Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
File: 1-muQgEgTpldoh5it3nvb0ObQ5T4.mft (raw, json)
Hash identifier: yWhzLbOJarCxZXid68uMO7FJOJJI+Q5BWMohrR2vuBM=
Subject key identifier: 03:62:73:A5:0E:9B:FB:89:45:8D:9F:26:12:B4:18:FF:7D:C9:42:6C
Authority key identifier: FA:6B:90:80:48:13:A6:57:68:87:98:AD:DE:7B:DB:D0:E6:D0:E5:3E
Certificate issuer: /CN=fa6b90804813a657688798adde7bdbd0e6d0e53e
Certificate serial: 0198488961906C366B19A1C2A34E9BD25273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
Manifest number: 0525
Signing time: Sat 26 Jul 2025 21:00:19 +0000
Manifest this update: Sat 26 Jul 2025 21:00:19 +0000
Manifest next update: Sun 27 Jul 2025 21:00:19 +0000
Files and hashes: 1: 1-muQgEgTpldoh5it3nvb0ObQ5T4.crl (hash: D0sAQD2NaF9Q4vOOM6Az9YR4YeNScxGhHDQ21+XzGw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:61:90:6c:36:6b:19:a1:c2:a3:4e:9b:d2:52:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa6b90804813a657688798adde7bdbd0e6d0e53e
Validity
Not Before: Jul 26 21:00:19 2025 GMT
Not After : Jul 27 21:00:19 2025 GMT
Subject: CN=036273a50e9bfb89458d9f2612b418ff7dc9426c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:51:9a:f0:d2:93:41:17:26:46:54:a8:a5:5c:
e5:6a:23:12:e8:5c:30:26:17:0b:1e:7f:c5:29:0a:
26:34:ab:2a:30:d8:bc:08:bd:d6:89:51:db:88:7f:
e1:0e:85:3e:3b:f0:a0:13:53:7b:34:a2:e5:40:54:
52:e1:8b:68:9e:9d:93:c3:97:d4:b3:94:32:2a:98:
86:b3:9a:03:ea:8c:4d:c9:a7:15:0a:0f:6c:57:ae:
bd:a8:ad:cf:4c:5b:b7:91:08:d5:61:57:d2:9f:45:
50:52:5f:19:3f:8c:f8:21:d7:32:df:07:27:f0:38:
09:e8:dc:22:75:61:a5:1a:88:fd:6c:a1:db:7b:4c:
1d:9e:64:fd:44:20:b2:68:a4:16:81:7b:bf:3a:b3:
08:2f:12:8d:bf:c7:6b:4c:9b:c1:f7:de:ec:1c:3e:
14:cf:4e:5c:ff:20:06:24:fd:1f:84:eb:47:f6:27:
11:ca:28:0b:2c:63:9e:88:58:16:f4:49:cc:52:5d:
76:4a:79:1b:94:8a:5d:bc:d9:db:86:77:5e:4b:32:
b6:5b:c0:3e:2b:49:22:fa:ff:69:91:9c:83:67:aa:
e0:1b:00:2f:2e:9d:b6:b8:d5:4e:e3:ed:b6:76:99:
82:a5:f7:3a:78:f0:97:6a:5f:3e:a5:c9:c1:4f:8e:
67:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:62:73:A5:0E:9B:FB:89:45:8D:9F:26:12:B4:18:FF:7D:C9:42:6C
X509v3 Authority Key Identifier:
keyid:FA:6B:90:80:48:13:A6:57:68:87:98:AD:DE:7B:DB:D0:E6:D0:E5:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a2:b4:f0:ae:22:6a:bb:84:bd:0b:de:e0:70:ad:06:c5:02:
53:cd:dd:51:9c:76:01:0a:fe:47:6e:ca:83:2d:01:6e:19:9b:
