Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
File: muJTTfUJyW7LgRvIXXbWK6rfPSk.mft (raw, json)
Hash identifier: erEvNH/erpA5APOtzzEk6GZUgaF8Ev4aRsHCdA69Df0=
Subject key identifier: E7:5F:DD:6D:5B:40:2A:AD:8D:67:F7:34:D5:03:6C:61:2E:E3:5F:C4
Authority key identifier: 9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29
Certificate issuer: /CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
Certificate serial: 019A51875FD67E9181A3D906B7935B0404A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
Manifest number: 0B30
Signing time: Wed 05 Nov 2025 01:00:17 +0000
Manifest this update: Wed 05 Nov 2025 01:00:17 +0000
Manifest next update: Thu 06 Nov 2025 01:00:17 +0000
Files and hashes: 1: SkEoFqWz8Nesa-6bLQGwcsWuCyc.roa (hash: YBTkqmp/iQfLCssDb/tS/QsoGIchXV4bMdX9APnUYwY=)
2: muJTTfUJyW7LgRvIXXbWK6rfPSk.crl (hash: 36ErphFobHUMHglw0HDDfCcxu2OOX98021YWxMdmtb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:5f:d6:7e:91:81:a3:d9:06:b7:93:5b:04:04:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
Validity
Not Before: Nov 5 01:00:17 2025 GMT
Not After : Nov 6 01:00:17 2025 GMT
Subject: CN=e75fdd6d5b402aad8d67f734d5036c612ee35fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d7:7e:38:ec:1d:10:59:ca:96:01:7a:ac:9c:
79:a6:a6:75:f5:d9:6d:80:97:e2:8a:16:42:67:71:
50:23:bb:ff:6c:4e:24:34:7b:17:40:33:ac:05:99:
5e:b6:5b:f0:79:6a:95:dd:1a:46:b6:26:d9:fd:16:
07:b0:72:b0:95:85:2c:bc:83:97:46:b7:df:5d:3c:
f2:01:a8:5c:a1:5d:67:21:f1:ff:02:f8:a9:99:58:
ae:a6:c9:11:08:cf:dc:af:a3:2d:57:a5:62:4c:53:
eb:14:31:e4:6e:7c:b7:88:9a:83:9c:3c:be:f0:20:
cb:ef:1e:89:cb:8a:99:b6:5b:51:d0:90:1c:8a:59:
fa:62:8d:a3:4d:0c:a4:ef:09:ad:44:e5:de:29:be:
71:8b:41:12:dc:7a:c2:d4:f0:c7:9b:78:37:a7:dc:
c7:f1:64:a8:36:3d:d3:17:8c:fb:63:58:5b:f5:87:
5d:bf:ba:72:b9:e0:70:55:6e:c7:e8:5f:c5:99:95:
27:6c:c2:5a:76:66:d1:17:c8:4d:33:a9:67:49:1c:
1d:1c:68:b1:48:ae:5f:19:34:d3:a3:f9:b0:30:6e:
0d:ad:da:69:c1:c3:f4:5e:ab:02:f6:88:a3:5d:fe:
e9:73:28:25:c8:c2:dd:a2:f0:46:1e:7d:2f:df:f2:
48:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5F:DD:6D:5B:40:2A:AD:8D:67:F7:34:D5:03:6C:61:2E:E3:5F:C4
X509v3 Authority Key Identifier:
keyid:9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:09:75:c1:4e:a2:f6:8d:a6:34:c6:45:10:93:72:6b:be:b6:
72:14:45:01:eb:a9:20:54:32:a9:43:f8:58:80:57:11:06:98:
12:28:b1:d1:4e:fc:4d:f6:b7:b1:95:de:05:c1:47:72:a7:82:
23:be:84:40:2b:c5:a7:02:fe:5f:9b:24:f1:ab:f8:29:20:99:
11:83:33:83:47:5b:77:06:e9:e3:f8:26:81:cc:b5:29:cd:52:
5e:c4:08:48:31:0f:ac:c6:79:82:43:d6:67:af:57:04:52:48:
64:ff:e4:a3:99:55:bf:cb:d8:48:7e:fb:df:0b:bd:48:7b:73:
19:52:ad:ae:74:04:5c:cc:17:54:51:a7:f6:1d:d9:15:a9:f2:
ee:8b:64:93:6b:0a:63:bb:cb:16:d2:d2:bc:ab:f1:cc:64:18:
a0:0c:77:2b:92:5f:53:e1:4a:6f:33:27:2a:01:db:7d:20:13:
93:8f:2a:45:3e:d1:e8:07:9e:65:90:58:6d:4b:3d:90:31:0e:
58:7a:a7:7c:3b:30:06:89:11:86:16:06:12:cd:01:44:da:7e:
29:78:a4:40:b1:63:cd:25:ca:e1:1c:91:22:f6:94:7f:b4:4c:
04:bd:6f:f7:42:ee:fb:a6:6a:48:40:c2:5c:f1:bb:60:a6:4d:
47:4b:fb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:19:24 2025 by rpki-client