Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
File: MusrUeN0jCUnQC5oYBqIkSiDoFg.mft (raw, json)
Hash identifier: NNczJfNL6lIa+haHId8rDE3/jbzqPF9v2EZa/o2qpZc=
Subject key identifier: 94:FC:D2:BA:DB:B2:54:81:E3:69:F9:2C:60:7F:83:3D:0F:B3:4C:30
Authority key identifier: 32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58
Certificate issuer: /CN=32eb2b51e3748c2527402e68601a88912883a058
Certificate serial: 019A71B79E57DEB1A640398101339DE49326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:00:50 +0000
Manifest this update: Tue 11 Nov 2025 07:00:50 +0000
Manifest next update: Wed 12 Nov 2025 07:00:50 +0000
Files and hashes: 1: KhlRzejfpvDxwhcPEcTkW8z6UJk.roa (hash: OH1bpS6azjDuSrz2eDsCxiLR1IWtc/vamDUbBv4QJmc=)
2: MusrUeN0jCUnQC5oYBqIkSiDoFg.crl (hash: Pf4ZL6+VTs4lDnGjIv0S6527ChXu1paOgBhtEaLKgXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:9e:57:de:b1:a6:40:39:81:01:33:9d:e4:93:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32eb2b51e3748c2527402e68601a88912883a058
Validity
Not Before: Nov 11 07:00:50 2025 GMT
Not After : Nov 12 07:00:50 2025 GMT
Subject: CN=94fcd2badbb25481e369f92c607f833d0fb34c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:45:36:6b:9f:04:73:00:3e:d7:1b:b2:ce:f9:
17:ff:3a:e4:f1:2f:ee:7e:bd:47:7f:60:81:94:2c:
80:db:08:2a:cb:52:eb:cf:e7:e0:c9:ec:09:cc:f5:
08:0d:f2:88:d3:64:d7:c5:10:63:87:a1:23:6e:4e:
4f:76:67:50:86:b3:91:5e:50:56:f9:2b:b6:a7:45:
2a:39:ae:cd:f3:e8:b6:e0:66:3a:1c:3b:05:94:ec:
44:1e:3e:e3:ed:5a:9e:7b:07:15:83:84:28:69:60:
68:87:d2:c3:e3:06:a0:21:ad:9d:1b:e0:f3:c2:75:
31:1e:73:c5:4a:c0:d2:16:86:7b:d1:43:0c:06:ef:
6c:69:7e:0d:54:73:dd:7f:85:bc:80:5b:d8:ad:f0:
a4:ad:46:19:58:c2:ab:bf:3c:d3:24:e0:7d:11:c1:
62:fb:20:11:e4:dc:49:99:e7:d6:76:1b:ef:a7:ed:
38:a5:18:5e:71:6f:ad:a0:95:bc:47:de:07:ac:c6:
bd:75:80:5f:82:9d:14:c7:36:83:e0:77:10:0c:58:
17:e5:41:0f:d0:35:04:15:d8:89:22:8f:70:e1:c0:
21:2f:4d:b1:93:2a:2f:ed:17:9c:59:c4:f5:b7:fb:
8a:f4:34:ef:1d:7c:e3:2b:31:84:fe:c3:c7:95:99:
6d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FC:D2:BA:DB:B2:54:81:E3:69:F9:2C:60:7F:83:3D:0F:B3:4C:30
X509v3 Authority Key Identifier:
keyid:32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:0b:02:89:8a:a3:11:7d:2e:63:52:66:6c:d3:c0:b7:be:b6:
ce:81:72:44:72:1a:d5:d8:37:ae:d2:06:49:11:dd:da:db:ee:
b2:24:10:c6:cb:4b:9d:8f:73:36:cf:0d:87:c6:af:b6:50:6f:
7c:f6:4f:a0:00:dc:17:70:41:23:08:11:97:52:15:4f:53:70:
7c:0d:83:53:d3:40:f5:76:e5:e2:4c:d3:9a:42:82:65:07:77:
15:4d:31:05:63:37:15:b6:51:4f:cc:72:77:b9:a5:9b:f4:9f:
37:27:84:66:33:d2:e0:67:1e:52:dd:7d:32:c9:b6:58:ca:03:
d5:2e:25:2e:a5:45:b8:ba:12:93:7b:58:a2:d5:58:68:8e:db:
1b:1e:33:ae:57:8d:17:60:58:4b:8b:13:d4:27:d5:ab:b8:59:
65:75:13:0c:c7:45:9b:37:98:a3:0e:75:2e:80:97:d0:ab:1f:
a1:a1:6b:40:c2:fa:22:1b:bc:33:0b:05:3e:85:1a:05:e3:29:
95:e5:2e:af:ee:bb:b9:7f:53:bd:09:b5:e4:f0:77:0b:2b:92:
a6:04:0a:5c:ce:9d:de:ca:67:61:f6:f5:e4:61:f3:8c:4c:91:
49:9f:0c:f6:a9:be:4b:32:d2:54:ec:ee:1e:52:53:7c:6f:3b:
5c:ca:0b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:52 2025 by rpki-client