Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
File: muJTTfUJyW7LgRvIXXbWK6rfPSk.mft (raw, json)
Hash identifier: dEIMUT8YRSt6z7F7cvX9sgXvdDZVjGKTCPquQi9xqJM=
Subject key identifier: D2:0A:04:C7:CA:F4:09:3F:46:EC:38:97:44:83:E9:3B:B3:36:D0:B7
Authority key identifier: 9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29
Certificate issuer: /CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
Certificate serial: 01992255C4BD79507ED44662B0A4F44D9E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
Manifest number: 0A93
Signing time: Sun 07 Sep 2025 04:01:10 +0000
Manifest this update: Sun 07 Sep 2025 04:01:10 +0000
Manifest next update: Mon 08 Sep 2025 04:01:10 +0000
Files and hashes: 1: SkEoFqWz8Nesa-6bLQGwcsWuCyc.roa (hash: YBTkqmp/iQfLCssDb/tS/QsoGIchXV4bMdX9APnUYwY=)
2: muJTTfUJyW7LgRvIXXbWK6rfPSk.crl (hash: BNpdJfQwvMk5I+LUItmTRHXK0DQ2iPI31kY84H1KE54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:c4:bd:79:50:7e:d4:46:62:b0:a4:f4:4d:9e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
Validity
Not Before: Sep 7 04:01:10 2025 GMT
Not After : Sep 8 04:01:10 2025 GMT
Subject: CN=d20a04c7caf4093f46ec38974483e93bb336d0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6a:29:96:31:20:26:fa:7d:1b:44:06:b9:4b:
82:27:d4:2a:ca:e1:ac:e7:ad:f2:e8:ff:1c:b1:00:
91:7c:5e:a5:b5:fa:fd:8b:41:37:ea:22:fe:38:3d:
8e:a6:2d:cb:fc:97:73:f6:30:1b:fe:4a:3a:38:5a:
40:37:34:34:43:d8:0d:fb:64:81:5b:e1:2a:29:a4:
4a:34:46:e4:09:8b:68:4e:9c:2e:b6:0f:e9:c7:4d:
e4:32:af:38:ab:88:93:ae:57:89:02:eb:37:da:4e:
2c:dc:ae:bf:6a:fa:53:3b:23:63:ac:0f:16:60:96:
54:97:c6:36:f5:a7:ce:2d:04:88:bf:09:6d:d7:68:
90:7d:06:6b:63:08:db:0b:f0:f8:81:d0:01:29:d6:
eb:9f:8f:28:74:bd:8a:e7:73:62:92:34:b1:40:f8:
5f:95:28:fd:3d:8f:98:47:95:fb:91:be:31:d5:98:
7f:5f:42:fb:c6:02:64:bc:34:6f:2a:75:98:e2:91:
ea:3c:73:c3:96:e0:bf:be:2f:74:86:36:61:bc:17:
b8:fe:3e:11:a9:63:10:35:da:cc:4b:02:70:b4:32:
40:28:66:a2:4c:8a:bb:08:db:42:82:ff:7d:63:fb:
2c:79:95:b5:84:ce:9a:05:44:84:c9:5a:a4:e8:3d:
30:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0A:04:C7:CA:F4:09:3F:46:EC:38:97:44:83:E9:3B:B3:36:D0:B7
X509v3 Authority Key Identifier:
keyid:9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:dd:1b:69:66:5f:94:6d:d6:5f:9a:ee:33:98:26:ff:16:7e:
c9:ff:b6:85:33:79:70:a2:20:be:fb:e8:c0:d3:69:36:e1:6c:
96:35:71:5f:d8:d6:6d:a7:03:05:1e:f3:1a:3e:af:66:58:7d:
80:e7:7b:87:4b:a8:d8:14:3c:e4:93:38:d5:dd:54:8b:d9:fd:
dc:3f:95:40:8f:51:b2:06:01:08:7d:ad:ca:31:fe:5a:7c:b6:
ea:47:e4:bf:5e:0a:84:12:f6:27:e7:f1:d7:a9:14:8a:52:bb:
78:1d:90:b1:09:37:78:0e:81:2e:93:31:7a:80:c0:8d:8f:9f:
8b:ba:b7:8a:18:c7:be:d3:53:ed:2f:0f:8e:04:44:5e:8f:23:
31:1d:20:ec:07:e4:4f:42:9d:dd:b2:1f:40:ed:f4:76:21:6d:
ee:68:67:d8:c0:5f:f9:98:a2:e6:b4:cb:83:2a:14:73:0d:c9:
1a:13:bc:8c:88:6c:20:df:19:c3:cf:cc:99:07:6c:84:cc:3c:
9a:12:28:16:01:d1:49:44:7e:0a:46:27:78:54:f5:5d:17:78:
60:e0:84:d0:57:fe:73:5c:95:e2:d8:17:f6:b2:43:38:14:3f:
b2:a3:c5:2e:ac:84:20:eb:a4:ef:9b:9b:c6:50:f8:f1:d7:5d:
f1:da:03:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:21 2025 by rpki-client