Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
File: rMUN9rAd_29U64A5skl6p_TvEs0.mft (raw, json)
Hash identifier: XlSkz2suNbtzruG6SYYNaU4tPIienx+URH38hi4LMZc=
Subject key identifier: 57:B4:E6:DA:8C:0F:C5:F3:40:6C:55:9C:C1:26:C3:6A:77:9D:A6:F9
Authority key identifier: AC:C5:0D:F6:B0:1D:FF:6F:54:EB:80:39:B2:49:7A:A7:F4:EF:12:CD
Certificate issuer: /CN=acc50df6b01dff6f54eb8039b2497aa7f4ef12cd
Certificate serial: 019853B2108FD2BAF083F930DB7D55332F30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
Manifest number: 0451
Signing time: Tue 29 Jul 2025 01:00:35 +0000
Manifest this update: Tue 29 Jul 2025 01:00:35 +0000
Manifest next update: Wed 30 Jul 2025 01:00:35 +0000
Files and hashes: 1: VNZ2uED23ISvSNUvT20r4GsH7oo.roa (hash: rxCWfcG9ljPfy4GNB4ws8osuxRP7WV5ZXyCpBXvN7MU=)
2: rMUN9rAd_29U64A5skl6p_TvEs0.crl (hash: llP/CX4AfaZkJU3tbCjgwiSQmKKtIhpLnyj6Hn45RNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b2:10:8f:d2:ba:f0:83:f9:30:db:7d:55:33:2f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc50df6b01dff6f54eb8039b2497aa7f4ef12cd
Validity
Not Before: Jul 29 01:00:35 2025 GMT
Not After : Jul 30 01:00:35 2025 GMT
Subject: CN=57b4e6da8c0fc5f3406c559cc126c36a779da6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:94:7d:58:4c:b9:f3:ea:99:8d:09:3f:2c:8b:
e7:c5:55:d3:84:cc:a9:3f:4e:87:54:86:a9:06:4f:
ac:28:dd:9c:99:e6:41:f5:81:c0:33:7f:62:9f:f9:
90:d5:bf:b7:2b:b6:d1:37:4b:df:db:49:33:db:f3:
f6:5e:db:1c:21:22:60:e9:91:f9:8a:93:a6:3f:dc:
31:d3:ee:7b:0d:cb:1b:ae:1e:5d:a1:4a:9c:a4:79:
a9:00:f4:eb:50:d3:e6:2f:89:26:45:03:1d:a6:57:
3b:1b:61:ad:0f:5e:22:bb:35:1c:3e:f7:10:ce:5a:
16:5b:3a:af:1b:5b:e5:f7:02:79:4f:b5:18:4a:7a:
03:ad:19:99:b0:8b:4f:11:5a:e9:c4:67:a2:f5:d6:
aa:14:8a:1c:69:b6:4a:d0:cf:e5:27:37:7c:f5:88:
29:b3:99:51:ad:9d:7d:42:d2:70:ae:04:66:e0:1a:
c7:f6:78:74:9b:f1:d8:38:04:e5:bc:15:de:ce:a7:
a6:10:e2:03:b0:fa:07:a3:0d:e5:5b:c5:d9:cc:8e:
48:f3:d6:75:02:9e:e6:45:a6:61:da:fe:15:f9:91:
01:4a:4e:f9:e6:bd:f5:cc:1b:01:53:a0:95:f1:e7:
e8:35:44:d1:b2:d1:ce:20:a2:aa:5e:24:97:9f:cc:
7c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B4:E6:DA:8C:0F:C5:F3:40:6C:55:9C:C1:26:C3:6A:77:9D:A6:F9
X509v3 Authority Key Identifier:
keyid:AC:C5:0D:F6:B0:1D:FF:6F:54:EB:80:39:B2:49:7A:A7:F4:EF:12:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMUN9rAd_29U64A5skl6p_TvEs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bf3528-a131-4f51-a59d-31c9313f9f66/1/rMUN9rAd_29U64A5skl6p_TvEs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f5:1c:6f:1c:56:4c:b8:85:62:a2:d2:8e:27:6b:a2:c9:14:
2e:9e:d4:ca:5c:19:83:5e:eb:3d:9c:7e:ce:1a:d3:c7:6f:b4:
16:cb:f9:b3:27:8a:e5:7d:43:89:e1:00:75:f9:ba:f5:6a:58:
b1:21:6f:52:47:85:35:f6:ad:7f:8c:36:90:28:27:dc:b1:16:
d0:dd:fb:53:53:f7:f5:81:c5:20:62:28:c9:ac:0f:b2:67:5a:
8e:9f:07:ee:e3:86:fe:98:54:ec:04:8e:e7:58:d9:37:22:d3:
53:38:60:41:ab:7c:f5:40:c9:a3:14:de:ad:f8:5c:c1:55:56:
64:50:2d:b4:cc:fe:e6:3d:5a:72:c9:67:90:c9:71:f5:16:8b:
02:15:d2:0e:af:73:6d:fd:3a:04:62:c8:d6:4b:67:7f:df:bb:
01:d5:87:a6:d4:b7:65:fe:a7:0c:d8:3f:7f:5e:7b:0b:c6:de:
19:a2:43:e8:ef:2e:f3:d4:6e:7c:7d:23:d3:f0:e9:2c:60:38:
04:69:eb:16:6f:44:da:86:73:a5:a5:8c:d2:6d:20:63:2b:e0:
e7:f3:61:3a:76:37:0e:67:80:e4:54:d0:16:6f:92:6c:bf:6f:
75:12:56:fb:69:aa:fb:16:23:71:a8:44:af:c9:17:eb:f9:36:
d4:c6:cd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:44:11 2025 by rpki-client