Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
File: muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft (raw, json)
Hash identifier: SUvkjLq4QTQQhaqAdIuPVsUE48bmHp4M5jPGfXevaO0=
Subject key identifier: AC:E6:EE:C5:CF:E2:90:8C:21:33:3A:A7:98:57:D5:4E:0C:65:7F:03
Authority key identifier: 9A:E0:08:15:D2:BD:04:1D:CC:0E:CE:06:76:56:BE:5E:6E:B1:2B:62
Certificate issuer: /CN=9ae00815d2bd041dcc0ece067656be5e6eb12b62
Certificate serial: 019849657C456772F20A33089C4658CD2256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
Manifest number: B5
Signing time: Sun 27 Jul 2025 01:00:44 +0000
Manifest this update: Sun 27 Jul 2025 01:00:44 +0000
Manifest next update: Mon 28 Jul 2025 01:00:44 +0000
Files and hashes: 1: muAIFdK9BB3MDs4Gdla-Xm6xK2I.crl (hash: QlmO4JVpvqIQRHFdNsT0NsbP9ySivnFMO0kXoOUFUGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:7c:45:67:72:f2:0a:33:08:9c:46:58:cd:22:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae00815d2bd041dcc0ece067656be5e6eb12b62
Validity
Not Before: Jul 27 01:00:44 2025 GMT
Not After : Jul 28 01:00:44 2025 GMT
Subject: CN=ace6eec5cfe2908c21333aa79857d54e0c657f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:04:46:29:e8:bc:8a:e6:0b:92:b8:8f:64:d8:
33:bf:66:d9:d1:fa:f0:c4:11:af:da:97:ad:ce:97:
42:7a:d7:ef:71:13:ca:0d:b9:85:dc:23:7b:49:9c:
da:6c:7c:33:8d:0a:62:9b:71:9e:6c:fb:46:d8:f3:
d5:89:15:12:99:15:39:e0:b2:4f:fd:e3:d7:ac:d8:
fc:1d:3a:16:04:b7:ba:4f:93:8e:e3:33:43:8a:c6:
0f:89:d3:7b:dc:07:f2:bc:51:79:cd:26:3e:4f:18:
d6:ef:a4:3a:23:8b:96:e8:6d:9c:f4:40:6c:10:0b:
df:63:bf:47:91:6e:77:31:57:6d:ec:4d:c2:34:6f:
13:4d:25:19:02:aa:05:20:84:28:2f:4d:d3:f6:ad:
fd:d0:31:c4:58:43:e5:08:8f:c8:6d:37:06:3a:b0:
be:63:7f:97:5b:23:2d:1d:12:3a:3a:a4:bb:64:8c:
66:d4:85:ee:88:37:31:f1:ee:41:45:d1:cc:7b:eb:
8a:02:aa:ea:22:88:f4:bf:5e:85:ae:53:64:39:3f:
c3:a6:d1:be:7c:2d:b4:9b:3a:dc:a7:23:7c:71:17:
29:4d:d6:e7:bb:8b:3c:e4:42:72:c2:58:1e:fa:89:
ea:1c:65:cd:41:21:5f:6a:53:78:ea:8e:56:69:24:
dd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E6:EE:C5:CF:E2:90:8C:21:33:3A:A7:98:57:D5:4E:0C:65:7F:03
X509v3 Authority Key Identifier:
keyid:9A:E0:08:15:D2:BD:04:1D:CC:0E:CE:06:76:56:BE:5E:6E:B1:2B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b8:82:5c:89:2e:c3:55:fa:64:5e:5e:db:05:85:22:88:b0:
c5:8b:00:8f:61:e0:41:32:5f:8c:a3:0c:d4:2a:a0:1a:86:90:
86:5b:fa:36:0f:06:cd:ee:3d:47:50:64:37:ca:eb:2c:ef:3c:
d3:e2:9f:c4:5a:85:67:fc:30:f0:82:37:2f:0f:b0:07:41:e2:
64:ff:b7:d9:bd:ec:44:ba:8d:94:6b:99:fd:20:bc:7f:f7:d9:
a2:26:f7:f8:0d:71:6d:c7:1e:99:71:80:b4:0f:aa:25:d5:66:
32:74:86:05:66:7b:a3:cf:11:0d:be:df:1f:56:04:c8:79:9b:
28:fa:99:65:2a:fd:f5:72:aa:88:89:2e:79:98:39:cc:f7:36:
4c:e5:49:a6:0c:80:2e:01:c7:6b:35:cc:ee:6d:82:ca:9c:f2:
de:cb:9a:46:b9:da:e0:50:28:f1:20:0d:5a:d2:7c:c9:67:0c:
57:3a:d9:25:d3:77:b4:da:10:4e:bc:b9:a3:be:b9:0f:2e:3a:
bf:09:1e:c4:09:7e:94:50:66:fe:7d:11:99:d8:bd:4f:8f:d6:
04:80:ab:bc:5f:59:66:73:3a:55:6f:ec:89:4c:60:4b:12:73:
fb:61:15:0c:b0:83:03:da:af:30:a5:61:bc:d6:15:d3:89:ca:
44:55:65:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:36:59 2025 by rpki-client