Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
File: muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft (raw, json)
Hash identifier: Z1XSah+gON6eTUrHUzJ4v/zmDNrbiuHexpvO3GtxsMQ=
Subject key identifier: 0A:DD:EA:93:EA:3B:92:19:0B:49:F9:EA:23:93:B9:A8:A8:1B:1E:4F
Authority key identifier: 9A:E0:08:15:D2:BD:04:1D:CC:0E:CE:06:76:56:BE:5E:6E:B1:2B:62
Certificate issuer: /CN=9ae00815d2bd041dcc0ece067656be5e6eb12b62
Certificate serial: 0198D660F0F376B98673FD614482E2D38BAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
Manifest number: FE
Signing time: Sat 23 Aug 2025 10:02:13 +0000
Manifest this update: Sat 23 Aug 2025 10:02:13 +0000
Manifest next update: Sun 24 Aug 2025 10:02:13 +0000
Files and hashes: 1: muAIFdK9BB3MDs4Gdla-Xm6xK2I.crl (hash: dJyAFmotKTl1KZQOyThjBcXuglvATeu0duQ8zy1e0tU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:f0:f3:76:b9:86:73:fd:61:44:82:e2:d3:8b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae00815d2bd041dcc0ece067656be5e6eb12b62
Validity
Not Before: Aug 23 10:02:13 2025 GMT
Not After : Aug 24 10:02:13 2025 GMT
Subject: CN=0addea93ea3b92190b49f9ea2393b9a8a81b1e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e8:56:c3:17:3e:e1:71:90:67:ff:1e:7c:20:
79:66:39:ab:0a:b4:e4:c5:0c:c0:89:77:19:a0:31:
a6:71:2f:b2:6f:27:20:72:bd:3a:c6:bf:a5:10:5b:
7a:88:ce:9e:a5:ac:28:04:0c:83:ac:4e:5b:de:11:
b6:92:3c:e1:f1:e7:d3:c4:c5:2c:c9:d7:ef:20:de:
34:b9:f2:44:68:a8:9f:75:04:00:7f:1a:02:96:43:
e9:dd:86:d8:cc:a4:1e:00:f5:a2:07:eb:29:e3:e7:
bb:8d:75:e7:76:a5:25:c8:dc:79:15:b5:08:56:75:
e8:9d:c4:c5:28:7a:c8:f5:92:2b:df:ea:1e:19:6a:
62:1b:91:14:83:0e:35:46:41:e1:19:23:37:e1:18:
00:9f:6b:72:e6:cc:56:fd:d3:72:81:ff:f6:c8:a2:
87:af:23:3f:7a:d2:0e:e0:3a:50:88:5c:18:56:2b:
57:4e:32:cf:ec:fa:36:a0:54:b7:35:17:57:0a:95:
a2:61:7a:5c:8b:6e:ad:ae:67:a4:98:eb:92:fb:c0:
84:35:44:a6:b4:8e:52:66:fd:5e:6f:e4:da:99:30:
33:2f:8a:1c:e2:d6:82:8c:4b:6d:be:c2:b2:ea:1f:
72:78:f0:0d:c4:b7:21:4f:6d:5d:58:e7:95:49:e8:
f5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DD:EA:93:EA:3B:92:19:0B:49:F9:EA:23:93:B9:A8:A8:1B:1E:4F
X509v3 Authority Key Identifier:
keyid:9A:E0:08:15:D2:BD:04:1D:CC:0E:CE:06:76:56:BE:5E:6E:B1:2B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:fc:b5:9f:e2:5f:d9:3b:6e:f1:9e:f3:d2:64:b1:44:a2:8b:
68:6f:84:c2:49:71:24:a6:54:3f:2e:7c:6a:a3:64:24:91:e4:
88:88:bd:94:fc:70:02:c2:68:42:40:f7:4d:bb:4b:ae:5f:93:
39:95:f3:b3:f9:53:fa:30:ef:e2:4f:bb:0e:48:61:ff:17:50:
40:6a:21:c7:f6:3c:d4:c6:72:a4:d6:f6:f5:7e:aa:46:c0:d4:
ac:f1:6b:73:78:bb:bb:97:d3:03:66:c6:aa:65:e4:05:68:09:
60:68:d9:88:bf:22:34:a6:57:f6:5c:e5:67:7d:32:03:92:32:
70:2c:70:5a:7e:a9:29:77:2a:cd:86:38:2a:3d:66:f0:30:3c:
d6:ad:17:91:c1:10:54:93:2b:81:ee:30:29:b0:1c:e7:61:8e:
a2:2a:df:a2:82:c0:e9:51:1c:46:d4:bf:bd:96:5e:b4:89:c0:
40:ad:f0:dc:a0:d2:40:c1:c6:16:3b:aa:a3:08:bc:8a:47:dc:
42:e3:6f:53:57:0c:eb:8e:23:06:3b:8d:9a:3e:58:0c:b1:59:
e2:38:1b:02:99:bf:d6:2e:37:27:1a:b1:ee:53:15:fa:71:0d:
db:2b:b0:7b:fe:e8:d0:0f:16:bc:05:a3:fa:7d:b4:b6:8f:d1:
50:76:34:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:27:24 2025 by rpki-client