Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
File: Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft (raw, json)
Hash identifier: GRrRdtEPsJi7k/ARQgCS7ci5VPYUQ20Jc+Kqgo5DnRY=
Subject key identifier: D1:3F:8F:3B:4E:3F:E1:6D:BE:39:D4:A9:CF:01:67:DE:75:D0:38:C3
Authority key identifier: 32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E
Certificate issuer: /CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
Certificate serial: 019A56AD835FA364BFD859453B6BBE2183BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
Manifest number: 134C
Signing time: Thu 06 Nov 2025 01:00:03 +0000
Manifest this update: Thu 06 Nov 2025 01:00:03 +0000
Manifest next update: Fri 07 Nov 2025 01:00:03 +0000
Files and hashes: 1: 1UnYoe8trzW_GgSpfZGfv_JmHSs.roa (hash: GL46oY9ft0jCbwWPIAjk8KgYcddvUrm4Q8zoPC/vajY=)
2: F7P27joXZG2fOKvUgJ2c9GRp2Fc.roa (hash: cui3T69juyxfuuKRDXOJBwPcUU7RywnAUmPOHsvMScE=)
3: LHjpAYfuBzZ_RF5-cYOqcdg5XWY.roa (hash: clT3oz7MTlFepMOgAgzqz4bDDX9luSGN1e4LPGs/Uas=)
4: Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl (hash: VkNgF0EOdFfsvPZznhU5yjUeBfvVQdP13dEjUtfVZg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:ad:83:5f:a3:64:bf:d8:59:45:3b:6b:be:21:83:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
Validity
Not Before: Nov 6 01:00:03 2025 GMT
Not After : Nov 7 01:00:03 2025 GMT
Subject: CN=d13f8f3b4e3fe16dbe39d4a9cf0167de75d038c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bd:62:2d:5e:39:30:ba:a9:7c:4b:fd:6e:53:
a3:ba:1c:f6:d5:c2:4a:a6:64:81:a8:56:9b:23:71:
6a:cb:46:3a:f3:a5:eb:c7:39:c4:69:ca:d2:67:cd:
7e:25:a9:09:8c:28:d3:31:8d:15:4f:5f:88:49:5c:
0d:7a:ce:a4:83:4e:67:f7:6c:1a:f9:16:22:d8:55:
8e:c6:83:90:aa:2b:94:7b:82:5a:a8:e1:64:c0:81:
b1:f6:72:67:4e:20:7b:43:ef:ad:3e:da:88:64:77:
8a:29:16:4c:e0:bc:e5:b8:6f:af:58:b8:20:a6:21:
5e:45:31:7f:ce:6d:46:73:54:b8:43:6f:c4:f4:92:
71:cd:1b:a1:db:c9:8b:1f:e3:47:3f:d2:6b:1c:c5:
cb:9c:5c:df:56:0f:22:15:05:82:42:5c:ec:24:12:
47:b7:01:af:ca:56:ca:51:46:3b:ed:f2:91:51:01:
61:76:74:3c:9b:31:83:e7:32:07:5b:47:00:07:53:
1e:3a:30:03:1d:7f:54:da:88:3e:b7:de:37:77:b0:
9d:6f:2a:90:b4:84:d7:86:9e:33:9a:4f:b8:62:78:
27:16:8e:09:91:fd:97:52:07:bd:00:4a:5a:95:9a:
b9:3d:3b:9f:61:69:ce:86:b4:11:60:c3:48:f4:6f:
35:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3F:8F:3B:4E:3F:E1:6D:BE:39:D4:A9:CF:01:67:DE:75:D0:38:C3
X509v3 Authority Key Identifier:
keyid:32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2a:5c:79:c7:e3:72:b3:41:d2:21:b1:07:81:fb:78:9e:20:
8a:80:73:6f:cc:42:cf:d6:08:50:de:d6:28:8d:dc:bc:bb:1b:
a5:61:53:e8:8c:45:2b:7e:ac:8f:df:46:ab:3c:4a:28:37:db:
23:c2:dc:70:e4:f6:60:54:1c:27:0e:0f:54:1a:f7:f4:71:11:
ac:42:0f:ca:aa:8f:cf:50:7d:4f:7d:59:56:0b:99:c7:65:26:
13:4a:3c:2d:06:3e:2e:29:76:d7:59:88:77:37:2b:25:a1:d7:
0b:fe:de:ed:e4:50:d2:da:92:a5:4a:70:b2:2c:e2:81:31:9c:
54:60:86:ae:78:62:1b:d7:12:f4:6f:ef:1d:08:b7:9d:9c:a0:
03:ea:2c:af:95:59:fb:11:5c:fb:46:51:36:7c:02:10:5e:6d:
48:29:29:be:0a:e4:86:fe:40:b5:58:67:62:e5:78:15:e0:36:
96:b1:c9:bc:56:7b:23:74:59:25:b3:c5:22:45:dd:1a:c9:00:
aa:b1:59:44:a6:57:4c:be:97:5a:4c:94:56:e4:18:77:cd:0d:
7d:3e:6f:a2:67:49:b5:84:ab:bc:97:e3:73:03:28:5b:40:2e:
b2:ea:1b:4c:69:6f:d5:4c:cb:21:3a:0d:1e:7d:df:48:96:1d:
3c:92:dd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:07:35 2025 by rpki-client