Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
File: 1-MUB87-tSa1OVubkwY90Dt6gXSE.mft (raw, json)
Hash identifier: T5fwGVP7GNqEv8L6vAKU5MJLruyvV68uJrKshVthPAE=
Subject key identifier: B2:55:31:A9:55:DC:40:9A:66:D5:E9:D7:5D:C8:76:41:79:37:83:B9
Authority key identifier: F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
Certificate issuer: /CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Certificate serial: 01965C4CD70A24FA61C1F77B8D4B58CA3D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
Manifest number: 10E6
Signing time: Tue 22 Apr 2025 07:01:01 +0000
Manifest this update: Tue 22 Apr 2025 07:01:01 +0000
Manifest next update: Wed 23 Apr 2025 07:01:01 +0000
Files and hashes: 1: 1-MUB87-tSa1OVubkwY90Dt6gXSE.crl (hash: FApYKMmXu2mz+P9yJ+RCHVYkHZim9iTKexz28CpBVds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:4c:d7:0a:24:fa:61:c1:f7:7b:8d:4b:58:ca:3d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Validity
Not Before: Apr 22 07:01:01 2025 GMT
Not After : Apr 23 07:01:01 2025 GMT
Subject: CN=b25531a955dc409a66d5e9d75dc87641793783b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:57:be:27:61:e9:4a:d1:df:0a:a1:ab:57:0e:
28:c6:32:41:35:e5:1d:2a:9a:36:dc:b1:09:f2:72:
9d:eb:54:56:bf:01:f6:2d:c0:68:58:16:3d:e3:99:
ed:a5:6d:5e:33:32:50:10:22:1b:93:b4:a4:81:e2:
94:29:43:56:d1:34:c8:cf:35:7f:13:d2:e8:99:a7:
dd:fd:ff:06:ff:de:bd:19:79:50:a0:91:4a:57:eb:
a4:6f:61:5b:1f:fd:06:20:01:ae:08:f5:a0:d6:58:
7f:10:00:eb:bb:e1:74:78:f3:a1:2e:78:d5:01:de:
ae:40:28:cd:77:72:bc:b6:b7:e1:f2:80:11:08:82:
eb:6c:3f:d1:90:e2:a9:6d:74:c4:7b:83:44:35:e1:
7e:af:8c:d5:40:76:f4:8b:71:e8:23:22:3f:2a:8f:
0e:ae:64:aa:67:62:0f:8f:75:d4:6e:0c:1a:fd:55:
27:cf:a8:91:e5:9f:c9:90:5c:2e:3d:07:d4:1c:d4:
3f:7c:65:8e:ea:56:d2:fd:b1:9c:b2:a6:10:6f:26:
c1:d1:35:bf:db:2d:a0:0d:99:99:01:03:41:58:79:
fe:74:1a:5d:55:9c:4b:b7:b9:72:94:f4:85:9c:ae:
54:18:06:23:ed:20:4e:32:67:35:9f:92:63:ca:06:
54:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:55:31:A9:55:DC:40:9A:66:D5:E9:D7:5D:C8:76:41:79:37:83:B9
X509v3 Authority Key Identifier:
keyid:F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:1a:d7:f1:b1:be:39:f6:93:11:55:c2:af:cc:60:e1:a9:1e:
ea:e2:1f:1b:13:3b:ce:77:e9:61:47:79:01:00:f0:08:8c:72:
c6:14:6a:16:97:39:e1:f0:fe:14:26:29:55:82:16:af:38:8d:
58:cb:33:ed:64:ed:c0:cb:0d:df:0d:98:44:3b:97:3b:e8:a1:
fc:01:3f:ce:39:4b:72:c5:c8:3e:6b:3b:9e:06:76:be:32:f1:
d4:ca:f9:3f:0b:d3:1a:26:09:70:88:b7:eb:5d:0c:e8:3e:04:
80:cb:8d:3a:de:28:e1:1b:f3:99:31:62:a6:96:cf:c1:5d:61:
fb:e3:67:5a:66:aa:00:d2:39:07:fb:c5:66:54:6a:b7:e8:f7:
cb:e2:df:c2:7e:c9:a2:de:e7:b4:40:79:c1:89:e5:85:08:51:
5c:c7:c7:89:ff:44:2d:88:6a:44:40:b0:e2:59:70:6f:df:3f:
97:3f:70:30:68:6c:d5:41:fe:e0:b2:ad:12:c0:94:7f:78:16:
46:ee:bf:7e:0c:e8:56:66:d2:1b:5d:79:19:2a:96:40:68:46:
b0:6b:bc:7e:0c:47:38:13:f0:bc:ee:a0:d9:b6:d1:86:0e:97:
ab:34:94:7d:00:2a:db:4d:a8:06:7b:c8:c4:ca:36:e0:2c:fb:
70:f1:61:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:44:19 2025 by rpki-client