Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
File: MuZYUVseanK5nzMmaeBp5hVPcN0.mft (raw, json)
Hash identifier: Dq+Fq8+2adBaSqV1NnR2Cpn31GpJYePmvYOCKnrLjtY=
Subject key identifier: 9E:08:2A:2B:ED:23:05:7C:4A:7D:83:1F:48:5F:B3:49:95:66:80:DF
Authority key identifier: 32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD
Certificate issuer: /CN=32e658515b1e6a72b99f332669e069e6154f70dd
Certificate serial: 0197B70EBE9E72BAB00643DA4E059EE6B818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
Manifest number: 108F
Signing time: Sat 28 Jun 2025 15:01:26 +0000
Manifest this update: Sat 28 Jun 2025 15:01:26 +0000
Manifest next update: Sun 29 Jun 2025 15:01:26 +0000
Files and hashes: 1: IP2TA110bw-H4O1wamCYoNbCcjM.roa (hash: hPPZWdSxmIy27LNJGRF/m5E6I6iPJVLPz81w8YZa7M4=)
2: MuZYUVseanK5nzMmaeBp5hVPcN0.crl (hash: FXJbmcbbylAFWcSnaonOgVqgIvaJlm6RUI9lHRNS+Zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:be:9e:72:ba:b0:06:43:da:4e:05:9e:e6:b8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32e658515b1e6a72b99f332669e069e6154f70dd
Validity
Not Before: Jun 28 15:01:26 2025 GMT
Not After : Jun 29 15:01:26 2025 GMT
Subject: CN=9e082a2bed23057c4a7d831f485fb349956680df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9a:88:25:74:ea:82:69:82:43:29:62:78:fb:
be:1f:88:9b:e4:42:e7:6b:03:e6:22:6a:df:5a:e6:
fb:35:2e:a7:fc:03:e7:b6:76:f3:33:30:7b:2f:68:
63:95:13:d7:9d:f1:96:6d:eb:27:a2:55:bc:cd:2e:
b8:77:62:e7:af:23:f8:23:29:11:69:a1:bb:49:ad:
61:92:80:df:0f:d0:71:ee:46:47:7a:d0:bf:33:e9:
32:96:1c:78:6d:12:a5:e2:41:4f:22:e5:ff:c8:70:
3d:e9:bd:45:fb:8d:e4:ac:d4:f7:84:c5:a0:e3:20:
7f:99:3a:e0:2f:f8:ae:3a:9b:78:94:0b:2a:85:77:
f6:34:79:ba:32:3d:8b:2a:10:33:1c:a9:5d:5f:69:
22:af:92:80:d6:1e:98:75:a1:f0:70:ee:55:11:0b:
80:2a:e3:2e:5a:64:85:b1:39:36:43:02:28:21:f3:
85:29:91:ea:16:1b:64:87:bc:2b:4f:c5:40:ac:61:
e6:ea:fd:39:70:79:fa:0f:3b:f0:62:69:f4:c0:08:
4f:23:09:44:86:17:85:21:8a:a8:15:6b:f4:97:ad:
77:1a:77:1e:b4:43:ee:e1:7b:9b:fc:e7:5c:8c:4d:
c4:0e:e5:e0:62:fe:b9:1a:85:fd:89:4d:de:31:71:
04:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:08:2A:2B:ED:23:05:7C:4A:7D:83:1F:48:5F:B3:49:95:66:80:DF
X509v3 Authority Key Identifier:
keyid:32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:8f:a8:c0:fd:a8:3f:a3:9e:17:21:01:ea:ed:27:a5:07:ec:
72:cd:47:9a:cb:eb:e0:36:3f:24:e6:eb:ef:7f:74:6a:91:d8:
