
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
File: kMuqazbmzWh0x47UWk-N1xcwMdk.mft (raw, json)
Hash identifier: wC9Hi9PcacoVioX5V2meC1MiX0MCON/T72UlD0ircYs=
Subject key identifier: 8D:39:85:66:1A:85:B6:A4:FB:93:DA:71:0D:A1:9E:5A:65:4C:55:91
Authority key identifier: 90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9
Certificate issuer: /CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
Certificate serial: 0198537AB6DCBB39A449CB2D96344706AFC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
Manifest number: 0B77
Signing time: Tue 29 Jul 2025 00:00:07 +0000
Manifest this update: Tue 29 Jul 2025 00:00:07 +0000
Manifest next update: Wed 30 Jul 2025 00:00:07 +0000
Files and hashes: 1: c4U2evb93678CsrZ2ZQQemAPoFw.roa (hash: 5ZLOIZ+BzX8i3ipSMR9csvqZ6+nojKYy3y5RkNukgEE=)
2: kMuqazbmzWh0x47UWk-N1xcwMdk.crl (hash: 6nXHmCQyJAh9XrF0rDts0iIhdcDK58YtYc6lgfbwpXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7a:b6:dc:bb:39:a4:49:cb:2d:96:34:47:06:af:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
Validity
Not Before: Jul 29 00:00:07 2025 GMT
Not After : Jul 30 00:00:07 2025 GMT
Subject: CN=8d3985661a85b6a4fb93da710da19e5a654c5591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2a:87:29:98:32:43:fd:18:03:f3:7a:f4:38:
c9:ea:84:fd:cd:41:e1:2a:2b:95:dd:44:59:a3:32:
5a:80:9a:39:f4:ad:28:a4:e4:54:a8:68:9f:ca:01:
43:b0:bb:a2:65:4a:5b:aa:48:1d:47:38:cb:49:74:
2f:f6:a9:0e:e9:51:b3:7f:a7:1e:a1:bb:78:6c:d5:
8d:78:06:ca:15:92:2a:ae:b4:eb:cd:39:ec:cc:37:
0c:c0:63:58:5b:9c:44:1f:3c:ab:55:d6:f2:d3:7d:
16:50:bc:72:0e:3d:0c:03:64:2f:5d:50:95:5b:1a:
cd:20:1e:f0:47:5f:7f:8d:7e:ac:a5:64:ad:27:0b:
02:7e:3f:94:e3:d2:34:ec:2f:a7:11:88:e2:aa:2b:
04:b6:e3:c5:a7:d4:1c:a2:0f:7f:be:5a:a3:b0:be:
61:b9:8f:d1:65:85:50:cc:98:bb:e1:63:68:25:d7:
c4:02:9e:9e:da:95:69:ea:16:c6:83:6a:de:77:fd:
59:2d:0a:0c:35:e1:97:b6:56:3c:c4:4a:5b:b0:34:
0f:e9:b1:53:d9:9c:47:fb:5d:10:10:61:41:d6:bd:
82:d1:81:39:d0:9f:dd:98:23:2a:4d:02:6b:ef:12:
61:4c:7d:d6:9e:3a:98:7d:df:72:18:7b:8d:a2:16:
1f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:39:85:66:1A:85:B6:A4:FB:93:DA:71:0D:A1:9E:5A:65:4C:55:91
X509v3 Authority Key Identifier:
keyid:90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b9:0b:46:8a:f4:88:b5:ef:f1:bc:90:a0:d1:fe:e0:d2:ee:
84:21:ab:37:98:20:ec:22:58:db:92:55:0b:46:6b:58:a9:61:
