Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
File: MuZYUVseanK5nzMmaeBp5hVPcN0.mft (raw, json)
Hash identifier: Cm+izSNn7n302W1N6aNIUYsZoeE51yf9zoT+6wEizM0=
Subject key identifier: 8C:D0:6D:30:79:03:67:FB:9A:B4:46:7D:27:AD:90:01:3A:DF:EB:46
Authority key identifier: 32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD
Certificate issuer: /CN=32e658515b1e6a72b99f332669e069e6154f70dd
Certificate serial: 019A24E61D452B617339893ECEA5EDDB4E24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
Manifest number: 11D1
Signing time: Mon 27 Oct 2025 09:00:51 +0000
Manifest this update: Mon 27 Oct 2025 09:00:51 +0000
Manifest next update: Tue 28 Oct 2025 09:00:51 +0000
Files and hashes: 1: IP2TA110bw-H4O1wamCYoNbCcjM.roa (hash: hPPZWdSxmIy27LNJGRF/m5E6I6iPJVLPz81w8YZa7M4=)
2: MuZYUVseanK5nzMmaeBp5hVPcN0.crl (hash: hbubtd5f0yEWqayRZ58wcmA7RuK/F5CLv66E4aLCG0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e6:1d:45:2b:61:73:39:89:3e:ce:a5:ed:db:4e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32e658515b1e6a72b99f332669e069e6154f70dd
Validity
Not Before: Oct 27 09:00:51 2025 GMT
Not After : Oct 28 09:00:51 2025 GMT
Subject: CN=8cd06d30790367fb9ab4467d27ad90013adfeb46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4f:4b:0f:f7:b0:78:54:93:c6:f4:bd:c5:86:
ce:6e:9d:a7:bf:02:10:56:4b:8c:fc:10:5f:ed:1e:
f7:e2:eb:73:59:d3:0f:d3:c5:cc:77:c2:eb:78:03:
1e:b2:a9:02:32:d1:20:f5:e5:b7:79:1d:b5:51:08:
95:e8:c5:ff:70:19:54:90:6f:b9:1c:24:9a:fe:6e:
2b:8a:c9:7b:ac:71:f5:13:4e:5f:7f:55:d8:0b:0f:
25:c7:f1:72:43:51:87:c5:2d:7d:74:e0:1d:b3:80:
70:6d:1f:27:e5:59:d9:6a:33:2b:3d:eb:e8:ae:99:
cc:f1:d7:45:07:7e:d0:97:7b:6a:96:ff:c9:fb:61:
d2:7f:9e:3d:26:f6:1f:d8:be:62:42:74:06:7c:bb:
ee:79:42:41:35:a1:34:9e:dc:d5:f7:0b:26:b0:cf:
80:93:c4:b0:27:4e:be:1d:46:55:00:41:44:d5:49:
39:ef:f2:da:fa:2b:71:7d:0e:28:8b:fa:07:64:d4:
8b:2c:54:cf:3e:8e:fc:cf:ff:3a:a9:cd:d0:8c:a8:
26:e5:07:ac:32:91:f6:23:20:f5:22:b3:0a:56:04:
07:98:9a:83:c7:51:b0:b4:ad:94:e2:8d:5a:32:42:
7d:62:d5:25:6b:8d:9f:4c:9f:75:92:a0:e3:ab:94:
25:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D0:6D:30:79:03:67:FB:9A:B4:46:7D:27:AD:90:01:3A:DF:EB:46
X509v3 Authority Key Identifier:
keyid:32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e0:eb:12:52:45:3b:dc:50:08:ee:f3:11:cc:3c:41:22:09:
c9:0c:15:db:da:f2:1a:09:fa:c4:10:8d:15:25:48:09:c6:40:
