Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
File: kMuqazbmzWh0x47UWk-N1xcwMdk.mft (raw, json)
Hash identifier: o10Xnetx8pxP4sCLXZNLsjRvd+MoFknCa4tkPLc5Cck=
Subject key identifier: 8E:8C:0F:7A:36:EF:10:99:60:B6:B5:2B:8F:45:16:CC:46:98:27:19
Authority key identifier: 90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9
Certificate issuer: /CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
Certificate serial: 0197B70F2070737E3D323532A3EC188E6634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
Manifest number: 0B26
Signing time: Sat 28 Jun 2025 15:01:51 +0000
Manifest this update: Sat 28 Jun 2025 15:01:51 +0000
Manifest next update: Sun 29 Jun 2025 15:01:51 +0000
Files and hashes: 1: c4U2evb93678CsrZ2ZQQemAPoFw.roa (hash: 5ZLOIZ+BzX8i3ipSMR9csvqZ6+nojKYy3y5RkNukgEE=)
2: kMuqazbmzWh0x47UWk-N1xcwMdk.crl (hash: WJbtpTRQ7x/UuxyiduadCYyfqQKMEWEDwM+6/Dvn5Lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:20:70:73:7e:3d:32:35:32:a3:ec:18:8e:66:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
Validity
Not Before: Jun 28 15:01:51 2025 GMT
Not After : Jun 29 15:01:51 2025 GMT
Subject: CN=8e8c0f7a36ef109960b6b52b8f4516cc46982719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2c:94:a4:76:e0:26:a6:08:3b:fd:5a:bb:05:
02:56:02:d9:b3:78:a8:4f:de:af:88:50:86:3a:54:
97:87:61:7f:5d:8a:a5:76:d6:5a:24:d7:56:5b:0b:
d5:e9:73:b1:2a:55:af:e9:1e:1e:27:1e:b2:0c:98:
f7:20:d3:ad:b8:37:1b:d4:16:8b:c0:21:27:5d:1d:
9e:a4:c2:29:8e:cb:1a:95:59:bf:02:32:1f:56:12:
63:ac:d7:12:65:79:ed:56:cd:83:8f:4d:3d:31:6a:
73:78:86:66:0d:90:49:ea:34:b7:43:36:8b:57:aa:
88:78:08:36:5c:50:bc:29:69:12:90:aa:1b:89:da:
ab:e6:56:64:a6:9a:59:8a:b4:e8:01:31:94:e9:e1:
40:ee:04:2f:29:d5:87:2d:bd:aa:b6:1b:bc:88:71:
74:80:c3:92:d8:a6:1a:85:9b:fd:03:54:c9:f8:92:
3a:ec:8f:31:fb:71:f6:85:a8:09:c6:0f:fe:38:2e:
64:61:3e:e7:f2:1a:e8:ef:72:6f:68:ef:eb:77:0b:
1f:23:6b:3e:d2:23:00:ed:d8:ef:e6:09:e4:63:fc:
28:7d:12:fd:29:34:0e:58:89:2b:ac:c3:ac:fc:fe:
26:e3:b0:0f:f8:8f:81:76:f2:61:5f:c7:1e:0f:5d:
75:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8C:0F:7A:36:EF:10:99:60:B6:B5:2B:8F:45:16:CC:46:98:27:19
X509v3 Authority Key Identifier:
keyid:90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:53:ea:06:84:a0:f5:ff:58:1e:87:c9:21:73:50:cb:aa:c8:
62:f5:44:d2:c3:f1:c5:84:93:9d:4e:d0:f6:1d:68:02:41:8a:
35:ac:4e:bf:e4:28:57:f8:4a:62:ec:21:15:27:bc:85:b5:d3:
ed:b1:8b:05:d8:15:ab:33:3e:0a:a1:d8:1b:fb:48:ae:80:c4:
02:e9:18:cc:c1:62:53:06:f3:76:a7:d2:f4:71:b9:6f:b5:d6:
cc:9e:78:d5:e0:f0:78:22:43:d1:bb:6d:8f:6e:28:b3:b2:8a:
05:80:ea:a5:c0:83:1f:11:14:8c:05:5f:3a:fb:2a:d9:af:b5:
00:7e:49:6c:5b:1d:b5:d0:81:57:55:72:bf:83:6b:82:9c:12:
35:0b:b5:da:4d:54:5c:7d:cb:47:28:d3:86:33:2d:63:7e:06:
1d:16:b9:b1:18:0f:1d:ce:15:c5:50:fa:a0:92:83:19:11:d9:
ea:ad:81:c0:23:68:b1:95:c8:d9:ce:de:c8:be:3f:bb:9d:fc:
45:66:e6:96:60:ad:63:1d:44:ec:fa:ef:d0:1d:21:6b:f9:56:
88:3b:d3:ee:3c:67:57:12:86:6b:40:43:73:61:95:7d:86:36:
3f:e9:26:45:32:5c:56:55:11:97:87:2e:3e:75:8e:cd:77:7c:
2a:9e:d6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:01 2025 by rpki-client