Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
File: muJTTfUJyW7LgRvIXXbWK6rfPSk.mft (raw, json)
Hash identifier: R5zPCRV8Z3MuCKieZiwbbuZQVV5ITzjRMcokq+PPek8=
Subject key identifier: 14:84:BA:95:F9:57:01:4B:D4:98:98:37:CB:5C:43:2F:63:6D:E5:83
Authority key identifier: 9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29
Certificate issuer: /CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
Certificate serial: 0196520009F948707B057FA9EACDBA17AE68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
Manifest number: 091E
Signing time: Sun 20 Apr 2025 07:00:56 +0000
Manifest this update: Sun 20 Apr 2025 07:00:56 +0000
Manifest next update: Mon 21 Apr 2025 07:00:56 +0000
Files and hashes: 1: SkEoFqWz8Nesa-6bLQGwcsWuCyc.roa (hash: YBTkqmp/iQfLCssDb/tS/QsoGIchXV4bMdX9APnUYwY=)
2: muJTTfUJyW7LgRvIXXbWK6rfPSk.crl (hash: 9eShhhWoxs+DvvOtVgLuon6Yul6hHEFtyiD0eRQTzps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:00:09:f9:48:70:7b:05:7f:a9:ea:cd:ba:17:ae:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
Validity
Not Before: Apr 20 07:00:56 2025 GMT
Not After : Apr 21 07:00:56 2025 GMT
Subject: CN=1484ba95f957014bd4989837cb5c432f636de583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:c4:f3:ac:c0:b0:15:83:ff:9b:2f:85:10:
55:4f:13:fc:09:a1:11:54:4e:5b:c4:a7:e4:dc:1b:
66:02:fa:37:aa:19:f2:69:d9:60:c3:d6:0d:29:c1:
40:66:2d:d8:d0:9c:90:ae:22:9f:60:06:f4:35:74:
02:ae:f4:44:7c:ad:08:4b:f1:10:16:3d:c6:12:72:
d8:b3:6a:77:c1:1c:29:f5:24:1a:83:91:0e:ce:4b:
a4:76:80:bb:85:cb:b6:de:f0:48:ea:af:dc:75:ac:
21:0c:96:6d:2e:6f:ca:79:a1:0f:e6:c6:84:b3:3e:
cb:5b:7e:4c:21:6d:1e:c5:13:ec:68:c2:02:42:c7:
34:4d:78:3e:f7:b0:95:7c:8c:a3:35:8c:ec:29:f8:
bf:30:cc:15:bd:59:2f:d6:45:99:c1:1d:ab:c2:4b:
5c:70:79:59:19:1a:29:ae:b4:cf:e6:b4:9a:22:ac:
ff:59:c9:a9:7e:88:3f:d1:10:35:e7:93:0c:eb:2e:
e8:4a:85:2a:3d:d6:15:ab:a4:28:0e:25:0b:47:ac:
9d:ab:b1:6a:ed:e7:28:ea:c1:c7:e7:56:5b:3f:75:
4a:1e:73:82:42:a5:db:ab:6e:52:97:1f:0a:47:8d:
03:2e:45:17:f0:fd:14:58:0d:89:8d:94:29:21:93:
c4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:84:BA:95:F9:57:01:4B:D4:98:98:37:CB:5C:43:2F:63:6D:E5:83
X509v3 Authority Key Identifier:
keyid:9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d7:82:f8:8d:18:19:ea:3e:dc:bc:43:5d:79:9c:0b:5e:8b:
cc:6c:2f:bd:67:f7:63:06:1e:a9:d4:c4:29:00:3e:70:4a:c1:
17:28:d1:bc:a7:e8:a1:4c:50:5a:83:9d:a3:67:ef:96:98:d9:
f6:36:00:67:9c:d0:e7:ae:28:71:dc:00:f4:13:0c:70:8f:ba:
45:7e:0a:13:60:54:b8:1f:3e:ef:9f:55:67:0b:f7:a3:fe:ec:
b8:e1:b4:31:79:de:a4:ab:1f:f1:9e:02:bc:02:4f:45:1c:0d:
30:1c:ca:8c:b3:c4:a2:d0:c8:a6:26:9c:7f:bb:84:31:40:ed:
c1:3b:f7:ab:44:f1:34:02:2c:7e:e6:d0:be:18:5d:52:ad:de:
53:29:e7:92:a4:51:93:be:c4:19:7d:fe:eb:66:c5:21:87:bf:
41:21:1c:8c:08:6c:9f:7b:59:d0:36:b6:da:ac:77:db:df:3b:
c1:86:c9:8a:63:74:d7:73:c9:1d:c7:34:3e:eb:60:99:28:0d:
b8:7d:34:04:46:8d:4d:56:4c:47:df:0c:45:90:d1:61:f0:9c:
44:1a:c1:33:c2:5e:06:34:b0:b7:f2:02:84:a6:9a:a8:82:0c:
b1:83:65:d5:7d:3c:ae:9e:fe:5d:1d:c4:d7:3c:c7:91:61:98:
d3:0a:b5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:12 2025 by rpki-client