Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
File: 1-MUB87-tSa1OVubkwY90Dt6gXSE.mft (raw, json)
Hash identifier: 8TL/HVE1lM3LUkb8Btoix2Aas39iBX6lfgWAk3vE1sY=
Subject key identifier: FE:AD:A4:27:58:F8:6A:57:E5:02:58:31:8C:AA:95:31:BB:F6:5D:3F
Authority key identifier: F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
Certificate issuer: /CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Certificate serial: 019768BC38DEE6738FF5988D04B310892BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
Manifest number: 1171
Signing time: Fri 13 Jun 2025 10:00:55 +0000
Manifest this update: Fri 13 Jun 2025 10:00:55 +0000
Manifest next update: Sat 14 Jun 2025 10:00:55 +0000
Files and hashes: 1: 1-MUB87-tSa1OVubkwY90Dt6gXSE.crl (hash: aBjVU84MuVuKrxKoajPPNR3ZEujxdZSX/5fJpk0piR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:38:de:e6:73:8f:f5:98:8d:04:b3:10:89:2b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Validity
Not Before: Jun 13 10:00:55 2025 GMT
Not After : Jun 14 10:00:55 2025 GMT
Subject: CN=feada42758f86a57e50258318caa9531bbf65d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c0:66:9c:65:3d:a2:38:2e:20:2b:2f:7a:54:
4b:44:83:c7:67:5c:75:13:2d:29:b2:fd:20:45:42:
eb:e9:3a:ac:e4:89:f9:89:7d:ce:c9:37:14:ab:dc:
60:27:b1:ab:3f:69:11:b7:32:c3:91:ac:a8:9f:bd:
3a:40:37:10:73:c4:ac:a0:d7:90:d7:4b:79:14:14:
31:fd:4c:7e:f5:c4:f2:07:cc:80:d7:38:17:1f:ad:
83:49:54:4b:87:df:d4:79:ab:6d:15:ea:32:06:81:
7c:c6:28:da:80:6b:28:2a:94:4b:65:e2:90:68:b1:
91:bc:88:c9:3c:46:59:91:7f:f7:16:a5:4d:4c:cd:
fe:70:fe:82:61:53:54:57:3f:30:13:be:ad:a8:63:
40:c9:89:68:c3:a8:3e:3b:a5:30:15:fe:b5:d0:21:
80:e8:d3:94:9b:ed:a4:19:b3:52:81:5c:7d:be:12:
b0:02:1c:d3:ea:13:58:79:e1:77:ba:3a:74:df:1f:
99:2d:d2:80:0d:62:f3:1e:8f:50:ff:a5:c5:77:3d:
c9:31:86:8f:9b:8e:d9:03:c2:3b:9f:dd:fe:62:fa:
27:81:e1:09:3c:a7:a2:9b:9b:1a:44:f4:66:ce:b9:
ca:a2:8a:0d:a0:47:3d:0f:21:4c:46:e3:36:05:b0:
2d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AD:A4:27:58:F8:6A:57:E5:02:58:31:8C:AA:95:31:BB:F6:5D:3F
X509v3 Authority Key Identifier:
keyid:F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:57:47:ad:f2:a9:7c:e2:bd:e2:c3:49:fa:0d:f9:9f:99:68:
c7:19:ff:4b:f4:6b:54:17:a1:2e:62:68:37:8e:fa:b8:06:4e:
03:68:76:a8:f0:93:d5:fd:e9:28:0c:0f:d5:99:81:66:12:ab:
e0:9e:00:e3:d5:a7:0e:ca:a6:45:29:03:d8:fa:4b:1e:5b:01:
f5:c1:4c:61:fa:6b:49:42:fd:fe:59:57:e7:63:e0:4e:77:80:
7e:ce:44:46:88:81:c8:a5:35:c9:72:56:42:e0:9d:78:09:56:
8c:13:d0:bc:a0:0f:4d:86:9d:2e:11:7f:a6:9e:51:ea:6a:04:
e7:e0:64:97:42:a4:35:a0:6a:de:33:c3:fe:6f:b3:7e:49:e6:
64:04:f0:27:fc:5e:63:86:1a:4a:a9:ed:0d:6d:83:33:b3:ff:
94:54:fc:ba:1f:ed:33:61:f9:70:aa:f3:45:a2:b4:d0:88:db:
2a:b9:ac:6b:36:58:81:03:e0:a6:58:de:c9:be:bd:ad:77:59:
f2:f3:41:16:ea:0e:a9:9f:4d:b9:ac:6a:56:f0:4a:98:ae:9f:
2a:bf:88:fa:3d:53:b7:03:07:16:1b:2a:eb:d7:a1:0d:ba:4d:
dc:ae:81:14:6a:47:92:c6:c2:88:2b:e7:aa:5b:fc:42:19:82:
40:35:19:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:49:54 2025 by rpki-client