Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
File: muOJscw5niFvztjTnsPuifwguDk.mft (raw, json)
Hash identifier: CmlSbqOyZiErmA4mxS/9HgPMKd3rLQb83AOeNVgy/hc=
Subject key identifier: 0C:CA:9A:36:35:B8:E9:9A:4D:72:3A:79:3B:61:99:B5:89:2F:16:70
Authority key identifier: 9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39
Certificate issuer: /CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839
Certificate serial: 0199D1DC2C552F490A089CEDF0CC66F7F29D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
Manifest number: 16CE
Signing time: Sat 11 Oct 2025 06:01:31 +0000
Manifest this update: Sat 11 Oct 2025 06:01:31 +0000
Manifest next update: Sun 12 Oct 2025 06:01:31 +0000
Files and hashes: 1: Q5quNHtUe1gA-TqHlWvHzX8gMwA.roa (hash: OcDB3dr6mB13HmStrHlq8aYMZtKWBgjyeIYXKmgVBnM=)
2: muOJscw5niFvztjTnsPuifwguDk.crl (hash: Wre4H1TutczfzCi15EjtFnjrOV3NAQO4xLJmf6H4PtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d1:dc:2c:55:2f:49:0a:08:9c:ed:f0:cc:66:f7:f2:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839
Validity
Not Before: Oct 11 06:01:31 2025 GMT
Not After : Oct 12 06:01:31 2025 GMT
Subject: CN=0cca9a3635b8e99a4d723a793b6199b5892f1670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:33:d4:69:c5:86:34:ad:23:f7:e0:36:c3:cc:
93:2a:95:c3:f7:5a:de:12:40:cd:c2:74:36:be:7a:
84:82:98:9c:43:fb:df:bf:0b:19:c6:81:03:e2:c5:
66:81:e1:55:d0:58:eb:4c:7f:0f:73:12:ec:98:41:
d1:58:b6:f4:68:e8:1c:6e:08:40:94:df:52:53:4b:
da:d7:4c:43:f6:58:72:06:d6:bf:ec:ff:ee:24:14:
9b:e0:be:8b:70:40:61:3c:04:62:c0:68:1a:e4:5b:
15:f8:40:0f:52:35:4e:58:50:ff:b8:5c:f4:6e:95:
4f:6f:9d:4a:16:de:04:0d:d6:b3:b5:a3:b0:60:49:
91:d1:95:6d:92:10:0b:39:b8:48:fd:83:72:a4:b2:
56:62:98:9e:73:93:11:be:be:5a:46:47:03:f4:6a:
68:6a:18:50:d0:e7:48:d9:23:e2:3a:ff:24:86:a5:
54:a5:97:52:b9:f7:0b:d9:66:41:89:56:78:b3:8c:
4c:f0:01:52:59:6f:a2:b0:e0:2b:9c:54:5c:3d:17:
34:39:2a:63:0a:ac:70:15:9e:0c:11:71:61:df:1b:
b8:4c:6b:5c:43:e7:7b:17:0e:25:c6:fc:dc:90:0e:
f8:7f:c5:78:ad:5a:1f:fd:5f:ba:62:db:25:8c:a6:
ff:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CA:9A:36:35:B8:E9:9A:4D:72:3A:79:3B:61:99:B5:89:2F:16:70
X509v3 Authority Key Identifier:
keyid:9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8a:d5:56:2a:af:4a:ce:d4:33:e8:dd:6b:0f:20:15:07:91:
31:e2:b8:44:7c:38:00:66:d8:1e:fb:ac:46:d7:2d:b0:3f:46:
9d:46:1b:58:29:68:02:9d:fb:b6:55:f8:0a:86:79:1d:44:d4:
57:8c:92:63:8d:e2:01:04:46:44:ef:7f:df:c4:dd:46:fd:93:
da:b9:94:eb:85:d6:25:5d:ca:04:93:35:13:18:13:de:97:53:
62:b3:60:34:d1:85:0e:7f:6b:e9:2f:2b:06:f9:7d:c0:4d:e2:
5a:03:07:f3:3b:84:dd:68:33:fa:ce:e0:c4:90:46:5f:2b:c4:
a7:e5:69:a0:eb:b4:d7:22:cf:5c:dd:f8:74:af:2b:2d:2a:f8:
f3:ec:41:14:7d:36:a9:a3:c0:87:d2:a4:94:54:84:01:b3:f5:
2a:0d:25:64:10:62:e3:82:06:18:cd:89:cf:30:f8:ec:3d:c5:
d3:bc:78:7a:43:7a:76:bc:33:2c:f4:bf:1d:79:9f:ca:90:9f:
85:b4:59:67:d6:bc:1e:10:81:ec:95:3c:84:5c:27:5f:9e:49:
64:6f:ea:f2:26:11:bf:04:71:e8:2e:60:3b:55:54:80:dc:46:
2c:a7:4c:05:a5:77:e4:30:21:ad:a3:ee:23:12:c3:e7:11:5c:
79:f1:21:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 09:46:32 2025 by rpki-client