Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
File: muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft (raw, json)
Hash identifier: jpKtBlqSehJCfj3Yqv5/32YN5Gk8u7hP9AUUtNou1BQ=
Subject key identifier: 64:45:B8:85:00:CA:58:D2:8A:E7:7B:47:32:32:3E:78:FC:EF:1B:78
Authority key identifier: 9A:E0:08:15:D2:BD:04:1D:CC:0E:CE:06:76:56:BE:5E:6E:B1:2B:62
Certificate issuer: /CN=9ae00815d2bd041dcc0ece067656be5e6eb12b62
Certificate serial: 0197C802B0178462461168255D5EE9A36FB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
Manifest number: 72
Signing time: Tue 01 Jul 2025 22:01:48 +0000
Manifest this update: Tue 01 Jul 2025 22:01:48 +0000
Manifest next update: Wed 02 Jul 2025 22:01:48 +0000
Files and hashes: 1: muAIFdK9BB3MDs4Gdla-Xm6xK2I.crl (hash: WexTRlhyTYrtdfgG+LGiXeZ/UxW4Nym0A4AxlST7Dnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 22:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:02:b0:17:84:62:46:11:68:25:5d:5e:e9:a3:6f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae00815d2bd041dcc0ece067656be5e6eb12b62
Validity
Not Before: Jul 1 22:01:48 2025 GMT
Not After : Jul 2 22:01:48 2025 GMT
Subject: CN=6445b88500ca58d28ae77b4732323e78fcef1b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:36:a3:75:26:8f:cf:e5:54:7f:f2:f9:5f:84:
fe:c0:0d:80:3c:57:08:2e:14:5b:7d:d3:dc:e9:dd:
19:a0:51:ce:f3:ec:6e:88:65:cf:97:55:49:f0:4c:
f6:12:7f:12:d9:ad:e0:e6:cb:2b:f0:17:66:05:01:
68:e8:79:f2:3d:a8:da:de:84:3a:62:62:b3:82:4d:
be:5b:72:1f:68:57:39:8e:0a:d7:a4:4d:7a:35:55:
ce:0e:bc:d6:10:d5:6e:15:ad:89:30:b6:fb:46:4e:
ef:ad:f5:82:7e:0d:77:da:44:15:e0:a2:8c:65:e5:
eb:7f:b7:0c:ea:7b:c4:c0:34:5b:12:59:cf:ea:25:
b2:7d:b1:bd:98:cd:b8:9d:54:1e:ce:e0:f1:09:47:
d0:e4:6f:7f:fa:dc:b9:a7:d8:eb:2f:c6:2a:0a:ba:
9f:f7:de:cd:b5:d8:a1:56:aa:3e:aa:6c:b8:bc:e0:
8c:1d:ae:96:eb:b6:9d:dc:f2:bb:d9:3d:7a:4d:31:
30:ce:7f:e4:0f:9c:b5:2f:53:f7:4f:7c:07:37:cd:
79:ed:57:45:86:26:81:ed:95:19:9a:f0:52:62:c6:
80:a2:8d:e5:e4:b2:3a:46:76:e0:ee:4a:de:33:d0:
62:9e:14:d2:0a:77:d7:02:15:d5:52:86:6e:d5:6c:
86:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:45:B8:85:00:CA:58:D2:8A:E7:7B:47:32:32:3E:78:FC:EF:1B:78
X509v3 Authority Key Identifier:
keyid:9A:E0:08:15:D2:BD:04:1D:CC:0E:CE:06:76:56:BE:5E:6E:B1:2B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muAIFdK9BB3MDs4Gdla-Xm6xK2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/40415b-596c-480d-8be2-f4851da8763d/1/muAIFdK9BB3MDs4Gdla-Xm6xK2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f4:0c:19:e9:ee:08:89:79:a7:62:87:6a:98:b7:2c:8f:33:
0a:5f:38:70:91:3f:86:3e:6a:c5:ea:92:48:61:04:ef:ee:95:
0b:4a:1f:ed:18:46:31:41:e8:21:c6:e4:fa:36:59:cf:03:1c:
ea:93:f0:8f:3c:52:43:d9:60:80:c2:46:79:ba:6d:f7:ae:48:
78:be:7d:19:aa:58:f7:b9:6f:30:db:e3:29:c0:9b:2f:0c:85:
da:d5:9e:ae:e4:fe:33:64:7c:64:1e:36:03:3d:c1:46:bf:de:
11:66:29:e6:a7:80:9e:39:4b:18:8f:32:00:45:00:4a:ed:2a:
fb:d4:b0:25:bf:ba:20:f4:01:ee:26:14:b4:12:de:7c:c3:a1:
21:53:99:f4:36:e0:74:85:3e:b8:d1:3f:82:8a:6a:de:a9:72:
e3:03:18:64:2a:0f:fa:80:b3:36:c2:32:d3:31:4c:80:55:f2:
03:6c:8e:a3:58:17:01:31:aa:f4:11:b4:b4:57:d8:6e:f4:b3:
a3:c8:f6:36:d8:5a:5c:90:57:30:95:c0:27:4e:f8:2d:99:c9:
82:8b:17:85:37:cd:54:b6:46:05:ce:62:2d:da:b3:31:2e:4f:
9d:3b:68:20:47:0f:71:5a:17:e1:72:1c:2f:5a:cb:f5:ed:2f:
60:5a:dc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:04:16 2025 by rpki-client