Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
File: MusrUeN0jCUnQC5oYBqIkSiDoFg.mft (raw, json)
Hash identifier: 1SsbpcTFFBESK+PmMJSYKyoKVodfRpk7r7NHsgv6Hi8=
Subject key identifier: D3:45:09:AA:4A:61:7A:89:DA:8A:E4:4A:04:71:05:D2:3C:03:B9:E4
Authority key identifier: 32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58
Certificate issuer: /CN=32eb2b51e3748c2527402e68601a88912883a058
Certificate serial: 0199FDD9DCF7F8E93E99338F26C25FC8A039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:02:17 +0000
Manifest this update: Sun 19 Oct 2025 19:02:17 +0000
Manifest next update: Mon 20 Oct 2025 19:02:17 +0000
Files and hashes: 1: KhlRzejfpvDxwhcPEcTkW8z6UJk.roa (hash: OH1bpS6azjDuSrz2eDsCxiLR1IWtc/vamDUbBv4QJmc=)
2: MusrUeN0jCUnQC5oYBqIkSiDoFg.crl (hash: yNTnieObOI6m/LCI0MS4puUEVgsfKBamR0rjfSkEjpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:dc:f7:f8:e9:3e:99:33:8f:26:c2:5f:c8:a0:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32eb2b51e3748c2527402e68601a88912883a058
Validity
Not Before: Oct 19 19:02:17 2025 GMT
Not After : Oct 20 19:02:17 2025 GMT
Subject: CN=d34509aa4a617a89da8ae44a047105d23c03b9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3d:4c:f6:df:89:62:2d:80:f4:d2:f4:f7:a7:
38:8c:13:39:5e:15:ed:95:c0:b2:34:5f:a2:fb:a8:
a3:5a:68:5d:4c:8d:b9:85:d9:a9:c1:e1:6e:36:4f:
9a:18:f1:a7:9e:53:6e:94:b2:a1:4e:7d:d7:ea:5e:
1d:52:03:f6:c2:f1:7b:34:21:24:e8:49:da:da:0e:
9b:e7:be:8b:e7:51:6f:9f:b0:5f:e7:b6:30:d3:33:
53:92:98:25:e6:96:e0:f2:59:ce:05:4d:c5:c7:3e:
85:dc:47:6d:31:2c:ca:7d:24:80:d5:d4:4a:41:a3:
c2:33:cd:ca:a1:a0:f2:0d:33:d5:ad:8f:87:33:79:
af:22:bb:71:90:26:98:45:63:d2:e0:db:5b:0d:a7:
ec:a8:89:f2:7e:47:27:fd:00:5d:68:9c:7a:8e:30:
34:af:86:46:b6:af:42:c7:da:82:24:a1:71:34:ce:
82:33:c0:75:69:62:b1:58:b3:13:f7:eb:75:70:40:
5f:92:a9:bf:8b:20:42:3c:fd:6d:69:a5:5b:ac:fc:
2b:23:74:fd:2f:62:c9:7f:b5:db:a7:b0:18:d6:9f:
16:ff:e5:74:9e:54:4e:1b:a4:2f:71:3f:79:91:72:
63:e2:03:85:f6:2f:3c:d6:91:fc:4f:3c:19:57:d8:
e2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:45:09:AA:4A:61:7A:89:DA:8A:E4:4A:04:71:05:D2:3C:03:B9:E4
X509v3 Authority Key Identifier:
keyid:32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:75:f8:a9:87:c9:09:fb:f3:c2:96:d7:7a:cd:66:97:0b:d4:
d0:9a:07:68:30:c1:af:a4:52:21:8d:59:5a:42:e7:62:b8:ed:
