Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
File: 1-MUB87-tSa1OVubkwY90Dt6gXSE.mft (raw, json)
Hash identifier: 7Tw866++/zU37tj8xoARPv23xp7mJ7OuVD7ND+yzdmw=
Subject key identifier: 41:20:95:B9:75:15:F8:5C:90:B4:A9:08:A5:AF:76:8A:79:7B:50:51
Authority key identifier: F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
Certificate issuer: /CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Certificate serial: 019922FA3126EF59A24D147149022D941AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
Manifest number: 1256
Signing time: Sun 07 Sep 2025 07:00:45 +0000
Manifest this update: Sun 07 Sep 2025 07:00:45 +0000
Manifest next update: Mon 08 Sep 2025 07:00:45 +0000
Files and hashes: 1: 1-MUB87-tSa1OVubkwY90Dt6gXSE.crl (hash: T/ewy8MgFvQR2+SSf0J8ywzqss/5pMHJvYMZ/xjxtSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:31:26:ef:59:a2:4d:14:71:49:02:2d:94:1a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Validity
Not Before: Sep 7 07:00:45 2025 GMT
Not After : Sep 8 07:00:45 2025 GMT
Subject: CN=412095b97515f85c90b4a908a5af768a797b5051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:68:1f:91:1f:24:27:cf:6e:bb:58:e6:17:4f:
14:68:42:16:5b:ad:e5:17:f1:67:76:e6:81:ba:17:
db:c2:94:d6:b9:25:ab:cd:94:d3:df:a0:26:0f:15:
c9:b6:b9:a0:5f:a9:6a:47:1d:a5:1b:93:9a:ff:51:
c5:3c:a2:b0:84:b0:f4:96:85:34:3f:45:6f:a5:c6:
79:d2:8f:da:66:a6:34:b4:14:96:56:ef:29:0f:b4:
ca:42:3b:5e:db:4f:8f:5d:f5:2f:34:5e:0d:1a:62:
c0:0f:20:0a:d6:d2:6a:43:e6:96:84:0d:af:4f:6d:
9e:90:6a:27:1e:2d:42:e6:de:6d:25:e9:dd:75:bf:
b1:cd:6d:1e:b6:03:ff:e5:a9:80:84:18:d0:f2:08:
05:2e:5b:2d:de:c8:2f:18:bd:0a:c1:d3:fb:62:12:
81:39:33:0b:d0:be:c1:2d:f8:49:c7:7e:3a:08:10:
f2:0a:d8:5b:c6:51:5a:8b:b6:c0:54:d1:d7:3e:ae:
d8:73:2f:d1:1e:38:a7:e1:3d:f4:3d:8d:e7:e2:96:
2d:b9:5d:3f:b8:53:0d:25:37:e6:1a:1b:70:83:34:
af:03:c3:b4:c2:16:c5:fb:c6:bd:6b:db:95:72:be:
2c:68:6e:8c:9e:15:26:f1:7e:f3:ba:9c:e9:45:46:
bb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:20:95:B9:75:15:F8:5C:90:B4:A9:08:A5:AF:76:8A:79:7B:50:51
X509v3 Authority Key Identifier:
keyid:F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a7:00:7a:23:b8:cc:af:df:ec:d2:7b:62:28:b5:de:86:f1:
98:47:d6:51:58:33:c7:06:05:16:10:80:ba:f6:a6:0a:ab:63:
9c:4b:be:0f:ea:97:00:41:55:16:b5:0b:3b:9c:e7:70:76:7a:
ec:2e:f3:c9:ff:53:4a:dc:19:46:d7:4a:52:cf:74:1e:b6:d6:
9b:4f:e1:64:18:f2:2c:29:61:27:c4:c9:b1:52:79:bf:cc:0a:
ad:34:38:f6:78:fc:e7:30:56:45:0a:36:5b:7d:5c:f8:8b:4b:
d9:50:80:78:5f:76:30:eb:06:ef:92:da:30:0e:f7:3f:50:c1:
a4:93:4c:b4:5f:6c:d5:14:bb:e0:0d:6c:6b:8c:8f:95:73:66:
22:ac:de:c0:75:39:ef:71:c3:66:40:92:47:c0:46:94:91:25:
51:b6:ae:28:49:3f:8b:6a:42:43:31:20:bf:52:f1:14:37:32:
3d:90:ab:4a:77:cc:ba:1c:4b:ea:13:98:df:06:77:ec:fd:22:
29:50:4c:d4:1b:45:32:ab:16:03:39:1f:53:71:6b:fb:da:93:
b4:5f:71:23:ff:cd:fd:f8:03:0d:4d:f3:4d:e9:94:69:fe:cc:
f6:f7:69:90:92:b0:bb:ce:78:f3:91:86:2a:e6:4e:30:82:ea:
de:0f:25:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:08 2025 by rpki-client