Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
File: MU0IhXjsDimwS0PpAUk1hnJjZP0.mft (raw, json)
Hash identifier: t9nekr5++uKhMQnyRFKqWyw09mTDf1T1X73HbK5QOJw=
Subject key identifier: B7:69:6D:BA:30:E7:F4:70:1B:F9:87:DB:CC:89:A3:D0:A1:B5:F0:E1
Authority key identifier: 31:4D:08:85:78:EC:0E:29:B0:4B:43:E9:01:49:35:86:72:63:64:FD
Certificate issuer: /CN=314d088578ec0e29b04b43e901493586726364fd
Certificate serial: 0197B6A1A090CF4D3F655D990C2D65E28795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
Manifest number: 12ED
Signing time: Sat 28 Jun 2025 13:02:15 +0000
Manifest this update: Sat 28 Jun 2025 13:02:15 +0000
Manifest next update: Sun 29 Jun 2025 13:02:15 +0000
Files and hashes: 1: MU0IhXjsDimwS0PpAUk1hnJjZP0.crl (hash: dvdPpm01ukGZov90uguYQy4xlil4GcAOmHvmSUgCds0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:a0:90:cf:4d:3f:65:5d:99:0c:2d:65:e2:87:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=314d088578ec0e29b04b43e901493586726364fd
Validity
Not Before: Jun 28 13:02:15 2025 GMT
Not After : Jun 29 13:02:15 2025 GMT
Subject: CN=b7696dba30e7f4701bf987dbcc89a3d0a1b5f0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:62:da:72:b2:d3:86:01:9f:48:ed:e6:fe:16:
cb:55:94:0d:a3:e4:06:32:cd:0f:c2:a0:39:91:9f:
f2:75:18:82:b5:9e:b3:2f:49:72:a1:07:df:93:c4:
42:0c:71:4e:36:4c:bb:8d:ac:fa:ec:67:ee:6a:34:
f2:0b:20:98:4b:7e:10:c6:b2:11:ff:f1:e9:94:de:
05:b1:e5:07:e4:3d:0c:8a:f0:fe:8a:7a:87:d0:47:
e6:cc:5c:d9:45:c4:f2:d3:34:ed:5a:93:65:22:ea:
65:dc:61:4d:e8:60:b0:36:b5:d1:14:e1:0d:73:a3:
d3:83:ac:63:42:68:1c:1f:b1:7e:2a:e2:ea:c4:10:
36:69:45:bd:ec:1e:ba:c8:a4:ab:00:dc:bb:1a:b5:
44:89:d6:68:74:12:d3:ea:38:af:01:96:81:5f:71:
50:d8:7d:b0:bc:75:c1:1f:dc:20:b7:50:1a:8a:b5:
95:a1:e5:53:16:06:eb:98:77:ee:b1:6e:89:19:b2:
c9:ca:ca:83:85:21:1e:58:b5:b9:3f:78:63:5a:66:
34:79:b9:87:a5:4b:0c:ca:83:7d:1f:b9:c8:95:ba:
19:30:a2:78:b0:10:07:22:5d:96:d4:1d:55:1c:23:
e6:8d:56:88:8a:fe:e2:8c:36:a1:03:ca:6c:74:64:
32:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:69:6D:BA:30:E7:F4:70:1B:F9:87:DB:CC:89:A3:D0:A1:B5:F0:E1
X509v3 Authority Key Identifier:
keyid:31:4D:08:85:78:EC:0E:29:B0:4B:43:E9:01:49:35:86:72:63:64:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:26:f3:34:c3:e8:92:a8:cc:4a:58:f4:c9:f9:4b:8f:22:fb:
2c:5a:85:c8:55:57:34:d2:de:9c:61:9b:b0:48:46:ee:84:68:
8a:a6:aa:88:b8:d8:cb:be:5c:d2:0c:4b:3b:10:b8:33:df:a9:
c1:a3:f2:46:cc:cb:5d:58:9a:50:e3:6c:02:2f:e1:b2:a9:1d:
8e:5c:2f:4c:28:5e:a0:53:7f:e0:30:2d:3a:b4:41:e0:29:20:
3e:67:92:06:ce:ba:53:13:59:a4:da:cd:5b:0b:61:a5:a4:f3:
22:8e:22:37:15:ec:65:d0:ac:2d:bb:29:91:ba:e6:04:f5:04:
a3:3c:42:98:d0:30:65:d3:5c:e5:34:82:2c:12:b3:00:a8:a5:
41:14:e9:26:1e:74:e2:e3:95:e5:28:4f:3f:40:5c:3c:23:71:
d1:97:28:f2:be:2c:ec:b6:6a:fd:f0:09:2d:55:db:a1:b1:24:
c3:1f:95:5f:31:e2:36:ca:48:45:24:03:c4:52:67:a8:d9:5a:
19:44:97:cb:a8:d9:10:9f:6b:c4:f6:2e:df:b8:80:3f:0d:0b:
9f:da:37:aa:64:c2:dc:0f:c5:70:9d:97:5a:38:86:23:b7:7f:
a6:d3:31:94:4c:0d:31:02:56:f1:af:c5:5c:45:6b:06:9d:51:
25:7f:5d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:59:18 2025 by rpki-client