Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
File: muOJscw5niFvztjTnsPuifwguDk.mft (raw, json)
Hash identifier: UBFp4LJkM3P53jK6sKWTNQtZ1g5vlySp8YFkcMOuekQ=
Subject key identifier: E9:9D:01:CE:64:73:3D:CA:E1:B2:8B:61:E3:3C:3F:BA:F9:E5:A1:CC
Authority key identifier: 9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39
Certificate issuer: /CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839
Certificate serial: 019752A260FE9E5A6C094C0754692169A2F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
Manifest number: 1583
Signing time: Mon 09 Jun 2025 03:01:02 +0000
Manifest this update: Mon 09 Jun 2025 03:01:02 +0000
Manifest next update: Tue 10 Jun 2025 03:01:02 +0000
Files and hashes: 1: Q5quNHtUe1gA-TqHlWvHzX8gMwA.roa (hash: OcDB3dr6mB13HmStrHlq8aYMZtKWBgjyeIYXKmgVBnM=)
2: muOJscw5niFvztjTnsPuifwguDk.crl (hash: /mgxa4inOAUHrQtqthKdSqSoQsx2rWr5t8VGnAq39TA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:60:fe:9e:5a:6c:09:4c:07:54:69:21:69:a2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839
Validity
Not Before: Jun 9 03:01:02 2025 GMT
Not After : Jun 10 03:01:02 2025 GMT
Subject: CN=e99d01ce64733dcae1b28b61e33c3fbaf9e5a1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6b:56:73:03:bc:90:d4:a4:f8:74:ed:0c:05:
dc:ba:04:7b:5f:93:e9:e6:67:3b:fa:2f:8e:5f:c7:
00:6f:fd:dd:2e:2f:b5:dc:fa:37:07:d0:0f:c8:47:
d7:96:17:04:f8:c9:98:cd:14:8e:b9:ba:69:c5:50:
e0:31:b1:bb:92:33:52:df:40:0c:10:af:04:ae:27:
8f:40:ec:8e:e7:7a:29:3c:d9:5d:fd:49:f0:d8:35:
5f:6a:37:78:6b:4f:a6:80:9a:cd:9f:a8:f3:7e:c7:
48:0d:ab:2f:5f:04:ff:63:99:00:4f:06:90:01:92:
35:2d:45:38:fc:29:9f:3e:c7:fa:b3:cb:66:c0:ef:
c8:4d:a3:be:d1:e4:3a:79:ba:ae:06:5b:1f:99:15:
e8:06:a8:3c:d2:95:ef:bf:42:99:19:45:d7:ee:99:
cc:06:81:91:67:60:e7:56:7f:e6:9a:58:30:2a:a0:
75:91:25:8d:33:99:f7:11:d3:71:7d:86:04:8d:ae:
d1:73:9b:55:9c:c8:16:c4:fd:62:1f:c3:31:90:0a:
f1:50:32:69:60:69:30:f3:9a:e6:26:62:31:62:ac:
06:71:e8:a2:b0:07:2f:a2:d8:01:62:8b:b4:23:d4:
c3:99:58:83:37:f6:25:a8:0f:1f:49:8d:85:73:52:
e0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9D:01:CE:64:73:3D:CA:E1:B2:8B:61:E3:3C:3F:BA:F9:E5:A1:CC
X509v3 Authority Key Identifier:
keyid:9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e2:fc:a1:af:b0:d1:da:b3:34:80:7e:86:0d:ca:32:bb:52:
0c:f0:02:91:c6:d8:a2:db:5f:2d:01:4a:c9:98:28:84:90:31:
54:de:1f:17:ba:8a:4f:c5:b9:b7:4a:cd:b9:f4:64:d2:3d:92:
f6:0d:72:93:da:5b:22:fe:d4:0c:1e:59:b6:1c:e3:b8:60:09:
fc:a1:f8:5f:d0:fb:04:14:95:24:ce:44:e5:a1:ae:ee:6a:f4:
47:7e:c9:7c:89:cc:3e:49:3c:2b:99:36:07:f0:e5:54:43:74:
b7:f7:23:c0:5a:f7:42:fc:5b:ef:de:75:56:4b:dc:cc:8d:e7:
fc:9c:e8:f3:41:46:98:ef:2c:a0:41:f4:3e:ce:2a:9f:5b:8c:
c4:2f:79:94:0d:77:4d:3a:09:7d:b6:35:02:9b:1f:f0:7d:d0:
ee:cf:40:27:26:5e:24:67:71:e1:74:ef:be:fa:df:2e:6c:58:
a7:0a:fe:66:a5:f7:64:b6:c2:c4:70:83:67:e7:72:4b:4e:95:
f3:38:b3:74:eb:cc:f1:aa:4a:59:a0:40:78:35:7f:bc:d4:c4:
4c:f7:0c:ca:80:94:43:d7:7c:4b:dd:07:19:87:07:2d:b8:da:
cc:ef:66:51:84:d8:aa:00:fc:3e:b9:10:4c:62:d6:22:09:d9:
2c:be:f2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:51:26 2025 by rpki-client