Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
File: muJTTfUJyW7LgRvIXXbWK6rfPSk.mft (raw, json)
Hash identifier: 0hKBgDttD9bsKExWXOJ1mmiRqew5GJmvk4JB1LY+hxo=
Subject key identifier: 9B:68:95:2B:C2:0E:95:EA:2B:9D:4C:1E:98:A5:FB:E3:DD:5A:05:61
Authority key identifier: 9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29
Certificate issuer: /CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
Certificate serial: 0197B745A9E7E42CF4200F29D1B3C9779795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
Manifest number: 09D7
Signing time: Sat 28 Jun 2025 16:01:25 +0000
Manifest this update: Sat 28 Jun 2025 16:01:25 +0000
Manifest next update: Sun 29 Jun 2025 16:01:25 +0000
Files and hashes: 1: SkEoFqWz8Nesa-6bLQGwcsWuCyc.roa (hash: YBTkqmp/iQfLCssDb/tS/QsoGIchXV4bMdX9APnUYwY=)
2: muJTTfUJyW7LgRvIXXbWK6rfPSk.crl (hash: ebvVuR5SYybxwiOHGoOmAKu7qWEj9DhruPqaUzRDQqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a9:e7:e4:2c:f4:20:0f:29:d1:b3:c9:77:97:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
Validity
Not Before: Jun 28 16:01:25 2025 GMT
Not After : Jun 29 16:01:25 2025 GMT
Subject: CN=9b68952bc20e95ea2b9d4c1e98a5fbe3dd5a0561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4c:1f:d5:c0:20:b1:f3:3f:50:8f:90:b4:b7:
6a:59:2b:94:45:84:df:3d:73:40:e3:d7:15:01:89:
e6:05:92:75:cc:c9:51:6f:78:24:2d:f0:d5:b4:e2:
86:7a:a4:bb:a9:42:ad:5c:98:53:89:91:74:b9:53:
70:3f:15:96:35:66:c4:f3:f5:54:ae:34:ab:ed:14:
33:81:45:e1:38:5c:26:5e:75:2b:7d:eb:0f:c7:81:
1d:44:6c:05:0d:d7:29:59:a6:29:99:93:36:4d:6a:
15:06:8d:1f:84:57:ab:91:f7:c2:82:3c:9d:44:ad:
eb:bb:21:f4:c5:7a:c2:6f:0a:ff:ec:5a:62:7b:67:
01:6c:d3:2c:49:8e:ca:f7:f3:f7:1f:fa:33:01:cb:
63:e5:5f:4e:27:7d:44:0b:8d:c7:93:63:75:7b:97:
54:87:f1:da:3b:99:73:7b:1a:a5:d8:a2:05:60:4e:
88:8d:bd:cc:bb:a4:f1:2c:48:10:22:56:94:08:87:
1e:9c:18:ac:53:85:50:e3:a7:44:c0:35:5d:bb:7c:
f6:be:91:e6:c8:1d:f8:46:07:cd:2a:49:28:7c:46:
f2:a5:02:31:1b:2b:c4:72:12:3e:f7:87:6e:46:2a:
07:bc:cc:79:81:36:02:b7:92:cd:ad:ff:a3:09:6f:
33:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:68:95:2B:C2:0E:95:EA:2B:9D:4C:1E:98:A5:FB:E3:DD:5A:05:61
X509v3 Authority Key Identifier:
keyid:9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:78:b6:74:21:e1:0a:73:81:1c:8b:2e:2f:c2:f8:04:d6:f9:
8a:e6:58:a8:42:3c:f6:cf:7e:a1:29:bf:b7:61:04:ee:7d:2f:
