:bf:86:17:d6:
5d:7f:30:3b:db:f9:ad:7f:f5:5f:d3:75:d0:0e:17:ea:40:ec:
9a:4b:06:50:55:f3:9b:ab:26:47:a3:80:8d:0b:e8:7f:da:6d:
df:1a:6e:c0:e5:0a:8b:b2:56:1d:3c:a9:c9:b5:f6:b5:28:a9:
63:e5:c2:01:73:90:23:6d:6c:c7:da:af:a5:a2:24:55:04:1e:
97:a3:c2:88:e4:dc:08:bb:c7:c8:67:38:c7:38:18:88:4c:86:
f8:a8:a6:87:fb:92:82:f9:5f:5a:fc:01:c9:3c:cf:5a:45:4e:
79:c2:c9:48:b2:4f:65:4d:77:56:85:c7:f6:0d:9a:28:b5:e3:
19:2b:25:11:3d:ee:11:43:04:94:d4:e1:c8:b3:ed:d2:50:0a:
b8:06:c4:86:f6:c7:e7:73:33:27:97:6d:a5:6a:1a:d7:21:09:
a3:36:83:8e:9d:06:56:7c:ea:12:69:9f:ba:e0:a7:a1:cd:6d:
75:a3:c4:84:95:56:5b:b7:24:2b:f6:d2:21:25:15:96:53:8c:
52:08:d9:15:59:9e:89:29:74:cb:4c:7d:a2:b7:b8:32:ba:7a:
25:06:a5:99:12:d7:4b:92:64:af:fe:36:92:c8:1e:77:ff:d9:
bd:f4:50:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:46 2025 by rpki-client