Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
File: MuZYUVseanK5nzMmaeBp5hVPcN0.mft (raw, json)
Hash identifier: qVmBcbTiHFXRoYcO98xLdiyFiE8EsMwiU9acXu/ry4I=
Subject key identifier: 66:5E:87:5B:C1:CC:D0:94:A8:96:6D:EB:0E:9D:7E:1E:98:E8:73:C8
Authority key identifier: 32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD
Certificate issuer: /CN=32e658515b1e6a72b99f332669e069e6154f70dd
Certificate serial: 0198D6CD310FD9D529CA89F9D02C62F7F538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
Manifest number: 1124
Signing time: Sat 23 Aug 2025 12:00:28 +0000
Manifest this update: Sat 23 Aug 2025 12:00:28 +0000
Manifest next update: Sun 24 Aug 2025 12:00:28 +0000
Files and hashes: 1: IP2TA110bw-H4O1wamCYoNbCcjM.roa (hash: hPPZWdSxmIy27LNJGRF/m5E6I6iPJVLPz81w8YZa7M4=)
2: MuZYUVseanK5nzMmaeBp5hVPcN0.crl (hash: 57ylhmcoAqcLnfpilZcyIotk3BVD4tCczyFaCRvx+8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:31:0f:d9:d5:29:ca:89:f9:d0:2c:62:f7:f5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32e658515b1e6a72b99f332669e069e6154f70dd
Validity
Not Before: Aug 23 12:00:28 2025 GMT
Not After : Aug 24 12:00:28 2025 GMT
Subject: CN=665e875bc1ccd094a8966deb0e9d7e1e98e873c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:84:84:59:dc:0b:9c:f7:25:e1:9f:97:6e:e4:
c2:62:2d:02:07:0a:2f:68:5e:36:69:8d:8d:de:30:
a3:f6:31:21:04:5e:b1:81:36:ce:43:42:d4:eb:ec:
ef:39:23:4b:79:b3:81:2c:6d:cf:14:5a:c0:39:e3:
3f:e6:ab:ac:10:a5:e3:59:52:4b:37:89:62:a2:3a:
bf:29:70:26:4c:71:e4:3a:8c:28:45:e2:93:84:69:
af:cb:a0:03:07:80:bd:34:dd:96:1f:38:39:07:91:
fa:2b:8e:5c:7d:f3:8e:2c:e5:dd:d9:b6:95:df:fd:
d9:fb:7a:c0:0d:0b:d1:4b:d5:f3:d6:d3:dc:1a:6b:
4a:76:0a:f2:01:da:4b:ff:48:47:9b:96:58:1d:d6:
bf:f0:2e:16:c0:37:99:12:ec:97:da:5b:b1:5d:a3:
12:aa:5c:86:d1:06:11:1d:7b:0b:50:c4:9e:29:14:
a2:9f:b0:32:c6:e8:4e:e8:4e:6e:ec:df:20:07:7d:
2e:1d:b0:a9:90:c6:9c:d3:88:59:e7:0f:55:b0:c7:
8b:3a:69:7c:fd:5f:0c:35:1b:01:76:dc:41:23:5f:
b7:2b:67:cc:cf:b7:a6:7c:0a:5b:b5:55:27:97:07:
8a:a2:ce:ce:5f:cd:a4:ee:1f:4a:fd:c1:e2:a8:89:
93:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5E:87:5B:C1:CC:D0:94:A8:96:6D:EB:0E:9D:7E:1E:98:E8:73:C8
X509v3 Authority Key Identifier:
keyid:32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:30:7a:d7:41:66:3d:75:60:c8:ff:e2:2b:b6:91:bd:39:33:
65:f4:f2:a5:2d:a2:c5:03:d4:1e:58:a1:20:db:34:34:be:84:
f2:e5:62:09:5c:0e:e9:0f:5a:5b:cc:b1:12:c5:5c:54:0f:02:
7d:3e:32:f1:b3:16:ff:5e:71:cb:c2:16:45:5e:5b:13:19:61:
03:42:57:1b:55:9e:eb:66:b5:2b:e7:d5:14:29:3d:00:b9:03:
f1:0e:97:ad:8b:b3:ee:a9:5a:a6:3c:cc:73:fd:9b:57:16:d2:
b9:0b:4d:f1:ec:c5:09:dc:30:fe:25:d7:50:14:55:27:80:0a:
99:31:e9:a6:a4:ae:4a:6b:ee:2a:38:5e:f9:c1:82:c6:c6:f3:
9d:08:bd:34:ff:99:46:4a:ef:64:e5:bc:ba:be:7e:39:a4:42:
0d:61:54:dc:18:db:df:1e:eb:49:74:42:80:fb:0a:a6:95:83:
9a:40:b5:b2:f1:49:e6:fe:6c:d3:b3:84:04:8f:20:d8:8b:48:
8f:88:ea:21:ac:f7:b3:f8:14:a5:44:10:8e:bb:b9:e5:4a:11:
ab:9e:18:ad:14:35:f4:66:04:ac:62:bb:b5:d0:b4:d8:fe:52:
9c:f5:d6:3e:e7:ab:19:1b:70:57:27:74:cd:b0:7c:83:0c:6a:
af:f5:2a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:49:00 2025 by rpki-client