Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
File: muB8lKimr3pdGPTqrqeeJt-TIhQ.mft (raw, json)
Hash identifier: H7FwBhVpvEftS8cr8YftMbnUfBMS9Wyx9QX2l7+NjZk=
Subject key identifier: 4F:EC:6D:E5:EE:EB:5A:AA:44:B3:FC:D0:71:26:9E:8E:BC:E4:17:6F
Authority key identifier: 9A:E0:7C:94:A8:A6:AF:7A:5D:18:F4:EA:AE:A7:9E:26:DF:93:22:14
Certificate issuer: /CN=9ae07c94a8a6af7a5d18f4eaaea79e26df932214
Certificate serial: 0198D698542A23A098FE4973BC84728374A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 11:02:43 +0000
Manifest this update: Sat 23 Aug 2025 11:02:43 +0000
Manifest next update: Sun 24 Aug 2025 11:02:43 +0000
Files and hashes: 1: hirmv4l90daqtziUonbqzbb8z94.roa (hash: 2pWfc5u+sM7C4s4+z6TKeGnl46lQEVqcp+2HcKGG7wg=)
2: muB8lKimr3pdGPTqrqeeJt-TIhQ.crl (hash: 2naZ3uCKDGcnnPjsQJMesR/MI1LRHDhwJ+a1/vifNMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:54:2a:23:a0:98:fe:49:73:bc:84:72:83:74:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae07c94a8a6af7a5d18f4eaaea79e26df932214
Validity
Not Before: Aug 23 11:02:43 2025 GMT
Not After : Aug 24 11:02:43 2025 GMT
Subject: CN=4fec6de5eeeb5aaa44b3fcd071269e8ebce4176f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7e:05:fb:ee:b8:0f:11:ee:f5:10:5c:eb:00:
d0:ea:f7:0d:7c:49:fb:f7:fa:02:ad:c6:60:02:d8:
c0:0e:30:a1:49:4c:ba:e2:b6:d7:e7:21:fc:31:cc:
eb:e8:53:cb:00:57:e0:4a:0f:a9:03:68:8f:8b:aa:
50:8f:f1:ca:83:68:c3:38:6d:ea:91:7c:12:54:2f:
78:02:76:ec:39:43:5c:58:1a:76:c8:25:5f:0e:a8:
41:46:04:64:93:07:40:23:84:62:81:67:af:4a:ee:
16:86:1a:bf:2c:69:ef:33:af:a6:1a:85:a8:8a:af:
c2:31:26:a2:b2:6e:88:57:dd:d6:fd:51:8f:63:d9:
9e:b2:b0:37:eb:0d:d2:e7:90:74:32:d9:08:6e:ec:
65:a8:0e:21:b8:b7:01:d7:9d:df:ab:42:61:73:45:
06:2a:cf:96:89:0d:db:af:d4:6f:5a:0f:77:2a:bd:
7b:35:36:e9:ea:9f:37:da:7f:ce:25:37:b3:aa:44:
50:fb:e8:ec:54:ef:e6:e2:05:f4:7c:aa:f1:7f:08:
ba:4b:27:37:c5:ea:90:8f:f7:88:7f:9e:7d:12:47:
cd:3d:41:ae:07:ac:3c:a8:72:fa:f7:83:45:4e:d3:
e2:6f:a4:cc:83:27:3b:03:c6:78:91:1f:e6:ae:8f:
fe:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EC:6D:E5:EE:EB:5A:AA:44:B3:FC:D0:71:26:9E:8E:BC:E4:17:6F
X509v3 Authority Key Identifier:
keyid:9A:E0:7C:94:A8:A6:AF:7A:5D:18:F4:EA:AE:A7:9E:26:DF:93:22:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:66:ec:33:d0:11:68:cb:17:3a:8a:cd:98:65:b3:6a:7f:f9:
8a:c6:e3:9c:ba:75:40:29:b2:d0:bf:0f:c0:e7:0b:89:34:4b:
3d:a9:c7:90:1b:92:7c:57:66:02:bd:d9:da:3e:27:ca:fd:f4:
95:92:bf:38:70:27:e9:23:f1:ac:3b:f4:32:c7:d8:26:9e:24:
db:0c:07:81:9d:52:18:7f:1f:2f:ac:58:9c:b7:c4:62:30:26:
da:a6:c3:50:92:b7:ba:df:00:08:68:e2:08:87:1c:bd:81:c0:
b8:76:a7:f0:21:c9:2c:88:6f:06:9f:48:e2:d9:22:a2:49:c9:
f2:10:82:01:ac:a6:ad:74:9a:cb:3e:83:35:cf:83:09:65:f7:
ea:29:bd:d9:2b:86:0e:53:1a:80:c8:30:49:f0:7a:07:9b:e3:
49:bf:3d:2d:05:34:7e:71:47:e3:6f:61:9d:32:66:e3:20:7e:
4c:0d:a2:51:4b:10:6e:c5:77:4c:18:e9:b9:75:43:ed:3a:f0:
8f:a8:bb:82:ac:b9:47:b0:15:56:74:f2:52:3a:b2:41:4c:a7:
d0:87:d3:35:87:ae:59:47:d4:0e:ee:1f:b2:1e:ca:5d:02:55:
fb:83:34:ac:0c:1f:07:56:de:0b:60:c5:78:b2:8f:8a:1b:cf:
eb:60:94:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:14:37 2025 by rpki-client