94:94:84:80:0a:6a:49:62:68:f3:26:79:16:65:1b:cc:eb:ff:
d8:ff:3f:d4:ff:a1:12:0a:89:07:1e:79:28:64:29:39:37:7a:
c6:b3:13:ac:a3:a4:07:eb:3e:21:28:23:3d:0f:7c:be:3d:ae:
0f:ee:08:d1:ba:bc:ab:8d:2d:0d:99:f0:fe:87:b6:ea:e2:09:
42:dc:23:ab:6d:cf:3d:87:b2:d1:c6:40:d6:d8:99:61:26:ed:
16:cd:62:66:f4:f5:e9:7c:f0:fc:a2:53:12:05:12:a6:cb:2d:
b0:2e:1d:c8:df:c9:47:bc:22:03:00:03:0a:c3:46:88:33:f0:
3f:48:a8:27:30:f5:e3:38:1c:ef:a6:a4:b7:38:42:54:d4:20:
9b:ff:4c:42:53:42:60:17:6a:ee:25:a1:7a:5e:a6:82:41:17:
e7:fa:01:b5:1d:74:af:82:73:81:7c:94:f4:8d:45:35:40:2e:
71:23:e5:44:2a:f2:83:1b:b5:74:5a:a7:ce:2c:21:63:f6:8c:
41:3a:fa:19:b4:a4:c8:eb:38:59:52:fc:1e:6c:a2:44:2c:a4:
97:e2:6c:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92dz3+Ok+mTOPJsJfyKA5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZWIyYjUxZTM3NDhjMjUyNzQwMmU2ODYwMWE4ODkxMjg4
M2EwNTgwHhcNMjUxMDE5MTkwMjE3WhcNMjUxMDIwMTkwMjE3WjAzMTEwLwYDVQQD
EyhkMzQ1MDlhYTRhNjE3YTg5ZGE4YWU0NGEwNDcxMDVkMjNjMDNiOWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz1M9t+JYi2A9NL096c4jBM5XhXt
lcCyNF+i+6ijWmhdTI25hdmpweFuNk+aGPGnnlNulLKhTn3X6l4dUgP2wvF7NCEk
6Ena2g6b576L51Fvn7Bf57Yw0zNTkpgl5pbg8lnOBU3Fxz6F3EdtMSzKfSSA1dRK
QaPCM83KoaDyDTPVrY+HM3mvIrtxkCaYRWPS4NtbDafsqInyfkcn/QBdaJx6jjA0
r4ZGtq9Cx9qCJKFxNM6CM8B1aWKxWLMT9+t1cEBfkqm/iyBCPP1taaVbrPwrI3T9
L2LJf7Xbp7AY1p8W/+V0nlROG6QvcT95kXJj4gOF9i881pH8TzwZV9jiywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNFCapKYXqJ2orkSgRxBdI8A7nkMB8GA1UdIwQY
MBaAFDLrK1HjdIwlJ0AuaGAaiJEog6BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXVzclVlTjBqQ1VuUUM1b1lCcUlrU2lEb0ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9iYWIwZTUtZWJlOC00ZTBhLWE2NDkt
NmFjMWFmZjM2YzA3LzEvTXVzclVlTjBqQ1VuUUM1b1lCcUlrU2lEb0ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9iYWIwZTUtZWJlOC00ZTBhLWE2NDktNmFjMWFmZjM2YzA3
LzEvTXVzclVlTjBqQ1VuUUM1b1lCcUlrU2lEb0ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPXX4qYfJ
CfvzwpbXes1mlwvU0JoHaDDBr6RSIY1ZWkLnYrjtlJSEgApqSWJo8yZ5FmUbzOv/
2P8/1P+hEgqJBx55KGQpOTd6xrMTrKOkB+s+ISgjPQ98vj2uD+4I0bq8q40tDZnw
/oe26uIJQtwjq23PPYey0cZA1tiZYSbtFs1iZvT16Xzw/KJTEgUSpsstsC4dyN/J
R7wiAwADCsNGiDPwP0ioJzD14zgc76aktzhCVNQgm/9MQlNCYBdq7iWhel6mgkEX
5/oBtR10r4JzgXyU9I1FNUAucSPlRCrygxu1dFqnziwhY/aMQTr6GbSkyOs4WVL8
HmyiRCykl+Js6Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:29:50 2025 by rpki-client