Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
File: Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft (raw, json)
Hash identifier: 7cNjpfr56vwm0+sI/MlswcnVE/qcBsTBi0pGAU3yqw8=
Subject key identifier: 40:29:D9:2C:88:B7:3D:31:6C:09:89:8A:DD:77:55:00:40:22:C9:FE
Authority key identifier: 32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E
Certificate issuer: /CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
Certificate serial: 019A52D0F36FFEA151811D19027E151E5A98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
Manifest number: 134A
Signing time: Wed 05 Nov 2025 07:00:16 +0000
Manifest this update: Wed 05 Nov 2025 07:00:16 +0000
Manifest next update: Thu 06 Nov 2025 07:00:16 +0000
Files and hashes: 1: 1UnYoe8trzW_GgSpfZGfv_JmHSs.roa (hash: GL46oY9ft0jCbwWPIAjk8KgYcddvUrm4Q8zoPC/vajY=)
2: F7P27joXZG2fOKvUgJ2c9GRp2Fc.roa (hash: cui3T69juyxfuuKRDXOJBwPcUU7RywnAUmPOHsvMScE=)
3: LHjpAYfuBzZ_RF5-cYOqcdg5XWY.roa (hash: clT3oz7MTlFepMOgAgzqz4bDDX9luSGN1e4LPGs/Uas=)
4: Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl (hash: cV8H0qU4JIYBIT1Oy1W1Gm/V7QvcWWDOGKtbDpB6/VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d0:f3:6f:fe:a1:51:81:1d:19:02:7e:15:1e:5a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
Validity
Not Before: Nov 5 07:00:16 2025 GMT
Not After : Nov 6 07:00:16 2025 GMT
Subject: CN=4029d92c88b73d316c09898add7755004022c9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ea:96:16:c5:54:86:49:eb:dd:4b:4d:9a:26:
10:f2:63:14:0c:45:79:e7:9e:32:8d:12:99:cd:49:
58:31:4d:c3:36:65:8d:55:c1:fd:a6:79:e5:9b:e6:
a5:b3:13:ca:de:4e:0c:14:21:24:ae:56:16:0d:3a:
62:86:5d:e0:73:60:f9:19:fc:8c:f3:bb:5b:c0:a8:
2b:ec:a2:dd:d3:49:32:3a:46:03:28:08:02:24:16:
45:ad:93:58:46:3a:77:b5:3b:1d:6d:29:f3:f8:c8:
14:8c:7c:ac:c7:cd:01:c6:4d:f6:fe:66:52:a4:81:
16:22:9a:4a:1a:35:93:65:7d:07:83:16:12:17:bb:
85:dd:0d:f3:b3:da:24:a6:0b:72:be:b8:3e:69:06:
ad:86:31:91:28:e8:7f:0c:bc:af:22:19:27:00:db:
c3:9a:0e:6a:98:15:80:cc:b2:e0:aa:eb:ef:e6:17:
03:92:5e:bc:0d:0c:0d:b9:1c:dc:47:34:77:09:a4:
98:b7:72:4d:ae:89:ff:26:68:1e:85:2a:e3:7b:e9:
89:bd:98:b2:20:74:e2:71:8b:12:c8:3a:ab:43:98:
53:4e:85:89:5f:40:09:b5:bb:5c:94:58:00:91:af:
eb:e5:0e:27:6d:d4:8e:e3:03:06:91:72:6e:7b:89:
59:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:29:D9:2C:88:B7:3D:31:6C:09:89:8A:DD:77:55:00:40:22:C9:FE
X509v3 Authority Key Identifier:
keyid:32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ca:32:44:bc:bc:40:69:97:a9:39:fa:9c:c7:ee:4c:bf:de:
f6:c0:67:fe:f9:ef:d6:9e:c9:21:25:db:43:83:c2:03:62:b4:
48:04:4e:03:bd:99:20:9e:2f:4f:f2:ff:6c:5f:c1:f6:b4:60:
2c:98:13:e0:af:f4:a8:71:5e:25:3a:f8:45:b0:4f:4d:bb:d2:
fe:2d:fb:ac:39:c2:a1:3b:a9:be:a3:4b:8d:da:ad:48:57:15:
22:2f:b3:65:a0:36:d1:32:e5:0a:32:ce:6f:6b:04:e7:19:4c:
30:34:6a:52:b1:5a:14:27:5f:a9:75:76:2c:81:39:c1:4b:dd:
8e:82:89:e7:7e:2a:72:fb:a3:2d:5d:cc:f5:c9:a9:84:cc:43:
1d:8e:2c:de:a1:da:7a:6a:fc:64:44:7f:bd:02:40:17:0b:94:
2e:57:ff:b7:ea:c5:5e:16:1b:38:d2:f6:23:6c:de:c7:50:2c:
76:47:b2:e2:4d:f5:66:a8:73:7c:60:23:65:f3:86:08:ed:b5:
63:08:78:d3:6d:1c:b8:19:96:5e:68:03:40:2a:6e:27:8b:8f:
08:b3:0f:a4:1e:16:76:b6:b9:93:ea:38:46:1c:91:c4:bd:37:
e1:94:a4:38:df:22:96:3f:0d:6b:da:85:5e:64:bf:95:d5:2f:
80:6e:bd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:38:43 2025 by rpki-client