Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
File: Mu0BRXesc_-H7yDKb3V5XkyTf84.mft (raw, json)
Hash identifier: BNX7S7XINVkRIQ54Gs4jHy7H7ti2/5A2D0pfHY2V/vY=
Subject key identifier: E6:F1:19:8A:27:65:58:3A:0C:47:8F:26:3D:F5:A8:0C:5E:B8:C2:F9
Authority key identifier: 32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
Certificate issuer: /CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
Certificate serial: 01965425878860E6D65510E7986165881F64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
Manifest number: 06EE
Signing time: Sun 20 Apr 2025 17:01:07 +0000
Manifest this update: Sun 20 Apr 2025 17:01:07 +0000
Manifest next update: Mon 21 Apr 2025 17:01:07 +0000
Files and hashes: 1: Mu0BRXesc_-H7yDKb3V5XkyTf84.crl (hash: Iuah3hBWgyQaQCtshC3wtcSbYVG8oOzfaBam53VO478=)
2: Szpv7SbbTq_ZPkpVt0ZS-yigLYQ.roa (hash: tot/yU4vNOc3RqisHsJwZZdti1Jdkg5nZCtY1DuBRp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:87:88:60:e6:d6:55:10:e7:98:61:65:88:1f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
Validity
Not Before: Apr 20 17:01:07 2025 GMT
Not After : Apr 21 17:01:07 2025 GMT
Subject: CN=e6f1198a2765583a0c478f263df5a80c5eb8c2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:96:d5:6f:60:5f:63:1d:cf:2e:dc:e3:2a:07:
e8:c0:2e:2d:cd:c3:6d:bd:d3:57:3f:7c:9b:6e:8b:
f4:fa:56:4e:a8:89:85:95:08:aa:26:ee:51:12:67:
91:59:9a:4b:13:4c:1f:b6:30:d3:d2:45:a4:62:64:
04:f7:2a:63:3f:1a:ae:30:26:ee:48:2f:84:e7:15:
5c:28:ac:09:72:12:ae:09:a0:35:03:2b:28:d6:91:
7e:02:0e:d3:f1:43:35:84:40:de:18:d6:a6:79:64:
a4:71:63:e2:73:7b:cc:a3:01:76:5d:01:bd:bc:de:
07:cc:83:3f:12:9a:20:19:ec:62:07:bd:8e:64:22:
a2:87:0d:6a:36:a5:08:8c:40:bf:f9:1d:c7:24:62:
02:8b:74:63:2e:f9:b5:3e:e7:a0:5f:53:37:a3:26:
49:01:fa:42:82:a0:4e:72:79:44:e4:56:b1:5f:bb:
6a:a0:79:75:c2:4a:0a:38:d8:95:0f:e1:d8:a9:01:
d0:02:fb:ad:38:59:2f:c4:7e:fd:97:f8:6d:86:35:
a7:79:f0:40:c0:a8:4b:88:6b:17:4e:7c:25:f1:56:
63:0d:96:f5:cb:f6:1a:3b:b7:60:62:a8:8d:f7:32:
63:dd:98:5c:df:79:c9:34:7a:fd:a1:2f:24:17:1b:
20:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F1:19:8A:27:65:58:3A:0C:47:8F:26:3D:F5:A8:0C:5E:B8:C2:F9
X509v3 Authority Key Identifier:
keyid:32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d6:d2:fc:f3:a8:41:74:ac:67:6c:99:2a:e2:de:f3:d0:88:
0b:19:c8:45:fa:54:b2:28:bb:65:2a:45:2f:a8:c4:5d:df:7c:
b8:3b:07:b8:ac:43:a6:2a:d9:18:d3:7b:03:76:70:61:67:40:
27:64:f6:f6:f0:d2:04:d2:30:34:77:ea:f6:7d:e5:de:8a:77:
d6:2a:f2:bc:1a:45:3f:17:39:2e:0e:14:e6:b4:a0:34:e1:ab:
18:e1:93:eb:dd:3e:0e:79:f4:35:fd:2b:72:52:f6:ba:bb:d8:
23:d8:23:16:b2:6a:f1:98:4d:2d:35:3a:70:cd:db:57:75:61:
f4:7d:f2:27:75:96:da:2a:ad:97:97:71:e3:a5:4f:44:a9:a3:
0a:dd:fc:a3:da:e9:01:1e:72:d6:fd:77:2b:c0:79:66:1f:7f:
36:fa:bf:55:96:cd:4c:a3:42:7c:9e:46:be:02:e6:f6:35:47:
03:6d:e7:c1:cc:ab:75:e5:18:4a:af:12:7b:1c:82:24:39:53:
2f:a4:e5:bd:f4:59:23:bd:5e:fb:59:41:3e:2d:19:a7:e1:ba:
a9:66:c6:27:dd:f3:7e:de:71:f8:51:83:e1:bc:ff:fc:1f:9c:
a7:59:98:2b:2d:65:16:09:e3:18:09:88:de:b8:15:07:2f:2d:
17:78:a8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:28:43 2025 by rpki-client