ea:ff:d9:2d:0b:10:d4:1f:56:fc:67:74:7f:99:d2:31:c8:3a:
c1:4e:ef:aa:36:9a:24:c2:ae:93:f8:5c:56:ec:41:31:05:67:
7e:24:ec:97:b4:81:2d:bc:6c:73:19:f5:7d:27:c4:13:89:ee:
59:3c:c6:8e:5d:5e:73:84:b7:2b:7e:1a:07:12:19:3c:23:0b:
a9:30:a4:28:b7:d1:a2:be:86:99:65:46:b1:70:49:87:20:c1:
63:2a:19:fa:b8:61:d4:1a:0e:f5:f7:6a:57:58:69:6b:c8:be:
2c:25:8a:d4:e9:bb:d9:cd:14:28:e2:c2:a5:bf:5d:7a:cd:0c:
ad:32:50:fa:da:85:0c:17:d0:7d:c3:6b:a2:26:70:72:c0:d1:
73:cd:55:9f:72:f1:9d:e8:dc:d0:02:f7:a1:21:79:b7:5c:50:
52:27:6b:7d:5c:f5:36:82:83:0a:61:97:5c:c2:55:ae:5c:53:
61:59:48:0e:7d:46:68:bc:7b:6d:d3:2c:24:73:28:00:1f:39:
69:1f:23:1a:c7:c3:f8:43:36:06:9b:fc:21:9b:9e:ec:42:cf:
88:9a:20:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZok5h1FK2FzOYk+zqXt204kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZTY1ODUxNWIxZTZhNzJiOTlmMzMyNjY5ZTA2OWU2MTU0
ZjcwZGQwHhcNMjUxMDI3MDkwMDUxWhcNMjUxMDI4MDkwMDUxWjAzMTEwLwYDVQQD
Eyg4Y2QwNmQzMDc5MDM2N2ZiOWFiNDQ2N2QyN2FkOTAwMTNhZGZlYjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU9LD/eweFSTxvS9xYbObp2nvwIQ
VkuM/BBf7R734utzWdMP08XMd8LreAMesqkCMtEg9eW3eR21UQiV6MX/cBlUkG+5
HCSa/m4risl7rHH1E05ff1XYCw8lx/FyQ1GHxS19dOAds4BwbR8n5VnZajMrPevo
rpnM8ddFB37Ql3tqlv/J+2HSf549JvYf2L5iQnQGfLvueUJBNaE0ntzV9wsmsM+A
k8SwJ06+HUZVAEFE1Uk57/La+itxfQ4oi/oHZNSLLFTPPo78z/86qc3QjKgm5Qes
MpH2IyD1IrMKVgQHmJqDx1GwtK2U4o1aMkJ9YtUla42fTJ91kqDjq5QlDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzQbTB5A2f7mrRGfSetkAE63+tGMB8GA1UdIwQY
MBaAFDLmWFFbHmpyuZ8zJmngaeYVT3DdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXVaWVVWc2Vhbks1bnpNbWFlQnA1aFZQY04wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9mNjljNDItNmY5ZC00OTBlLWIxMzIt
NjdmOGU3ZDExMzdjLzEvTXVaWVVWc2Vhbks1bnpNbWFlQnA1aFZQY04wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9mNjljNDItNmY5ZC00OTBlLWIxMzItNjdmOGU3ZDExMzdj
LzEvTXVaWVVWc2Vhbks1bnpNbWFlQnA1aFZQY04wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+DrElJF
O9xQCO7zEcw8QSIJyQwV29ryGgn6xBCNFSVICcZA6v/ZLQsQ1B9W/Gd0f5nSMcg6
wU7vqjaaJMKuk/hcVuxBMQVnfiTsl7SBLbxscxn1fSfEE4nuWTzGjl1ec4S3K34a
BxIZPCMLqTCkKLfRor6GmWVGsXBJhyDBYyoZ+rhh1BoO9fdqV1hpa8i+LCWK1Om7
2c0UKOLCpb9des0MrTJQ+tqFDBfQfcNroiZwcsDRc81Vn3Lxnejc0AL3oSF5t1xQ
UidrfVz1NoKDCmGXXMJVrlxTYVlIDn1GaLx7bdMsJHMoAB85aR8jGsfD+EM2Bpv8
IZue7ELPiJogIQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 12:42:42 2025 by rpki-client