Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
File: MusrUeN0jCUnQC5oYBqIkSiDoFg.mft (raw, json)
Hash identifier: VwebvUo7qYAanrzB/GcMfE7WpzPltny4Vu4twMPx3Bg=
Subject key identifier: C7:D2:F5:D5:85:8E:93:9E:83:BC:D9:21:FD:13:31:DD:12:D4:A1:71
Authority key identifier: 32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58
Certificate issuer: /CN=32eb2b51e3748c2527402e68601a88912883a058
Certificate serial: 01964F6CA7EE1700371C51C10332FC2EBD90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 19:00:43 +0000
Manifest this update: Sat 19 Apr 2025 19:00:43 +0000
Manifest next update: Sun 20 Apr 2025 19:00:43 +0000
Files and hashes: 1: KhlRzejfpvDxwhcPEcTkW8z6UJk.roa (hash: OH1bpS6azjDuSrz2eDsCxiLR1IWtc/vamDUbBv4QJmc=)
2: MusrUeN0jCUnQC5oYBqIkSiDoFg.crl (hash: 5l7ZVonNM0NNA8ifPNhl/d4nOdL+0KDc3pWp8KEgAXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:a7:ee:17:00:37:1c:51:c1:03:32:fc:2e:bd:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32eb2b51e3748c2527402e68601a88912883a058
Validity
Not Before: Apr 19 19:00:43 2025 GMT
Not After : Apr 20 19:00:43 2025 GMT
Subject: CN=c7d2f5d5858e939e83bcd921fd1331dd12d4a171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:df:a7:f6:14:29:22:1c:29:52:3a:df:01:41:
d8:73:b5:28:b7:08:89:13:53:6e:da:d8:f3:17:43:
9e:37:68:4b:78:96:b8:9e:6b:b1:bf:c1:ec:c7:68:
62:96:80:0e:39:e7:6b:41:55:c3:3f:cc:79:8e:df:
c3:ce:53:2c:3d:76:22:36:12:73:b5:88:07:de:79:
80:b2:ec:ff:a1:81:d7:d7:d3:02:2c:69:fe:77:da:
2c:fa:23:a8:5d:2f:0a:8b:8c:e2:67:81:ae:20:fc:
a4:4c:58:9e:3b:1c:2d:53:77:e0:0e:97:01:8b:34:
b6:bf:cb:5a:8e:d9:88:a4:fb:af:51:46:a2:2d:bb:
91:11:3e:06:b3:dc:92:00:92:fa:df:eb:3e:c1:b4:
e9:b2:8e:a2:ae:70:65:ba:a6:cb:18:f0:47:d2:83:
cf:f7:2d:4f:d4:89:a5:92:a4:d7:eb:58:a4:23:a2:
e9:a3:c8:e5:6d:69:b3:0a:70:fe:c0:9c:71:26:b3:
8a:14:ec:47:e5:8b:a1:46:a5:1c:c5:95:7e:52:50:
eb:fe:2c:e4:04:de:7b:ac:b3:4b:03:be:26:d1:ca:
9e:32:0a:d7:0e:cb:6e:b4:1d:06:35:f6:50:2d:aa:
14:7e:19:11:88:0c:3e:02:5c:92:ed:93:6d:7b:ff:
e9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D2:F5:D5:85:8E:93:9E:83:BC:D9:21:FD:13:31:DD:12:D4:A1:71
X509v3 Authority Key Identifier:
keyid:32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f5:12:b8:45:15:36:e0:f2:40:b7:bd:53:13:10:a1:78:94:
e4:17:77:a2:db:81:49:ac:6f:a4:d0:9c:0e:42:b8:bc:45:38:
9a:77:09:16:1a:26:99:19:3d:39:2b:dd:6d:14:ca:67:dc:98:
3e:f3:96:bb:9c:2c:88:dc:1b:b3:1a:25:37:db:26:f2:91:92:
84:c2:87:20:b2:b3:70:04:03:8f:08:c9:84:1e:7b:33:b2:c1:
62:03:76:db:e4:be:70:b8:a7:d4:9d:4f:25:66:29:83:15:07:
db:b5:b6:99:39:4b:c1:c0:f5:18:f1:de:97:24:3d:16:ee:e2:
9c:28:ea:d7:0f:ef:0f:29:51:7e:4a:a7:42:52:bf:9c:11:0f:
2c:b3:89:00:8e:0a:b6:bb:8b:51:f5:c4:9f:56:6a:bc:d1:36:
50:13:76:78:91:ff:96:3e:e1:7e:2a:22:f5:4d:69:ef:9a:e0:
98:02:f4:47:e4:cb:05:61:c6:fb:e3:ae:e6:a9:12:1d:dd:a2:
d2:3e:ca:c5:e5:18:95:18:26:c3:bf:10:c4:82:de:24:be:4f:
be:e5:67:68:62:b5:a1:21:a1:a8:0d:b1:4c:c8:be:1f:90:15:
75:94:ae:a6:b5:cb:92:82:bd:db:88:04:d4:2c:ed:91:4b:e9:
e3:b8:95:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:13:44 2025 by rpki-client