Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
File: FMuhsMMFzGL5KXwtmRiZRbl3leE.mft (raw, json)
Hash identifier: 2y0MhUYW9jzco9gyr5IkeDTau+IGdBa6O7JpKoO0sGs=
Subject key identifier: 9F:FD:1C:A9:54:8E:E1:48:DD:D2:DC:64:CA:3D:13:18:90:24:52:78
Authority key identifier: 14:CB:A1:B0:C3:05:CC:62:F9:29:7C:2D:99:18:99:45:B9:77:95:E1
Certificate issuer: /CN=14cba1b0c305cc62f9297c2d99189945b97795e1
Certificate serial: 019749D611EB70EBA11A5952C433CFA02BA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 10:00:55 +0000
Manifest this update: Sat 07 Jun 2025 10:00:55 +0000
Manifest next update: Sun 08 Jun 2025 10:00:55 +0000
Files and hashes: 1: FMuhsMMFzGL5KXwtmRiZRbl3leE.crl (hash: iQodSI6ufBG0ZKwqOenireoeR95GVKYR4zII4Bzw+Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:11:eb:70:eb:a1:1a:59:52:c4:33:cf:a0:2b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14cba1b0c305cc62f9297c2d99189945b97795e1
Validity
Not Before: Jun 7 10:00:55 2025 GMT
Not After : Jun 8 10:00:55 2025 GMT
Subject: CN=9ffd1ca9548ee148ddd2dc64ca3d131890245278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3d:d3:1b:35:5a:45:79:89:21:34:ea:2b:c2:
5e:38:64:4b:40:9e:92:d0:fc:7d:e7:b5:0c:1c:b4:
c3:85:3a:c9:00:de:ba:f5:dd:d8:96:e3:92:54:8a:
ef:e5:14:f2:fd:5f:9a:43:66:1c:6c:4e:2c:85:24:
78:a0:1a:db:f6:19:ba:3b:f3:54:a0:02:d5:6d:3b:
b2:15:93:cd:ef:10:7d:f4:43:32:82:ea:4f:6e:13:
54:77:4a:30:95:10:b5:28:54:1c:d3:d4:b6:24:6b:
7c:05:3c:79:d2:3a:4d:27:21:84:2e:f5:d0:05:55:
fc:f2:95:dd:a0:12:ed:5c:8d:5a:bd:a1:40:74:ab:
eb:cd:41:d8:c7:86:24:3e:07:2b:6e:a8:0e:25:60:
94:b1:d6:8a:66:3d:5b:e0:68:67:ff:6c:64:b9:f1:
48:64:f8:cf:ef:d4:20:47:8f:6f:dd:a7:c8:f6:97:
46:40:e6:da:ca:a9:d5:b7:97:78:c9:b4:c6:29:2a:
e0:18:eb:5f:67:07:ba:57:bc:a3:b1:1e:0d:a6:9f:
5d:5b:0e:48:bc:95:66:79:d9:6a:99:66:8e:cd:95:
33:72:b3:9f:f6:6f:3b:9a:7b:ba:76:a1:72:e1:67:
9c:12:1f:10:f8:8f:ad:f3:8f:ed:3f:f5:83:6a:5e:
23:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FD:1C:A9:54:8E:E1:48:DD:D2:DC:64:CA:3D:13:18:90:24:52:78
X509v3 Authority Key Identifier:
keyid:14:CB:A1:B0:C3:05:CC:62:F9:29:7C:2D:99:18:99:45:B9:77:95:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:65:8e:9e:35:3c:c9:7e:a5:bb:c7:1e:8d:71:10:60:af:3f:
57:0f:04:67:0a:92:bc:5e:99:01:de:da:04:0f:0f:3d:1d:6c:
e2:88:a2:98:bc:8f:38:30:bb:a5:a5:59:7c:06:74:17:38:f5:
1e:87:48:6c:b9:72:03:64:5f:09:96:b2:9f:e1:7b:40:5b:57:
4f:b5:c7:a8:a1:0a:e0:23:6e:75:44:25:0a:17:b7:2b:bb:bd:
00:fb:6c:20:55:29:d1:4e:fd:41:5b:ca:37:69:71:4f:05:ea:
75:e4:f0:1c:7e:a2:97:8e:20:f5:a2:69:01:f3:88:80:d0:0e:
2e:67:73:4a:33:cc:e4:51:c3:ff:80:9e:2c:45:3c:f7:45:fe:
44:2b:75:15:9c:51:9f:81:3e:17:55:cd:fe:79:a6:64:1f:ce:
cd:fb:25:3c:35:c1:61:eb:93:9f:91:4a:29:d8:46:da:40:f4:
32:10:86:3d:e1:7a:a9:c5:1f:46:8c:99:5f:30:dc:f7:f4:29:
6f:1b:3d:77:12:c7:c3:48:cd:63:09:d2:77:a7:0b:f9:ab:84:
9b:47:fe:2e:bc:91:5b:14:db:8e:18:9b:27:53:d5:f8:84:0f:
c8:cd:3e:0b:ee:09:63:53:08:3e:b5:a7:b4:e9:0f:10:95:22:
4f:da:ae:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1hHrcOuhGllSxDPPoCukMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0Y2JhMWIwYzMwNWNjNjJmOTI5N2MyZDk5MTg5OTQ1Yjk3
Nzk1ZTEwHhcNMjUwNjA3MTAwMDU1WhcNMjUwNjA4MTAwMDU1WjAzMTEwLwYDVQQD
Eyg5ZmZkMWNhOTU0OGVlMTQ4ZGRkMmRjNjRjYTNkMTMxODkwMjQ1Mjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT3TGzVaRXmJITTqK8JeOGRLQJ6S
0Px957UMHLTDhTrJAN669d3YluOSVIrv5RTy/V+aQ2YcbE4shSR4oBrb9hm6O/NU
oALVbTuyFZPN7xB99EMygupPbhNUd0owlRC1KFQc09S2JGt8BTx50jpNJyGELvXQ
BVX88pXdoBLtXI1avaFAdKvrzUHYx4YkPgcrbqgOJWCUsdaKZj1b4Ghn/2xkufFI
ZPjP79QgR49v3afI9pdGQObayqnVt5d4ybTGKSrgGOtfZwe6V7yjsR4Npp9dWw5I
vJVmedlqmWaOzZUzcrOf9m87mnu6dqFy4WecEh8Q+I+t84/tP/WDal4jHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/9HKlUjuFI3dLcZMo9ExiQJFJ4MB8GA1UdIwQY
MBaAFBTLobDDBcxi+Sl8LZkYmUW5d5XhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk11aHNNTUZ6R0w1S1h3dG1SaVpSYmwzbGVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lNGExNjctNjZhNy00ZmU3LWJjNDYt
MjMxMWZmODc3NzIyLzEvRk11aHNNTUZ6R0w1S1h3dG1SaVpSYmwzbGVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9lNGExNjctNjZhNy00ZmU3LWJjNDYtMjMxMWZmODc3NzIy
LzEvRk11aHNNTUZ6R0w1S1h3dG1SaVpSYmwzbGVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeGWOnjU8
yX6lu8cejXEQYK8/Vw8EZwqSvF6ZAd7aBA8PPR1s4oiimLyPODC7paVZfAZ0Fzj1
HodIbLlyA2RfCZayn+F7QFtXT7XHqKEK4CNudUQlChe3K7u9APtsIFUp0U79QVvK
N2lxTwXqdeTwHH6il44g9aJpAfOIgNAOLmdzSjPM5FHD/4CeLEU890X+RCt1FZxR
n4E+F1XN/nmmZB/OzfslPDXBYeuTn5FKKdhG2kD0MhCGPeF6qcUfRoyZXzDc9/Qp
bxs9dxLHw0jNYwnSd6cL+auEm0f+LryRWxTbjhibJ1PV+IQPyM0+C+4JY1MIPrWn
tOkPEJUiT9quQA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:50:19 2025 by rpki-client