d5:32:5f:ca:b9:37:52:50:ed:a0:d4:24:a0:e9:25:80:ba:ca:
56:eb:4d:2f:b5:23:52:da:41:6d:9e:3b:a5:ef:03:f3:6b:60:
d3:f8:15:f4:1c:f8:cd:e8:11:15:77:8f:90:bc:18:6a:5b:d0:
e5:61:08:af:18:ba:30:2a:a9:ef:27:22:2b:7d:8d:31:ea:ce:
43:a6:4a:c3:5e:fc:a0:e9:03:3a:47:73:42:c0:28:9a:d2:e3:
96:76:4a:d3:9f:27:15:3a:28:ae:ef:45:57:05:90:81:a6:7d:
24:41:9d:c8:77:a5:32:db:ce:ae:43:13:2c:66:b7:ee:f1:5d:
52:0b:71:59:d0:e6:c7:12:b3:a7:28:9f:df:36:57:80:62:99:
00:78:0c:9b:06:96:ae:61:f0:15:fc:5d:71:6d:4f:72:df:f4:
02:59:32:c1:53:a7:c5:bc:a1:01:22:5a:47:d5:e9:6c:ec:8e:
86:f3:fd:1a:1a:6f:03:e5:d7:ca:00:37:28:32:cd:5a:25:44:
23:85:02:21:80:4e:9d:fd:ad:41:86:ab:d1:e5:3f:79:b7:ff:
fb:ce:8a:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Rann5Cz0IA8p0bPJd5eVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZTI1MzRkZjUwOWM5NmVjYjgxMWJjODVkNzZkNjJiYWFk
ZjNkMjkwHhcNMjUwNjI4MTYwMTI1WhcNMjUwNjI5MTYwMTI1WjAzMTEwLwYDVQQD
Eyg5YjY4OTUyYmMyMGU5NWVhMmI5ZDRjMWU5OGE1ZmJlM2RkNWEwNTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0wf1cAgsfM/UI+QtLdqWSuURYTf
PXNA49cVAYnmBZJ1zMlRb3gkLfDVtOKGeqS7qUKtXJhTiZF0uVNwPxWWNWbE8/VU
rjSr7RQzgUXhOFwmXnUrfesPx4EdRGwFDdcpWaYpmZM2TWoVBo0fhFerkffCgjyd
RK3ruyH0xXrCbwr/7Fpie2cBbNMsSY7K9/P3H/ozActj5V9OJ31EC43Hk2N1e5dU
h/HaO5lzexql2KIFYE6Ijb3Mu6TxLEgQIlaUCIcenBisU4VQ46dEwDVdu3z2vpHm
yB34RgfNKkkofEbypQIxGyvEchI+94duRioHvMx5gTYCt5LNrf+jCW8zrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtolSvCDpXqK51MHpil++PdWgVhMB8GA1UdIwQY
MBaAFJriU031Ccluy4EbyF121iuq3z0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXVKVFRmVUp5VzdMZ1J2SVhYYldLNnJmUFNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82ZjVkYzItMzBjYi00YzBjLWFhNjIt
ODIyNjUyNGU0YWNmLzEvbXVKVFRmVUp5VzdMZ1J2SVhYYldLNnJmUFNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS82ZjVkYzItMzBjYi00YzBjLWFhNjItODIyNjUyNGU0YWNm
LzEvbXVKVFRmVUp5VzdMZ1J2SVhYYldLNnJmUFNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmXi2dCHh
CnOBHIsuL8L4BNb5iuZYqEI89s9+oSm/t2EE7n0v1TJfyrk3UlDtoNQkoOklgLrK
VutNL7UjUtpBbZ47pe8D82tg0/gV9Bz4zegRFXePkLwYalvQ5WEIrxi6MCqp7yci
K32NMerOQ6ZKw178oOkDOkdzQsAomtLjlnZK058nFTooru9FVwWQgaZ9JEGdyHel
MtvOrkMTLGa37vFdUgtxWdDmxxKzpyif3zZXgGKZAHgMmwaWrmHwFfxdcW1Pct/0
AlkywVOnxbyhASJaR9XpbOyOhvP9GhpvA+XXygA3KDLNWiVEI4UCIYBOnf2tQYar
0eU/ebf/+86KkQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:34:03 2025 by rpki-client