Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
File: Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft (raw, json)
Hash identifier: su2FNRKb9+L7CfXYlANy8+2zoZdT8WfAzlRY3A9If9s=
Subject key identifier: BC:87:8F:FD:5B:A4:07:97:4E:62:47:EC:71:35:D4:D0:CF:4B:FA:0B
Authority key identifier: 32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E
Certificate issuer: /CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
Certificate serial: 019841ABC289B0E254F9E82DAECD1441E05C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
Manifest number: 1238
Signing time: Fri 25 Jul 2025 13:00:32 +0000
Manifest this update: Fri 25 Jul 2025 13:00:32 +0000
Manifest next update: Sat 26 Jul 2025 13:00:32 +0000
Files and hashes: 1: 1UnYoe8trzW_GgSpfZGfv_JmHSs.roa (hash: GL46oY9ft0jCbwWPIAjk8KgYcddvUrm4Q8zoPC/vajY=)
2: F7P27joXZG2fOKvUgJ2c9GRp2Fc.roa (hash: cui3T69juyxfuuKRDXOJBwPcUU7RywnAUmPOHsvMScE=)
3: LHjpAYfuBzZ_RF5-cYOqcdg5XWY.roa (hash: clT3oz7MTlFepMOgAgzqz4bDDX9luSGN1e4LPGs/Uas=)
4: Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl (hash: PtTNnOvHCeEOFdVZMAocKhlzx9n4wQlOyKod7DhLDEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:ab:c2:89:b0:e2:54:f9:e8:2d:ae:cd:14:41:e0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ed67002dc7307e8563b6e4934ccd5723a44f3e
Validity
Not Before: Jul 25 13:00:32 2025 GMT
Not After : Jul 26 13:00:32 2025 GMT
Subject: CN=bc878ffd5ba407974e6247ec7135d4d0cf4bfa0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:bc:d9:82:d5:8e:25:e9:74:2a:f7:e1:a0:
62:c7:ae:88:dc:b9:4f:13:44:e7:54:a6:d7:75:83:
84:00:f9:fa:11:9a:c4:58:34:8f:e5:a5:f6:83:0d:
6b:a1:dd:8e:0a:c0:79:1d:ef:36:f2:b5:4d:c3:78:
81:3a:a7:a2:74:25:05:89:17:34:f5:15:7d:80:40:
f8:0b:32:8e:a8:5d:ef:13:eb:42:76:88:c8:1b:b0:
4d:61:0c:e4:8d:80:78:d0:07:cd:fd:dc:9e:ae:c7:
01:db:ea:33:4f:55:1a:11:d8:c2:7c:f0:0f:a2:09:
57:97:e4:62:06:22:bc:2d:1b:67:ab:1f:ba:02:79:
0e:37:36:ce:df:31:0a:45:a2:03:13:ec:16:f2:bb:
aa:45:4f:be:b9:3a:ba:0f:81:c6:96:d3:20:da:82:
b1:55:90:4b:09:f5:ca:9c:63:eb:bd:c8:e9:35:b4:
57:0c:b2:52:da:57:94:94:d4:f8:77:32:e6:b7:64:
51:3c:67:4f:04:ad:06:2e:13:02:df:ea:30:36:cf:
80:e7:85:60:81:db:33:be:45:a6:01:ce:72:52:8d:
2e:2a:3e:43:a2:b9:90:b9:d2:2f:39:de:e9:5a:23:
94:76:c7:d2:1c:33:d6:a9:9e:84:52:60:a0:6f:50:
ab:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:87:8F:FD:5B:A4:07:97:4E:62:47:EC:71:35:D4:D0:CF:4B:FA:0B
X509v3 Authority Key Identifier:
keyid:32:ED:67:00:2D:C7:30:7E:85:63:B6:E4:93:4C:CD:57:23:A4:4F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7916cd-4d2f-4f52-aeac-f1e9bc41d92f/1/Mu1nAC3HMH6FY7bkk0zNVyOkTz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c8:ab:74:fa:41:31:f0:63:b6:24:d6:a9:dd:02:fc:87:a1:
3e:3b:de:87:97:11:37:df:d9:66:e0:46:2d:ba:5d:85:24:72:
73:7d:a6:e2:12:4b:f1:6a:d1:7b:a3:86:ec:3c:25:71:eb:6b:
57:97:31:0e:42:35:91:b5:43:01:21:83:a1:4f:8a:76:fc:c0:
73:e2:3a:d5:be:da:26:1c:d5:19:f5:83:02:be:10:60:be:0d:
16:66:ab:43:9a:37:0c:b4:e8:3f:ac:8c:6c:76:7f:1c:0a:94:
d8:8e:77:57:29:a3:ed:ad:ec:8e:b0:6c:4a:11:3b:ae:80:f0:
69:20:33:22:e0:db:f9:26:24:84:31:a4:d7:ac:67:0e:16:63:
67:54:ee:fb:59:07:68:ca:eb:30:4e:08:78:5b:91:7b:5c:58:
39:30:02:37:af:fb:64:2c:45:85:61:e5:92:68:52:a5:ce:a6:
4e:cb:be:a1:4d:15:a7:90:3b:73:66:ee:9b:2a:c2:8a:bd:f8:
4c:d8:60:b4:8b:fa:33:a1:a2:3f:ae:8c:29:80:bb:e2:35:88:
d2:24:b9:06:d5:7d:86:7b:c6:55:cf:b2:86:bf:a7:88:da:86:
a4:36:ff:f6:e6:11:c0:d5:17:3f:08:63:83:53:2d:8f:c7:10:
22:f3:09:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 20:55:38 2025 by rpki-client