Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
File: MuFdOEw49IcrD_k1L_GcTW37ZMY.mft (raw, json)
Hash identifier: hWyt+oWofYjCcED6V792fktIsYv7lMdAcrJzpF0L5mk=
Subject key identifier: 99:D2:6A:09:BF:A6:F0:CD:87:92:5F:C1:62:2B:0E:F3:4F:33:71:D4
Authority key identifier: 32:E1:5D:38:4C:38:F4:87:2B:0F:F9:35:2F:F1:9C:4D:6D:FB:64:C6
Certificate issuer: /CN=32e15d384c38f4872b0ff9352ff19c4d6dfb64c6
Certificate serial: 019A70A57E876BE2478E8415DD0E0FB75096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
Manifest number: 0E30
Signing time: Tue 11 Nov 2025 02:01:25 +0000
Manifest this update: Tue 11 Nov 2025 02:01:25 +0000
Manifest next update: Wed 12 Nov 2025 02:01:25 +0000
Files and hashes: 1: MuFdOEw49IcrD_k1L_GcTW37ZMY.crl (hash: 5nc6OO+c3F03lToyezCIIBnA8HzHfLmMnqa3M0NiyXI=)
2: nLlnLzhBW0q3Q45Kky0hHNKYV40.roa (hash: RNNKG+Zuzj9PpdwsoSPFqXxYXZoCjXiQJtMmCaWRm20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:7e:87:6b:e2:47:8e:84:15:dd:0e:0f:b7:50:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32e15d384c38f4872b0ff9352ff19c4d6dfb64c6
Validity
Not Before: Nov 11 02:01:25 2025 GMT
Not After : Nov 12 02:01:25 2025 GMT
Subject: CN=99d26a09bfa6f0cd87925fc1622b0ef34f3371d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ac:8b:07:71:4f:d4:ee:18:18:f4:a8:72:ac:
69:3a:11:49:a6:9b:5a:dd:eb:73:1e:72:a6:86:80:
14:a1:27:38:04:1e:5e:7b:61:75:8e:a6:bd:43:6c:
81:2e:e1:bf:bb:bc:da:6b:90:23:1c:32:da:f9:df:
0a:c5:53:53:89:88:75:04:9b:03:ef:b3:16:0c:72:
3a:60:56:e3:10:6a:e2:fc:08:f4:09:e1:85:92:ee:
2a:42:d6:58:75:95:47:bb:35:11:1a:80:87:33:d7:
5d:af:60:30:17:32:89:7d:c3:5a:13:0d:b0:6b:23:
02:77:74:d2:4f:de:37:94:68:e6:af:42:15:5c:b9:
0c:f2:18:92:ca:66:8f:1e:a7:48:3d:0b:85:64:8c:
5d:d4:ed:46:f0:9f:54:8b:8e:23:71:55:71:e0:18:
ff:00:09:bb:54:7d:08:0d:9c:f7:46:73:2b:88:69:
9d:ec:96:b7:fc:81:d6:e1:8f:2f:8b:4d:42:d4:68:
e8:c2:a3:9c:45:ec:8a:71:99:5c:e8:0d:1f:01:cf:
c9:7f:5d:5a:aa:ec:23:b4:f9:81:b8:f8:f8:4b:c2:
76:aa:e5:9f:a2:46:d6:8d:9c:49:e9:ff:12:15:b0:
2b:fc:90:23:37:55:4c:63:c7:b7:23:04:bb:07:68:
64:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D2:6A:09:BF:A6:F0:CD:87:92:5F:C1:62:2B:0E:F3:4F:33:71:D4
X509v3 Authority Key Identifier:
keyid:32:E1:5D:38:4C:38:F4:87:2B:0F:F9:35:2F:F1:9C:4D:6D:FB:64:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:6b:f6:06:bd:3d:b5:04:ba:13:c4:cf:bf:62:d0:69:13:a1:
b0:83:e6:dd:8d:94:ee:a8:b4:f8:e1:99:65:e6:47:bf:f4:1b:
a3:e9:ca:2f:f4:96:54:52:c4:0d:af:67:76:19:77:73:24:f9:
ab:f1:14:e7:e1:db:49:2b:92:8a:a3:ad:11:31:dd:03:3f:3b:
6a:04:cc:8c:21:3b:d2:45:b8:2b:75:cc:49:b1:59:2d:00:c2:
40:e0:a9:3b:45:54:a2:25:86:65:70:d6:1f:74:37:76:49:af:
40:8e:e1:03:4a:70:4c:b1:b3:33:b6:f1:7f:ec:5e:ac:cf:ec:
14:1d:a1:8f:d5:e2:1c:d3:31:d5:0b:4b:48:80:38:d3:18:7a:
8b:9a:48:00:9a:c3:44:82:69:54:aa:1a:df:ef:80:0e:6c:f9:
58:66:9a:ce:24:41:93:a6:a1:38:d4:65:8b:a8:1c:e0:43:01:
ae:cd:72:47:0c:fe:81:bb:c3:70:15:5a:3b:2e:06:a9:75:ca:
e9:6b:54:7e:09:ac:15:3b:8c:f1:31:8f:49:df:d4:bf:72:bc:
3d:34:0e:3d:2f:c0:87:76:2a:14:47:75:6f:5a:2d:1b:8c:83:
fb:e6:3e:f5:03:a7:d6:c1:23:9b:df:e9:d0:3b:57:c5:78:e4:
b8:e2:f5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:02 2025 by rpki-client