Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
File: MU0IhXjsDimwS0PpAUk1hnJjZP0.mft (raw, json)
Hash identifier: e1vIhwKlQrBrZa5jIdeSXSDes40zU2SNFVQRX7Qo+Ns=
Subject key identifier: 81:8A:93:62:8C:28:30:5E:31:64:74:4D:67:B3:98:48:55:71:49:74
Authority key identifier: 31:4D:08:85:78:EC:0E:29:B0:4B:43:E9:01:49:35:86:72:63:64:FD
Certificate issuer: /CN=314d088578ec0e29b04b43e901493586726364fd
Certificate serial: 019752343F7991BA2A152E24D506F21AE156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
Manifest number: 12B9
Signing time: Mon 09 Jun 2025 01:00:45 +0000
Manifest this update: Mon 09 Jun 2025 01:00:45 +0000
Manifest next update: Tue 10 Jun 2025 01:00:45 +0000
Files and hashes: 1: MU0IhXjsDimwS0PpAUk1hnJjZP0.crl (hash: 3NSr+mbT5iOQmfcy1whusMhbNSQY2AITPZuK0ZeRShs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:34:3f:79:91:ba:2a:15:2e:24:d5:06:f2:1a:e1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=314d088578ec0e29b04b43e901493586726364fd
Validity
Not Before: Jun 9 01:00:45 2025 GMT
Not After : Jun 10 01:00:45 2025 GMT
Subject: CN=818a93628c28305e3164744d67b3984855714974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:f2:d0:c5:50:2d:f0:77:f8:92:04:15:82:
4c:9d:41:8f:8a:54:94:f6:03:1e:c4:6f:a2:fc:91:
50:b8:63:93:ed:31:c6:5a:f4:28:55:a9:67:ad:5d:
e5:57:d4:50:d8:28:68:f5:08:2e:5b:0b:f0:7e:ae:
3d:3e:fb:7a:e1:54:d4:a6:45:54:e1:1e:ff:fb:d8:
96:b1:92:27:c7:ee:1b:5e:02:17:31:d0:c2:df:14:
53:ef:b9:f6:db:79:06:cf:7e:fd:9e:db:82:76:55:
ac:55:6f:fc:04:39:f6:d3:28:fd:f7:f8:fb:40:a1:
b1:c2:89:cd:11:bb:4b:3b:5a:dd:47:52:f7:a6:14:
c9:68:e0:f0:53:23:75:fe:34:50:e7:7e:09:2e:c2:
39:28:f3:61:7e:00:6d:1b:bd:30:75:cc:23:a7:c3:
b3:18:ee:4c:2d:9c:8d:19:3c:60:fb:40:35:21:c6:
e1:86:db:05:5e:23:ea:e4:83:fc:2c:c1:68:3e:16:
b2:70:50:21:ca:db:ae:40:26:29:ff:32:5d:53:48:
4e:e6:d8:c7:9c:2a:b4:2e:eb:62:49:ec:fc:55:29:
38:b2:37:34:1e:1e:f3:b1:0d:d5:20:71:b4:04:7f:
4e:8e:6d:e5:c6:ad:4a:6b:2d:2e:b4:97:43:b3:51:
38:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8A:93:62:8C:28:30:5E:31:64:74:4D:67:B3:98:48:55:71:49:74
X509v3 Authority Key Identifier:
keyid:31:4D:08:85:78:EC:0E:29:B0:4B:43:E9:01:49:35:86:72:63:64:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:1e:bd:3d:9e:98:5f:01:9f:eb:a2:8f:a1:fb:0f:e8:20:4d:
b2:08:2c:c5:4d:7d:be:94:15:8d:c1:2c:f5:0c:86:ee:3e:dc:
e1:c1:f6:2f:6a:6e:45:ae:17:cb:5b:1a:8a:27:89:ef:58:4e:
b5:6a:a0:0d:f3:b8:eb:26:9a:eb:d4:ce:fb:eb:09:ae:f8:1e:
4f:c2:5a:ba:f2:f3:ec:d6:23:e2:1e:78:8b:f8:2f:08:64:23:
ee:ec:bd:0b:c6:e7:2e:37:ba:42:46:19:22:d0:9e:9f:52:ac:
3b:94:15:05:51:03:a1:a2:57:7f:f3:23:2a:c8:18:69:e6:a0:
cb:fa:35:29:2e:de:de:35:82:c9:c8:4c:e8:f1:c2:32:85:eb:
01:bf:da:d6:7c:fc:f6:dc:1f:b0:1e:15:31:0f:c3:7e:27:40:
38:ad:15:9c:14:7f:c5:fc:8f:3e:b8:a6:14:4d:a3:8c:0f:4a:
c1:80:08:82:19:0b:f3:99:54:7d:5d:21:6d:6c:44:44:63:af:
7f:6a:06:4d:3b:62:58:9b:20:7b:c6:05:d7:7f:75:f6:26:6f:
ac:f8:7d:db:aa:5a:33:f6:98:05:3e:f0:f8:af:8e:c9:27:68:
52:07:90:24:e3:c8:9d:18:b2:75:7d:04:ee:ff:49:d3:70:ce:
f6:82:8a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:39:49 2025 by rpki-client