
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
File: muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft (raw, json)
Hash identifier: LE4a03rwC6xeW5IQLD+aTKt9w1sd3B6eGyIXZK5EB8w=
Subject key identifier: 51:93:60:5B:9D:5A:DF:B9:DE:64:B8:D6:39:56:98:5A:14:42:6E:B7
Authority key identifier: 9A:E0:08:15:D2:BD:04:1D:CC:0E:CE:06:76:56:BE:5E:6E:B1:2B:62
Certificate issuer: /CN=9ae00815d2bd041dcc0ece067656be5e6eb12b62
Certificate serial: 0197500F136E7B6BC173022156D30C65B85A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
Manifest number: 34
Signing time: Sun 08 Jun 2025 15:00:54 +0000
Manifest this update: Sun 08 Jun 2025 15:00:54 +0000
Manifest next update: Mon 09 Jun 2025 15:00:54 +0000
Files and hashes: 1: muAIFdK9BB3MDs4Gdla-Xm6xK2I.crl (hash: h+qIJeuiQqM89sCNeu9D2LfKfZKlhXE1rqsSurMk4t0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0f:13:6e:7b:6b:c1:73:02:21:56:d3:0c:65:b8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae00815d2bd041dcc0ece067656be5e6eb12b62
Validity
Not Before: Jun 8 15:00:54 2025 GMT
Not After : Jun 9 15:00:54 2025 GMT
Subject: CN=5193605b9d5adfb9de64b8d63956985a14426eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3a:7a:63:28:1a:8b:be:a5:58:6c:76:a7:c9:
11:b5:8f:1c:6e:27:0f:b3:98:4e:20:4e:eb:1a:c6:
4a:d3:d5:f6:3d:f1:5a:fe:e8:85:57:54:80:55:cc:
91:55:f3:92:66:53:c9:d7:aa:58:61:f8:ca:ac:cf:
8a:91:85:18:d9:78:ef:b1:73:14:22:3d:5e:ab:6d:
a2:cd:84:a8:ce:a6:c1:c5:4f:11:c6:7e:c0:12:cc:
14:a2:e8:8b:f0:8e:ad:7f:a7:fd:1f:9b:8d:dd:3c:
d1:fb:63:78:b2:dc:d1:39:8a:7d:da:05:9c:d5:6b:
48:69:b9:47:65:3f:fc:8f:d2:c1:10:70:12:e6:c1:
b1:db:42:8a:d9:94:ac:24:ea:a9:c1:0e:13:f5:17:
bd:f1:77:39:b6:c6:ae:c6:a8:70:69:35:41:57:ab:
8c:e1:d8:2f:63:59:11:6a:b5:44:88:e5:d3:83:c4:
43:de:ab:86:7c:89:bc:fb:50:7e:c6:55:7e:f3:06:
93:ce:ad:9e:d6:0b:38:20:b9:12:80:8d:69:6e:21:
ce:88:11:e6:1e:44:3b:e2:ae:c0:11:ea:19:c1:ac:
5c:95:5b:da:31:92:3e:d1:48:41:04:58:48:9b:dd:
f2:46:31:20:a7:1d:be:c9:b7:ad:bb:20:51:c8:a6:
b7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:93:60:5B:9D:5A:DF:B9:DE:64:B8:D6:39:56:98:5A:14:42:6E:B7
X509v3 Authority Key Identifier:
keyid:9A:E0:08:15:D2:BD:04:1D:CC:0E:CE:06:76:56:BE:5E:6E:B1:2B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6f:f5:38:a9:12:bc:ee:bc:b4:db:0a:61:34:91:fb:bd:f2:
d4:22:fd:2a:ee:50:1e:f3:2a:51:de:c3:2b:6c:ba:80:2c:11:
c5:de:8c:29:9c:88:41:c4:26:33:d1:87:91:f4:09:e4:95:17:
27:55:56:bf:05:f6:83:27:90:eb:7f:61:99:a8:fb:54:40:33:
7a:5c:9a:e4:43:a7:44:42:b6:87:7a:5e:41:47:42:c4:3b:dc:
fc:28:ba:73:10:be:64:81:6a:76:77:f1:77:e8:59:9d:08:cb:
ab:8e:ee:16:7a:69:15:17:d3:3a:fe:16:34:57:79:5a:04:d0:
f7:fc:e6:a1:83:83:ee:9d:dd:55:82:b2:8d:73:05:4d:72:75:
fb:1d:90:a1:7e:3a:06:23:3e:a4:21:ac:de:4a:c8:24:a6:d4:
c1:bb:11:a5:91:1b:eb:68:28:f8:02:e7:e2:8f:8c:06:81:5b:
c1:0c:d3:78:d2:1a:ef:30:ff:98:9f:37:cb:39:02:55:e8:db:
42:b0:30:cc:40:f5:e2:da:09:d7:ce:6f:02:ec:1d:c4:01:fa:
5d:d2:54:f2:22:80:74:66:e3:c2:66:c4:4e:49:b2:8e:24:51:
59:d5:54:4a:64:a9:89:b2:ef:6a:87:5e:6e:2f:32:73:37:b0:
f6:19:fb:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:22:15 2025 by rpki-client