Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
File: MusrUeN0jCUnQC5oYBqIkSiDoFg.mft (raw, json)
Hash identifier: g5O2o2qCFyZXpHnsmY4PcmrsneOB2+7E0pU1lrcifuc=
Subject key identifier: 3C:CC:5C:A2:F6:D4:4E:1E:86:F1:C0:88:47:82:EA:DA:75:9C:B6:AE
Authority key identifier: 32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58
Certificate issuer: /CN=32eb2b51e3748c2527402e68601a88912883a058
Certificate serial: 0198D65FFD867A1CD57AA253CB3939953D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:01:11 +0000
Manifest this update: Sat 23 Aug 2025 10:01:11 +0000
Manifest next update: Sun 24 Aug 2025 10:01:11 +0000
Files and hashes: 1: KhlRzejfpvDxwhcPEcTkW8z6UJk.roa (hash: OH1bpS6azjDuSrz2eDsCxiLR1IWtc/vamDUbBv4QJmc=)
2: MusrUeN0jCUnQC5oYBqIkSiDoFg.crl (hash: YL2TooNBmfLs0RAYe8j1w12i3IOHmHGUZfUnoNVqkyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:fd:86:7a:1c:d5:7a:a2:53:cb:39:39:95:3d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32eb2b51e3748c2527402e68601a88912883a058
Validity
Not Before: Aug 23 10:01:11 2025 GMT
Not After : Aug 24 10:01:11 2025 GMT
Subject: CN=3ccc5ca2f6d44e1e86f1c0884782eada759cb6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:75:91:44:4e:45:55:fe:35:ea:03:4c:b1:
af:8f:2f:f5:96:76:fd:17:8c:73:7b:2d:5b:fa:15:
03:94:21:7f:d4:f0:36:c4:e0:8e:29:ce:cc:a7:b8:
3a:7a:e4:83:e1:25:54:e7:88:ed:bd:2e:fd:84:2a:
fe:ea:43:de:d0:33:94:df:32:99:12:65:31:a1:e0:
a0:35:7a:69:7f:fb:54:fd:67:42:27:db:3f:bc:56:
a1:51:24:9c:90:c6:9a:41:63:e9:e2:66:01:33:46:
58:d3:85:2e:82:94:53:53:c5:2f:b7:07:e6:36:5d:
b1:08:99:38:49:b7:05:2a:89:ae:4f:43:9f:37:f0:
d2:70:fc:4e:fe:26:d5:a8:41:17:ef:86:de:86:f1:
b9:e2:98:01:97:da:4b:08:0a:70:98:e5:87:fc:f6:
ad:31:0a:32:b0:38:40:5e:f2:ec:72:4e:f0:18:5b:
83:d3:11:3a:c4:0b:53:4e:2d:ae:bb:1f:89:aa:f8:
1f:ee:02:1b:dc:e2:db:dc:5b:6c:5f:30:f4:4a:28:
43:57:48:74:15:a1:9f:16:7a:ed:2a:62:2d:8d:f6:
7a:57:31:91:33:87:cb:09:18:90:1c:27:77:19:11:
7e:7d:60:2a:ae:19:96:cc:db:ba:ae:d3:60:8e:52:
5b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CC:5C:A2:F6:D4:4E:1E:86:F1:C0:88:47:82:EA:DA:75:9C:B6:AE
X509v3 Authority Key Identifier:
keyid:32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:96:1b:4e:f6:39:69:13:60:aa:a4:46:31:f1:bc:c6:dc:d5:
23:b9:d2:54:70:89:11:04:16:c2:77:7a:43:12:80:7c:06:b5:
5b:40:54:b0:1f:57:d2:77:49:f3:68:6c:29:b1:a5:a8:88:41:
a7:d8:e3:41:51:1d:82:2a:22:95:3f:00:98:65:c9:6c:b6:4a:
71:26:5b:6c:99:17:99:fd:80:61:6a:61:8e:34:c0:e0:cc:14:
aa:43:4b:bd:ea:87:ca:31:20:b6:02:9c:a5:be:74:85:f7:4e:
9c:93:80:78:2f:b1:ed:6f:79:82:2f:c0:7e:a0:03:51:a1:cb:
30:33:d3:d3:4e:37:07:4f:57:03:3e:8a:88:81:4d:67:b4:02:
50:49:d0:ea:a6:bf:08:e5:02:78:9a:22:e2:50:54:9b:59:13:
d4:b6:57:36:a0:7f:8b:5c:58:11:4b:1e:bd:8c:9b:c7:b0:6c:
ca:51:40:31:cc:d9:03:21:c5:31:6e:98:4a:45:15:9e:eb:2f:
4a:36:12:3b:f3:f7:92:d2:46:fb:b5:cf:d4:11:f2:05:42:40:
48:77:2f:77:fa:99:17:29:80:d1:70:3c:ce:c6:42:ab:fe:32:
10:a9:56:bc:79:5f:c5:f7:bb:61:64:96:10:10:73:06:c1:14:
9e:67:e4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:44:17 2025 by rpki-client