Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
File: muB8lKimr3pdGPTqrqeeJt-TIhQ.mft (raw, json)
Hash identifier: JhQltkoE9VRR2wKnUmhvxwariO/XRFlzalI1qSQFqBo=
Subject key identifier: 89:7E:35:1B:EF:23:A3:13:88:FF:69:25:04:E7:2A:A6:00:CF:A4:6B
Authority key identifier: 9A:E0:7C:94:A8:A6:AF:7A:5D:18:F4:EA:AE:A7:9E:26:DF:93:22:14
Certificate issuer: /CN=9ae07c94a8a6af7a5d18f4eaaea79e26df932214
Certificate serial: 0197526B0BD9630B39C92923A3F5C4DE6592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
Manifest number: 1587
Signing time: Mon 09 Jun 2025 02:00:36 +0000
Manifest this update: Mon 09 Jun 2025 02:00:36 +0000
Manifest next update: Tue 10 Jun 2025 02:00:36 +0000
Files and hashes: 1: hirmv4l90daqtziUonbqzbb8z94.roa (hash: 2pWfc5u+sM7C4s4+z6TKeGnl46lQEVqcp+2HcKGG7wg=)
2: muB8lKimr3pdGPTqrqeeJt-TIhQ.crl (hash: 0YPJ+UG590gclPDnC1wENT6JHDVNR2bE5oTfOvUUZrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:6b:0b:d9:63:0b:39:c9:29:23:a3:f5:c4:de:65:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae07c94a8a6af7a5d18f4eaaea79e26df932214
Validity
Not Before: Jun 9 02:00:36 2025 GMT
Not After : Jun 10 02:00:36 2025 GMT
Subject: CN=897e351bef23a31388ff692504e72aa600cfa46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3b:3d:cb:21:5b:02:71:5e:fb:97:d0:26:1a:
a9:53:5b:ce:a0:5b:88:bb:a0:07:c7:e1:72:1f:4e:
dd:86:37:9e:41:d9:00:7a:db:66:6d:ca:0c:44:d6:
b8:fd:b6:67:0b:de:44:e1:7a:3a:5e:a3:82:2a:bf:
52:bb:d2:97:01:53:0e:aa:11:7a:6d:e7:23:7f:e4:
45:b6:ac:31:d4:d4:5a:a3:9d:75:ce:85:15:51:98:
26:6a:e8:be:bd:85:d5:d7:3d:de:62:e5:c0:48:b5:
4d:b9:11:3e:da:de:27:14:37:29:91:4f:4f:fd:43:
b1:92:8f:27:74:98:ef:e4:20:a0:3b:48:42:83:4a:
0c:cd:35:ba:a3:b4:75:bb:8d:3e:68:da:21:03:4c:
8f:1c:e8:9d:4b:db:01:3b:90:ad:39:04:3a:f1:8d:
ba:e8:a2:d9:e5:66:87:79:c7:0d:81:ee:d2:77:6e:
6b:d2:4d:db:d9:51:f3:86:63:88:b4:14:a2:5f:dc:
22:b3:33:ff:99:62:85:9e:4e:5d:5e:c5:c8:77:8a:
7b:56:2c:76:65:6f:50:9a:bf:df:c5:d8:50:0b:97:
d9:37:e0:7b:a3:aa:14:c6:df:2b:ce:ea:65:1d:17:
59:f1:5e:15:ec:22:ae:2f:53:a1:8d:59:6c:e3:03:
b3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7E:35:1B:EF:23:A3:13:88:FF:69:25:04:E7:2A:A6:00:CF:A4:6B
X509v3 Authority Key Identifier:
keyid:9A:E0:7C:94:A8:A6:AF:7A:5D:18:F4:EA:AE:A7:9E:26:DF:93:22:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f5:dc:2f:f4:cc:e7:ca:a7:c6:ef:e7:0a:4e:83:e9:8d:51:
81:74:04:87:15:58:f4:2b:0d:55:97:e8:c0:35:01:9a:92:f4:
f0:3e:2e:dd:e0:86:79:fb:2f:11:ba:dd:b3:0a:a9:44:4e:92:
67:df:24:fa:af:74:6b:92:51:3c:56:a4:5e:f0:86:20:e5:12:
c3:bc:f7:81:ae:6e:34:81:53:eb:8e:e4:94:39:52:31:e9:dd:
f8:3a:5f:5c:cc:1c:e3:38:5e:94:75:96:6b:e1:3b:a4:47:e0:
13:a7:87:ca:3e:84:55:8b:1a:c9:0d:53:f9:35:17:af:56:62:
7c:5b:1f:ae:aa:e5:b4:27:a0:9f:8e:d8:96:2c:75:06:e6:ae:
87:ec:7a:ca:0c:38:33:e6:04:cf:e6:6b:79:1d:c3:93:4d:39:
92:d1:aa:dc:22:6a:0e:d3:d5:36:9d:a9:f7:d4:1f:7e:d8:a5:
42:57:2f:aa:fc:62:8a:fd:9b:a1:df:39:df:8f:d7:2d:c1:c3:
f5:4b:2d:03:f9:60:b4:13:14:ee:d8:a8:57:b0:f1:a4:db:19:
62:e4:55:e2:de:96:3f:27:46:44:f0:3c:93:93:43:fe:5f:fd:
f2:88:39:c4:56:19:ce:2d:7b:3d:f4:ac:69:7e:f6:04:ff:9b:
d9:78:93:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:51:17 2025 by rpki-client