
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
File: muJTTfUJyW7LgRvIXXbWK6rfPSk.mft (raw, json)
Hash identifier: oUIxHltoc8Pv+OS0xDq29Z3mVNK197Caix+zgh3JQKE=
Subject key identifier: 3F:51:02:D3:37:16:4F:5D:13:D4:64:56:D9:60:7F:79:D9:8E:B5:2D
Authority key identifier: 9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29
Certificate issuer: /CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
Certificate serial: 01987298D27A5393656A8558D828035EBDB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
Manifest number: 0A38
Signing time: Mon 04 Aug 2025 01:01:14 +0000
Manifest this update: Mon 04 Aug 2025 01:01:14 +0000
Manifest next update: Tue 05 Aug 2025 01:01:14 +0000
Files and hashes: 1: SkEoFqWz8Nesa-6bLQGwcsWuCyc.roa (hash: YBTkqmp/iQfLCssDb/tS/QsoGIchXV4bMdX9APnUYwY=)
2: muJTTfUJyW7LgRvIXXbWK6rfPSk.crl (hash: z8zEYhTG6Owt7VsCIpGF9/jAvQW/G04VuhRCXd0xEHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:d2:7a:53:93:65:6a:85:58:d8:28:03:5e:bd:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
Validity
Not Before: Aug 4 01:01:14 2025 GMT
Not After : Aug 5 01:01:14 2025 GMT
Subject: CN=3f5102d337164f5d13d46456d9607f79d98eb52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9d:41:f2:53:66:07:28:e8:52:7a:ac:4b:b9:
2d:1c:fa:7e:32:ff:b8:79:91:8a:f5:f6:cb:d3:75:
d5:eb:e4:10:1f:63:9c:f5:6b:81:26:a9:36:1e:81:
a5:69:ed:86:96:df:58:63:a6:09:da:07:69:1c:27:
5b:74:94:a0:5d:ce:ef:26:cc:e6:ab:35:b2:9b:ae:
13:50:d9:ef:cd:31:4c:09:25:2a:54:a4:26:69:72:
2b:7b:e2:04:27:c5:cb:81:d5:36:87:7e:1f:24:6d:
bc:76:b2:30:85:5e:25:1b:c7:a5:0d:cf:b0:aa:14:
cd:3e:9f:df:ee:fd:e6:24:6b:00:12:6d:41:c5:82:
af:c3:2f:d0:60:20:67:6c:0e:a2:a8:f6:e0:e5:52:
31:a6:7c:92:3c:70:06:dd:00:14:34:a5:5e:69:01:
03:b7:a5:f0:c2:bf:12:73:14:e7:00:e4:c3:c1:03:
8a:be:35:55:ac:52:4c:86:10:a4:1b:bb:ee:1e:c7:
b8:85:8e:94:be:ae:cf:35:ae:e3:33:56:66:02:dd:
0b:50:5a:e8:4f:ec:10:8a:f0:90:d5:89:6d:75:ba:
3b:ea:cb:6b:c0:9d:5d:55:f0:27:2f:14:30:8f:1a:
19:8f:86:c0:a9:dd:32:b1:71:47:56:15:b5:f1:ef:
2c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:51:02:D3:37:16:4F:5D:13:D4:64:56:D9:60:7F:79:D9:8E:B5:2D
X509v3 Authority Key Identifier:
keyid:9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:2c:f4:ea:d4:b7:d3:8e:55:46:b2:60:2c:c3:ac:c4:b1:c5:
51:77:19:0c:41:7d:ac:69:cd:da:78:98:06:cd:a1:c0:e7:d0:
4c:da:dd:e9:f9:37:64:37:5f:e7:9a:04:bc:59:54:d0:66:48:
fb:f8:c3:a2:0e:a7:24:24:b5:e7:fe:c8:fc:8f:cf:a4:2c:65:
c6:9d:f6:b8:36:ec:a8:38:28:54:61:71:a1:0a:53:37:a9:1e:
a3:c5:21:e1:77:0c:47:37:b1:dc:38:1a:80:5f:48:5a:de:50:
3f:6b:81:ab:db:38:fe:3d:c2:1d:dc:45:fb:3f:df:ad:4e:c3:
76:75:8f:9b:ac:4d:8c:52:e4:c6:75:ee:e8:c7:a1:72:2d:ae:
4f:f2:22:ae:07:09:f7:9a:05:1a:f1:73:c0:c9:ab:3a:b8:1e:
e9:04:d8:18:7a:69:e9:ba:ea:15:b2:95:da:5d:7f:ad:47:75:
c4:27:83:ba:83:eb:83:95:af:4e:fc:fb:10:e4:8c:0b:cd:20:
e9:e5:b8:8e:81:81:3a:f2:eb:01:67:70:7c:ab:b3:60:e9:bf:
06:f7:59:0d:7a:bb:b2:c9:30:9a:2e:10:0e:ea:c6:e1:d0:5f:
e3:f7:0c:ed:db:19:f3:32:17:ae:25:21:81:ac:8f:3c:0e:79:
54:20:01:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:36 2025 by rpki-client