Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
File: muJTTfUJyW7LgRvIXXbWK6rfPSk.mft (raw, json)
Hash identifier: 0xU9QuXBAk9J3sAI0hWgEzT+hdPkpVNP0ntErdOPW0k=
Subject key identifier: 17:9E:15:D1:F1:2F:D4:32:5D:AF:2E:D1:2D:2F:CD:BE:50:1A:91:85
Authority key identifier: 9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29
Certificate issuer: /CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
Certificate serial: 019A725CBFE75FE22B5EA45A8F8DFC00DA5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
Manifest number: 0B41
Signing time: Tue 11 Nov 2025 10:01:12 +0000
Manifest this update: Tue 11 Nov 2025 10:01:12 +0000
Manifest next update: Wed 12 Nov 2025 10:01:12 +0000
Files and hashes: 1: SkEoFqWz8Nesa-6bLQGwcsWuCyc.roa (hash: YBTkqmp/iQfLCssDb/tS/QsoGIchXV4bMdX9APnUYwY=)
2: muJTTfUJyW7LgRvIXXbWK6rfPSk.crl (hash: Rk3FcFkerZeYEmjy5QWDYeCmqs3EG1FipilBRMaW2sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:bf:e7:5f:e2:2b:5e:a4:5a:8f:8d:fc:00:da:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
Validity
Not Before: Nov 11 10:01:12 2025 GMT
Not After : Nov 12 10:01:12 2025 GMT
Subject: CN=179e15d1f12fd4325daf2ed12d2fcdbe501a9185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:a8:fd:50:4b:00:1f:84:f8:d5:fe:cc:24:
14:87:23:8c:86:16:55:49:8e:b2:80:f0:61:5c:fc:
97:54:66:ca:6d:60:c9:d7:f3:39:9d:fc:fe:97:bc:
a7:aa:61:81:59:0f:6f:60:0f:7a:9a:06:40:29:d5:
ea:ce:85:98:19:9f:9d:aa:d8:83:9f:bc:6e:70:33:
a9:4a:a4:b6:d6:e0:4a:8c:24:c9:d7:12:2e:41:9e:
8d:6d:d7:81:d0:10:c0:62:8d:f4:ce:61:16:1c:11:
af:ba:5c:95:c6:f7:24:05:98:2c:32:0d:0a:43:e5:
0b:33:69:03:f0:b6:65:a6:ae:2f:cf:c2:cb:96:6f:
6c:24:d4:61:ac:31:f9:1b:19:db:b3:eb:11:91:b9:
14:46:d9:ea:ed:b0:e9:6d:de:03:fc:9a:22:18:4f:
9f:88:66:b3:a5:63:85:61:1c:10:02:9c:67:f3:0e:
73:fb:ff:36:7f:ef:df:1b:db:c1:5d:d0:bd:97:39:
26:a8:19:a1:42:da:f9:0b:a6:7f:79:d8:31:a0:93:
72:6c:10:a4:a8:5e:1e:1f:11:52:6e:ff:25:d2:f6:
4e:d0:58:7b:71:23:2e:bb:51:cd:f3:10:51:f1:fc:
32:74:f6:ab:8f:06:df:1d:04:8d:a8:a0:52:5d:6a:
33:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9E:15:D1:F1:2F:D4:32:5D:AF:2E:D1:2D:2F:CD:BE:50:1A:91:85
X509v3 Authority Key Identifier:
keyid:9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:40:03:ac:b8:40:8f:c7:3f:c3:57:42:76:27:83:3a:f9:49:
63:bd:2d:76:33:4c:d0:d9:5c:69:78:b3:d8:44:bf:0a:1e:e4:
51:4d:bc:a7:8a:11:00:a9:8b:78:7d:6c:b9:b8:90:7e:38:13:
ef:3a:52:3f:3d:f3:6c:e2:cd:ec:d1:cd:9b:a8:63:cf:1b:e4:
58:87:c9:f2:b7:79:d6:b2:5d:c4:84:fa:e9:61:4c:e3:8e:59:
82:ca:1b:68:46:4b:7a:ce:98:1a:8b:4b:5e:5e:9a:0f:ac:a6:
95:fd:08:66:24:e5:e2:1d:42:ae:fc:10:4c:3f:04:2d:b8:40:
06:f3:be:68:2a:fb:95:56:27:a7:4a:3a:69:0f:18:5c:df:d4:
a2:be:17:6e:2d:58:79:08:7d:35:39:f9:f8:d7:91:bf:a1:95:
85:0d:9d:40:df:1c:6d:1b:5b:9e:03:c4:4a:13:fe:04:0e:c9:
a9:12:ef:00:aa:ac:06:04:ef:9d:16:e6:fc:30:6c:57:48:64:
b2:86:05:01:40:60:15:08:5a:32:15:a8:48:b3:c8:7a:40:1e:
22:5f:7a:1c:4a:3c:a1:ba:81:99:4e:f6:dc:68:1c:26:20:75:
91:09:81:98:a9:10:e4:26:46:78:76:f5:c9:fb:2f:85:db:78:
46:15:b4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:50 2025 by rpki-client