5f:d7:61:67:60:4d:a5:ea:f9:4a:93:a8:d6:e9:74:a1:2a:d8:
9f:f4:f1:54:02:c7:cc:bc:8e:f8:a5:e6:28:18:47:ae:ad:24:
87:f4:ba:8a:02:0f:fb:eb:51:34:dc:6a:7a:f7:04:29:ae:59:
56:9d:ca:21:e6:f2:74:e2:e7:4f:f0:af:b8:8d:7d:e6:60:39:
f6:88:9a:bc:93:30:b9:56:b3:3d:a2:79:e0:27:0f:14:d6:9a:
35:06:74:35:34:4b:94:67:91:76:4e:24:27:8e:77:5b:fd:d7:
4a:f6:18:63:59:3a:7c:57:5f:62:57:0c:4f:f2:94:62:6c:c7:
7d:b8:aa:cb:e4:8e:d5:93:fa:9f:63:1b:a7:60:2f:32:3d:27:
e3:03:cf:77:68:fa:cb:ec:4a:85:33:88:4d:e1:e1:2f:51:2e:
c2:05:4c:8d:7e:1f:70:99:9e:3c:2b:28:d1:83:3e:a1:46:a1:
0a:90:99:76:af:e0:df:3c:7f:3c:d8:08:0e:b9:b9:36:4d:9d:
5d:62:37:89:ac:cc:03:a7:85:90:49:74:e8:b9:87:a8:51:82:
58:2e:a0:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTerbcuzmkScstljRHBq/BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwY2JhYTZiMzZlNmNkNjg3NGM3OGVkNDVhNGY4ZGQ3MTcz
MDMxZDkwHhcNMjUwNzI5MDAwMDA3WhcNMjUwNzMwMDAwMDA3WjAzMTEwLwYDVQQD
Eyg4ZDM5ODU2NjFhODViNmE0ZmI5M2RhNzEwZGExOWU1YTY1NGM1NTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yqHKZgyQ/0YA/N69DjJ6oT9zUHh
KiuV3URZozJagJo59K0opORUqGifygFDsLuiZUpbqkgdRzjLSXQv9qkO6VGzf6ce
obt4bNWNeAbKFZIqrrTrzTnszDcMwGNYW5xEHzyrVdby030WULxyDj0MA2QvXVCV
WxrNIB7wR19/jX6spWStJwsCfj+U49I07C+nEYjiqisEtuPFp9Qcog9/vlqjsL5h
uY/RZYVQzJi74WNoJdfEAp6e2pVp6hbGg2red/1ZLQoMNeGXtlY8xEpbsDQP6bFT
2ZxH+10QEGFB1r2C0YE50J/dmCMqTQJr7xJhTH3WnjqYfd9yGHuNohYfpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI05hWYahbak+5PacQ2hnlplTFWRMB8GA1UdIwQY
MBaAFJDLqms25s1odMeO1FpPjdcXMDHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva011cWF6Ym16V2gweDQ3VVdrLU4xeGN3TWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8wNmNhNWQtZDBjNC00MjE1LTg5Njgt
YjZkNGM0ZmMwYzIxLzEva011cWF6Ym16V2gweDQ3VVdrLU4xeGN3TWRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8wNmNhNWQtZDBjNC00MjE1LTg5NjgtYjZkNGM0ZmMwYzIx
LzEva011cWF6Ym16V2gweDQ3VVdrLU4xeGN3TWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIrkLRor0
iLXv8byQoNH+4NLuhCGrN5gg7CJY25JVC0ZrWKlhX9dhZ2BNper5SpOo1ul0oSrY
n/TxVALHzLyO+KXmKBhHrq0kh/S6igIP++tRNNxqevcEKa5ZVp3KIebydOLnT/Cv
uI195mA59oiavJMwuVazPaJ54CcPFNaaNQZ0NTRLlGeRdk4kJ453W/3XSvYYY1k6
fFdfYlcMT/KUYmzHfbiqy+SO1ZP6n2Mbp2AvMj0n4wPPd2j6y+xKhTOITeHhL1Eu
wgVMjX4fcJmePCso0YM+oUahCpCZdq/g3zx/PNgIDrm5Nk2dXWI3iazMA6eFkEl0
6LmHqFGCWC6gaw==
-----END CERTIFICATE-----
Generated at Tue Jul 29 03:53:25 2025 by rpki-client