ec:fb:ec:ac:e9:2a:5c:43:a4:63:ab:6d:b9:48:4c:e8:0c:6e:
ec:50:02:ad:0c:38:e8:44:9a:9b:4c:6e:47:7c:a4:5b:18:da:
2b:33:28:bb:33:fa:3b:0b:56:46:2f:e0:cb:04:e6:47:8c:b0:
00:62:00:ec:ab:e4:c8:e8:27:fb:c4:70:ff:87:0e:a1:e5:4e:
56:64:bc:6e:3a:92:d2:31:69:71:76:6e:27:89:de:1c:46:63:
fc:87:6e:cd:28:9d:14:55:64:51:14:63:74:2b:24:eb:86:72:
65:00:5a:cd:04:01:ac:26:52:ee:ad:75:85:3d:7b:8e:86:2f:
3f:80:4f:08:d7:14:e8:4a:4d:0a:62:4c:67:18:17:2b:96:a7:
05:b9:6c:8b:f3:32:e4:8c:c5:29:84:38:c7:56:60:a2:9a:98:
97:81:b3:22:bd:ec:f7:b1:54:d0:82:ec:dd:c3:51:99:6f:9a:
7b:73:66:23:d2:45:a5:bc:65:5d:d0:c4:08:27:8b:6b:2a:d3:
64:88:d7:20:4f:8d:d5:7b:6b:4c:be:20:f7:95:f9:66:01:ad:
90:d5:24:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dr6ecrqwBkPaTgWe5rgYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZTY1ODUxNWIxZTZhNzJiOTlmMzMyNjY5ZTA2OWU2MTU0
ZjcwZGQwHhcNMjUwNjI4MTUwMTI2WhcNMjUwNjI5MTUwMTI2WjAzMTEwLwYDVQQD
Eyg5ZTA4MmEyYmVkMjMwNTdjNGE3ZDgzMWY0ODVmYjM0OTk1NjY4MGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5qIJXTqgmmCQyliePu+H4ib5ELn
awPmImrfWub7NS6n/APntnbzMzB7L2hjlRPXnfGWbesnolW8zS64d2LnryP4IykR
aaG7Sa1hkoDfD9Bx7kZHetC/M+kylhx4bRKl4kFPIuX/yHA96b1F+43krNT3hMWg
4yB/mTrgL/iuOpt4lAsqhXf2NHm6Mj2LKhAzHKldX2kir5KA1h6YdaHwcO5VEQuA
KuMuWmSFsTk2QwIoIfOFKZHqFhtkh7wrT8VArGHm6v05cHn6DzvwYmn0wAhPIwlE
hheFIYqoFWv0l613GncetEPu4Xub/OdcjE3EDuXgYv65GoX9iU3eMXEEaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4IKivtIwV8Sn2DH0hfs0mVZoDfMB8GA1UdIwQY
MBaAFDLmWFFbHmpyuZ8zJmngaeYVT3DdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXVaWVVWc2Vhbks1bnpNbWFlQnA1aFZQY04wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9mNjljNDItNmY5ZC00OTBlLWIxMzIt
NjdmOGU3ZDExMzdjLzEvTXVaWVVWc2Vhbks1bnpNbWFlQnA1aFZQY04wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9mNjljNDItNmY5ZC00OTBlLWIxMzItNjdmOGU3ZDExMzdj
LzEvTXVaWVVWc2Vhbks1bnpNbWFlQnA1aFZQY04wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAho+owP2o
P6OeFyEB6u0npQfscs1Hmsvr4DY/JObr7390apHY7PvsrOkqXEOkY6ttuUhM6Axu
7FACrQw46ESam0xuR3ykWxjaKzMouzP6OwtWRi/gywTmR4ywAGIA7KvkyOgn+8Rw
/4cOoeVOVmS8bjqS0jFpcXZuJ4neHEZj/IduzSidFFVkURRjdCsk64ZyZQBazQQB
rCZS7q11hT17joYvP4BPCNcU6EpNCmJMZxgXK5anBblsi/My5IzFKYQ4x1ZgopqY
l4GzIr3s97FU0ILs3cNRmW+ae3NmI9JFpbxlXdDECCeLayrTZIjXIE+N1XtrTL4g
95X5ZgGtkNUk0w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:19 2025 by rpki-client