d4:4d:38:4f:eb:0a:c2:b6:c6:58:62:c8:1b:4c:84:12:45:f7:
b6:6e:43:d7:05:8c:4b:e2:d2:db:c5:ac:19:f3:98:20:b7:a1:
0b:59:2b:ef:4e:37:0f:48:af:ff:f7:51:31:0b:57:81:ec:24:
f7:fb:2d:14:fd:5a:4a:c1:56:9d:b1:89:ec:d9:b0:a5:eb:54:
30:a0:55:81:ec:c1:a7:dc:bd:c4:4b:a2:8c:1b:df:4f:8a:18:
1c:b6:48:0b:14:87:5e:3a:73:ab:46:24:c5:6c:f4:95:f5:47:
01:39:10:9b:43:82:b8:e5:c5:76:00:ca:dd:8a:af:76:47:18:
c7:5d:86:e4:22:f1:60:41:84:b1:15:13:c4:d3:6f:d0:6a:ae:
db:9c:36:76:d8:57:80:99:bd:80:07:5c:f1:0f:d0:45:90:b5:
61:1a:dc:92:0a:bb:fd:ed:12:c3:17:68:a8:66:cd:25:d9:ee:
24:51:51:12:35:2b:57:fa:d7:29:1e:b4:1c:8a:f7:d5:51:54:
04:b4:b8:e6:18:8f:8c:5a:59:2f:90:4b:64:89:48:0b:4b:43:
53:3a:04:ae
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZhIiWGQbDZrGaHCo06b0lJzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNmI5MDgwNDgxM2E2NTc2ODg3OThhZGRlN2JkYmQwZTZk
MGU1M2UwHhcNMjUwNzI2MjEwMDE5WhcNMjUwNzI3MjEwMDE5WjAzMTEwLwYDVQQD
EygwMzYyNzNhNTBlOWJmYjg5NDU4ZDlmMjYxMmI0MThmZjdkYzk0MjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1Ga8NKTQRcmRlSopVzlaiMS6Fww
JhcLHn/FKQomNKsqMNi8CL3WiVHbiH/hDoU+O/CgE1N7NKLlQFRS4Ytonp2Tw5fU
s5QyKpiGs5oD6oxNyacVCg9sV669qK3PTFu3kQjVYVfSn0VQUl8ZP4z4Idcy3wcn
8DgJ6NwidWGlGoj9bKHbe0wdnmT9RCCyaKQWgXu/OrMILxKNv8drTJvB997sHD4U
z05c/yAGJP0fhOtH9icRyigLLGOeiFgW9EnMUl12SnkblIpdvNnbhndeSzK2W8A+
K0ki+v9pkZyDZ6rgGwAvLp22uNVO4+22dpmCpfc6ePCXal8+pcnBT45nHwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFANic6UOm/uJRY2fJhK0GP99yUJsMB8GA1UdIwQY
MBaAFPprkIBIE6ZXaIeYrd5729Dm0OU+MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1tdVFnRWdUcGxkb2g1aXQzbnZiME9iUTVUNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvYTllM2RiLTIyNmQtNDFlMi1iZTA5
LThkN2Q0YWZmYjU5Zi8xLzEtbXVRZ0VnVHBsZG9oNWl0M252YjBPYlE1VDQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Y2L2E5ZTNkYi0yMjZkLTQxZTItYmUwOS04ZDdkNGFmZmI1
OWYvMS8xLW11UWdFZ1RwbGRvaDVpdDNudmIwT2JRNVQ0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApaK0
8K4iaruEvQve4HCtBsUCU83dUZx2AQr+R27Kgy0Bbhmb1E04T+sKwrbGWGLIG0yE
EkX3tm5D1wWMS+LS28WsGfOYILehC1kr7043D0iv//dRMQtXgewk9/stFP1aSsFW
nbGJ7NmwpetUMKBVgezBp9y9xEuijBvfT4oYHLZICxSHXjpzq0YkxWz0lfVHATkQ
m0OCuOXFdgDK3YqvdkcYx12G5CLxYEGEsRUTxNNv0Gqu25w2dthXgJm9gAdc8Q/Q
RZC1YRrckgq7/e0SwxdoqGbNJdnuJFFREjUrV/rXKR60HIr31VFUBLS45hiPjFpZ
L5BLZIlIC0tDUzoErg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:09:26 2025 by rpki-client