Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
File: 1-MUB87-tSa1OVubkwY90Dt6gXSE.mft (raw, json)
Hash identifier: I+9w2AbYm2NohEhdTcW1zCq9yBchkKsx2wMktHz9M90=
Subject key identifier: 0B:32:52:41:35:CC:06:1E:A6:B7:51:07:67:81:28:9B:C3:00:BF:D2
Authority key identifier: F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
Certificate issuer: /CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Certificate serial: 01975948E9AF83CCFE62DD09A0B29C5ECC4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
Manifest number: 1169
Signing time: Tue 10 Jun 2025 10:00:39 +0000
Manifest this update: Tue 10 Jun 2025 10:00:39 +0000
Manifest next update: Wed 11 Jun 2025 10:00:39 +0000
Files and hashes: 1: 1-MUB87-tSa1OVubkwY90Dt6gXSE.crl (hash: e8IMiGltcBc3CPVNp3bIsUtGvW02hDoSgc4FiEJA3pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:48:e9:af:83:cc:fe:62:dd:09:a0:b2:9c:5e:cc:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Validity
Not Before: Jun 10 10:00:39 2025 GMT
Not After : Jun 11 10:00:39 2025 GMT
Subject: CN=0b32524135cc061ea6b751076781289bc300bfd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b1:1a:59:a9:da:1c:fa:a2:f6:09:99:72:6b:
a0:4e:46:f9:c4:18:9c:a2:16:e5:28:d2:5d:55:3a:
69:ae:23:ef:1c:75:c8:d5:2f:d5:d1:54:f9:0f:89:
7f:6b:04:f8:35:d5:d8:c5:79:e5:f0:58:3e:ac:d4:
f0:db:db:49:63:70:4d:3f:41:2b:4e:50:68:a3:dc:
94:7e:59:41:f4:b4:d2:4c:8a:45:0b:8f:b5:e0:e5:
e5:b2:26:cb:1c:aa:cf:9e:a8:01:27:f7:d8:88:15:
28:8e:56:bd:01:a7:ab:a4:ef:b3:f0:ad:d2:2f:a5:
a7:23:06:8c:b3:72:42:64:53:74:6f:5f:70:41:88:
6c:eb:1a:87:04:ed:88:e2:1c:17:c7:73:67:28:f5:
af:d7:38:6e:0e:de:51:ae:cc:d0:63:4b:fb:92:66:
1b:a8:61:19:e7:a7:b1:45:aa:4a:dd:41:0f:ca:37:
f8:0d:7b:5b:fc:a4:0f:ff:62:61:5b:01:89:9f:28:
b1:5b:e7:a1:7f:86:09:2c:50:7d:53:6a:90:b5:de:
74:df:48:c7:a7:30:0b:80:9e:49:02:cb:67:38:87:
c0:39:1b:e1:8d:20:82:66:2a:c0:ec:ab:9e:ac:2e:
7c:eb:d9:f2:31:94:60:20:71:14:f5:59:0e:02:1e:
ad:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:32:52:41:35:CC:06:1E:A6:B7:51:07:67:81:28:9B:C3:00:BF:D2
X509v3 Authority Key Identifier:
keyid:F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:55:6a:70:d0:49:85:eb:96:eb:12:a9:8b:14:e8:7b:2c:48:
b2:bb:48:55:39:9f:b7:75:1b:cf:9c:24:cd:36:3c:b0:2b:97:
a7:47:07:d5:e1:cd:4c:87:fa:a0:d2:ad:cc:86:68:c9:2f:66:
fb:24:c0:5e:fb:37:c1:17:08:60:93:e4:59:1f:f8:f1:93:f3:
37:90:e8:f0:40:54:82:20:57:73:47:5e:3e:a4:a7:63:63:98:
49:c7:5e:68:a3:45:41:ba:0b:96:85:52:59:f0:08:d7:28:03:
24:6d:1e:7d:f5:8b:ed:9d:0e:07:1b:df:39:6c:c0:4d:56:d6:
18:1e:01:2e:a6:57:f3:7a:b1:c3:26:af:5e:3d:2b:59:dd:b4:
79:af:f1:ae:96:0c:b6:5d:61:82:e2:ac:f4:8a:db:90:d9:a8:
3f:4c:64:4e:f7:87:2c:e5:a5:62:95:f6:2e:df:03:aa:d9:20:
d3:4d:dc:b1:39:47:fe:1c:99:3f:2e:de:32:65:a3:3c:a9:23:
4d:cd:94:d9:63:af:5e:63:09:1d:43:00:27:b6:d7:98:3b:94:
ff:a1:12:08:19:fe:24:1c:83:6c:6a:84:8f:05:30:62:a4:7f:
28:cd:3c:e6:53:e6:90:d7:00:ea:63:e6:aa:d8:16:5a:28:ca:
e6:62:22:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:26:23 2025 by rpki-client