Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
File: muOJscw5niFvztjTnsPuifwguDk.mft (raw, json)
Hash identifier: AIWS2uaCaQR+1cZuG3dVvRZsKV9TqPcHztxNz7RFL4o=
Subject key identifier: 3A:30:62:22:69:F7:C3:79:AE:8A:D0:27:FD:10:2F:EA:2D:88:7F:DC
Authority key identifier: 9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39
Certificate issuer: /CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839
Certificate serial: 0199FF594FC720EEF2FF0CF5573EE626D6BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 02:01:07 +0000
Manifest this update: Mon 20 Oct 2025 02:01:07 +0000
Manifest next update: Tue 21 Oct 2025 02:01:07 +0000
Files and hashes: 1: muOJscw5niFvztjTnsPuifwguDk.crl (hash: nIfCUv9nMWSVL/ld5jj/PGAHFC33IYzqFfcC3p9aW1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:4f:c7:20:ee:f2:ff:0c:f5:57:3e:e6:26:d6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839
Validity
Not Before: Oct 20 02:01:07 2025 GMT
Not After : Oct 21 02:01:07 2025 GMT
Subject: CN=3a30622269f7c379ae8ad027fd102fea2d887fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6c:b0:58:23:ea:2b:9d:c8:94:2b:59:de:3f:
18:1a:b8:60:02:bb:db:c4:56:0f:41:f5:e4:c2:01:
fd:70:c3:d8:1d:be:ce:14:4b:a0:0f:60:ac:ec:fe:
a7:2f:69:77:52:73:ae:ab:ca:8d:fd:f5:71:11:30:
07:31:e9:22:c6:ea:c1:65:74:a0:fb:ca:5f:51:97:
be:f6:bb:b7:bf:09:a1:c7:25:0d:37:26:9e:ed:4e:
1c:87:b0:16:85:39:a1:f8:12:56:65:89:52:62:d9:
59:34:ed:e8:39:4c:01:91:10:61:f4:96:9a:6d:5b:
1d:a7:d2:e1:4b:b7:4f:e4:5f:58:e2:42:83:6a:35:
5e:e8:39:7f:31:f5:82:d3:a9:f2:26:dd:d3:d5:ce:
fd:e7:d5:61:c5:b0:2a:a3:17:1b:84:25:85:31:1c:
2b:ce:df:4a:fe:c8:12:6f:02:c0:0d:31:d1:60:2b:
c7:aa:7f:ba:63:6c:e6:c7:ac:4b:36:bc:56:78:6b:
9a:80:28:b6:a9:65:7b:fe:05:19:a1:2e:e7:37:5f:
4e:19:5f:1d:4f:66:87:d4:83:8b:4f:49:b1:c3:ad:
f3:0a:90:2c:51:18:03:8e:c9:8f:3d:60:78:a8:44:
e0:1e:9f:60:ec:ba:16:c9:8f:e9:00:cd:62:47:ef:
33:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:30:62:22:69:F7:C3:79:AE:8A:D0:27:FD:10:2F:EA:2D:88:7F:DC
X509v3 Authority Key Identifier:
keyid:9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:20:4c:0a:70:ca:d4:f7:c2:5b:13:3c:77:d5:63:e9:9d:f2:
14:0c:7d:c9:62:1d:ed:9f:f3:61:b8:1f:92:bb:d4:7b:ca:75:
a3:44:ad:d3:ac:2d:39:89:5b:51:94:27:3b:5f:9f:e7:2f:95:
02:b3:f0:b4:52:99:8e:3a:bb:2e:07:bc:08:17:85:b7:de:57:
d8:b4:2c:d0:c0:83:fc:c4:fe:51:1b:25:03:20:e5:5b:bc:6a:
49:37:7d:3f:4c:23:af:81:cc:94:1c:f3:76:9b:27:5b:0a:31:
95:51:bf:8f:ac:06:bf:82:95:7e:ea:97:86:77:56:9c:eb:5e:
e0:38:57:b9:1f:1d:ad:29:1f:81:9f:a2:4f:8f:5d:9b:9a:22:
89:53:53:b1:d1:af:8b:52:41:bf:34:f5:86:09:84:50:7c:55:
55:57:fc:eb:df:b9:c1:87:96:f3:c9:f0:e3:d1:d0:53:88:5b:
a2:36:36:4e:bb:18:a5:48:e6:57:43:15:da:93:4e:c6:af:33:
1f:55:fc:73:cb:3a:a0:b2:55:e9:88:6a:dd:a6:a8:e4:cc:05:
6d:40:14:3c:e1:6c:6a:cf:33:83:70:f1:c6:63:d9:8b:24:11:
23:45:d9:4a:18:68:65:53:67:15:15:72:19:e1:d9:84:2f:db:
4b:ed:f1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:39:53 2025 by rpki-client