Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
File: mu2VdsknICkWjE0aQXXRp8ocUe4.mft (raw, json)
Hash identifier: cJKQUce3VNAZbONlghLyXhE0Ng+WipG7lgpQ4QRSbZY=
Subject key identifier: 25:FE:18:7B:2A:B5:A9:71:5D:7E:2B:C6:7D:18:2E:E9:6D:32:1B:EA
Authority key identifier: 9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE
Certificate issuer: /CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee
Certificate serial: 01974D7BB91AA37D00792497DD4E851E98AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
Manifest number: 0EA0
Signing time: Sun 08 Jun 2025 03:00:43 +0000
Manifest this update: Sun 08 Jun 2025 03:00:43 +0000
Manifest next update: Mon 09 Jun 2025 03:00:43 +0000
Files and hashes: 1: MiKRdbGABW7H7vIb5R-saUTi7Ps.roa (hash: IcsqNxh/vQa5gPXIyGMaar+4UAAjRSfgokvENVkA4RM=)
2: mu2VdsknICkWjE0aQXXRp8ocUe4.crl (hash: +clQsGSd990Pk/jUiMR3/TwtlxcD51ajOXlF4H2cqf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:b9:1a:a3:7d:00:79:24:97:dd:4e:85:1e:98:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee
Validity
Not Before: Jun 8 03:00:43 2025 GMT
Not After : Jun 9 03:00:43 2025 GMT
Subject: CN=25fe187b2ab5a9715d7e2bc67d182ee96d321bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4a:5b:ea:9f:cd:b8:ba:bb:26:4e:e5:be:f1:
81:95:6c:e1:44:d5:b5:ca:da:4e:cd:6e:5b:ca:ff:
bc:5c:88:a1:e5:c7:95:ff:16:0d:0c:d3:64:22:73:
c2:16:de:26:5a:38:a1:9a:21:03:de:0e:67:3d:da:
6c:05:85:27:fb:91:9a:59:3d:fb:15:e8:1e:c3:ac:
6b:26:77:2f:58:15:24:2d:5b:52:57:8e:40:d1:37:
80:19:b2:88:2f:0c:bb:c1:52:2e:f9:72:08:fd:ee:
15:3e:5e:10:eb:b5:5c:b7:1a:48:72:04:1d:02:36:
57:24:47:6a:28:7e:a1:d0:7f:38:8c:ca:10:43:0f:
fe:2a:3a:30:60:a5:f0:24:70:10:be:25:ba:68:88:
a7:15:cc:f5:35:7b:d4:1a:84:35:20:19:59:c9:ed:
ed:07:7a:03:c7:9e:28:36:6e:28:91:44:00:39:53:
6d:71:8f:11:4f:4b:dc:fe:2b:92:6b:a6:96:3a:a9:
1b:40:4c:a2:37:13:6a:dd:5a:1f:19:6c:70:1f:2e:
cd:05:95:d2:43:35:ca:94:45:14:30:af:5f:8e:3a:
31:e5:21:4d:08:9a:07:cb:8b:2c:e4:af:53:3a:39:
0b:57:14:fc:9c:96:7a:6d:66:ad:7c:04:da:76:a3:
54:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FE:18:7B:2A:B5:A9:71:5D:7E:2B:C6:7D:18:2E:E9:6D:32:1B:EA
X509v3 Authority Key Identifier:
keyid:9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:df:8d:28:93:45:e4:91:42:38:eb:ad:a5:ac:bc:e4:d4:4a:
57:a2:d5:89:5f:50:e2:1f:5b:f6:53:54:9c:8c:9e:f7:cd:9d:
43:a4:b0:76:96:44:81:54:7d:23:21:07:66:26:57:a4:ff:c1:
34:08:30:52:e0:fd:d3:a1:9f:22:37:88:a4:1d:c9:61:09:1b:
fd:c8:7b:d3:bd:88:14:e1:b8:33:7e:08:6a:73:a7:00:ef:d6:
65:cc:81:23:91:03:90:50:16:40:9f:0a:36:35:f9:ac:68:dc:
15:74:17:ff:78:7c:74:1d:f3:d5:b0:a3:05:a2:70:cc:fa:91:
e4:ec:80:72:45:ba:28:59:a7:6c:d9:0d:a2:a3:0e:b4:6a:77:
f4:83:65:cc:4c:69:54:09:ce:41:3c:db:d5:e7:90:b7:a4:ac:
e4:b3:88:45:0d:b3:5f:f9:cf:ad:1e:71:0b:65:34:a9:71:c0:
04:55:ea:f9:a2:99:8a:91:92:0d:0e:e7:b0:db:6c:6a:e9:73:
e0:2d:a7:fd:4f:e7:de:6f:ca:61:78:e3:ef:2a:05:f3:c8:36:
3b:eb:b7:81:69:96:24:ab:cd:39:e8:fa:57:f1:ed:1b:fa:fa:
b4:df:90:56:a4:6b:05:8a:78:5c:e8:1a:fa:a1:27:bb:fb:5e:
7b:8b:7e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:46:25 2025 by rpki-client