Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
File: MuZYUVseanK5nzMmaeBp5hVPcN0.mft (raw, json)
Hash identifier: 7fDyMOg2D/6IcNWXyWQuVKMI0Scpo6RG5nHEsctBlqA=
Subject key identifier: 1D:B6:DE:19:1C:AE:99:21:CA:68:B1:61:77:B3:46:01:52:88:18:D8
Authority key identifier: 32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD
Certificate issuer: /CN=32e658515b1e6a72b99f332669e069e6154f70dd
Certificate serial: 019849D311D569726E5051969BB1DA0CC8F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
Manifest number: 10DB
Signing time: Sun 27 Jul 2025 03:00:25 +0000
Manifest this update: Sun 27 Jul 2025 03:00:25 +0000
Manifest next update: Mon 28 Jul 2025 03:00:25 +0000
Files and hashes: 1: IP2TA110bw-H4O1wamCYoNbCcjM.roa (hash: hPPZWdSxmIy27LNJGRF/m5E6I6iPJVLPz81w8YZa7M4=)
2: MuZYUVseanK5nzMmaeBp5hVPcN0.crl (hash: NqnhH/ciYt4K4PcOldCZujoHOk0eZSCwBiqUtWTnLNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:11:d5:69:72:6e:50:51:96:9b:b1:da:0c:c8:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32e658515b1e6a72b99f332669e069e6154f70dd
Validity
Not Before: Jul 27 03:00:25 2025 GMT
Not After : Jul 28 03:00:25 2025 GMT
Subject: CN=1db6de191cae9921ca68b16177b34601528818d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2a:a6:a2:0b:8b:32:81:e8:4a:47:09:0e:57:
6f:87:8a:5b:78:ac:97:be:b2:6d:7c:e6:7a:67:f6:
99:df:17:c2:c0:10:99:1a:1c:a4:14:b2:14:3f:0c:
1c:d2:26:9f:b4:5d:41:45:39:f4:bd:10:d6:35:34:
bc:2c:23:45:4b:a9:7f:05:3a:e1:79:7d:41:54:f5:
48:3c:96:0e:07:0e:ff:e4:9b:b1:64:d7:33:99:d4:
a2:ec:b4:d4:15:62:bd:fa:fc:82:bf:b2:bb:c5:6c:
b2:4e:b9:cd:c3:7a:73:d3:a7:63:fc:76:c5:2f:bd:
6d:da:dd:c4:61:ac:09:9d:ca:ca:c9:52:0e:ee:05:
03:de:d1:1e:78:79:f3:d4:fa:e7:41:3c:e0:6f:6f:
54:70:c1:02:50:e9:1a:3c:83:f4:2e:27:eb:ce:f9:
50:a3:ff:57:e4:4f:4a:08:19:80:0f:96:aa:d9:71:
8c:37:76:5e:e5:dc:c1:67:38:9a:d8:00:8e:f7:44:
c3:1a:22:00:fd:27:e2:71:5b:5c:c8:ed:80:20:3e:
82:7f:76:95:a4:2a:36:d4:5b:c9:02:93:60:b5:7f:
5e:ea:4e:01:bc:18:5f:93:35:68:34:d1:dc:a0:09:
fa:58:05:c4:27:d3:23:a1:57:b8:77:cf:ee:a2:e3:
ba:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B6:DE:19:1C:AE:99:21:CA:68:B1:61:77:B3:46:01:52:88:18:D8
X509v3 Authority Key Identifier:
keyid:32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:dd:96:d6:61:e2:9c:ea:f0:f3:73:6d:a7:df:26:85:5b:6e:
95:dd:91:85:fa:73:d9:92:e2:f4:29:80:69:f5:6c:67:24:f5:
96:ec:56:82:51:25:7d:c8:b8:a0:e4:bf:2b:56:09:62:c9:08:
0d:15:f1:5f:70:d3:e5:74:02:b1:6d:72:b3:91:69:3d:52:42:
69:d3:e3:4b:1b:2d:87:b4:a2:45:12:83:ac:91:24:40:98:d6:
34:d7:6f:8b:90:a4:88:48:26:3e:78:fd:d7:ce:65:d1:33:be:
c4:93:9d:75:f8:6f:3b:52:00:8b:5a:a4:fc:75:75:aa:99:b9:
14:74:49:31:e8:c3:6a:71:40:ea:0e:c9:8a:7e:c9:45:fa:3b:
a3:19:e3:cc:32:84:d2:ad:a7:b6:19:33:cb:97:38:1f:78:e0:
1f:17:3b:3a:5b:06:49:6f:f5:40:bc:00:14:fd:6a:af:1b:61:
e8:d6:87:ba:bf:44:0b:fe:e5:f9:5d:a9:d8:d8:94:4c:6e:30:
6d:4e:c4:bc:a1:af:76:3d:41:14:29:49:af:b1:e2:28:4d:93:
6a:65:2d:44:f8:3b:b0:87:51:30:50:a2:07:57:6a:0e:9d:fe:
b0:7e:22:7f:3d:cb:67:00:dc:78:9f:72:6e:fa:e9:f6:04:23:
5d:3e:2c:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ0xHVaXJuUFGWm7HaDMj3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZTY1ODUxNWIxZTZhNzJiOTlmMzMyNjY5ZTA2OWU2MTU0
ZjcwZGQwHhcNMjUwNzI3MDMwMDI1WhcNMjUwNzI4MDMwMDI1WjAzMTEwLwYDVQQD
EygxZGI2ZGUxOTFjYWU5OTIxY2E2OGIxNjE3N2IzNDYwMTUyODgxOGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CqmoguLMoHoSkcJDldvh4pbeKyX
vrJtfOZ6Z/aZ3xfCwBCZGhykFLIUPwwc0iaftF1BRTn0vRDWNTS8LCNFS6l/BTrh
eX1BVPVIPJYOBw7/5JuxZNczmdSi7LTUFWK9+vyCv7K7xWyyTrnNw3pz06dj/HbF
L71t2t3EYawJncrKyVIO7gUD3tEeeHnz1PrnQTzgb29UcMECUOkaPIP0LifrzvlQ
o/9X5E9KCBmAD5aq2XGMN3Ze5dzBZzia2ACO90TDGiIA/SficVtcyO2AID6Cf3aV
pCo21FvJApNgtX9e6k4BvBhfkzVoNNHcoAn6WAXEJ9MjoVe4d8/uouO6kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB223hkcrpkhymixYXezRgFSiBjYMB8GA1UdIwQY
MBaAFDLmWFFbHmpyuZ8zJmngaeYVT3DdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXVaWVVWc2Vhbks1bnpNbWFlQnA1aFZQY04wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9mNjljNDItNmY5ZC00OTBlLWIxMzIt
NjdmOGU3ZDExMzdjLzEvTXVaWVVWc2Vhbks1bnpNbWFlQnA1aFZQY04wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9mNjljNDItNmY5ZC00OTBlLWIxMzItNjdmOGU3ZDExMzdj
LzEvTXVaWVVWc2Vhbks1bnpNbWFlQnA1aFZQY04wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB92W1mHi
nOrw83Ntp98mhVtuld2Rhfpz2ZLi9CmAafVsZyT1luxWglElfci4oOS/K1YJYskI
DRXxX3DT5XQCsW1ys5FpPVJCadPjSxsth7SiRRKDrJEkQJjWNNdvi5CkiEgmPnj9
185l0TO+xJOddfhvO1IAi1qk/HV1qpm5FHRJMejDanFA6g7Jin7JRfo7oxnjzDKE
0q2nthkzy5c4H3jgHxc7OlsGSW/1QLwAFP1qrxth6NaHur9EC/7l+V2p2NiUTG4w
bU7EvKGvdj1BFClJr7HiKE2TamUtRPg7sIdRMFCiB1dqDp3+sH4ifz3LZwDceJ9y
bvrp9gQjXT4s1A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 11:55:53 2025 by rpki-client