Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
File: muOJscw5niFvztjTnsPuifwguDk.mft (raw, json)
Hash identifier: vNCAsOluMAbRV0GaLW8SaYmt+lSzXI+p587yfyQ7mwc=
Subject key identifier: 1E:6E:6D:BB:56:EB:F3:3B:76:A7:46:5E:1D:D4:B8:5B:4F:6E:60:BE
Authority key identifier: 9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39
Certificate issuer: /CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839
Certificate serial: 0196CF4FB3059762E3633DDDA0CD46D8D9B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
Manifest number: 153F
Signing time: Wed 14 May 2025 15:00:28 +0000
Manifest this update: Wed 14 May 2025 15:00:28 +0000
Manifest next update: Thu 15 May 2025 15:00:28 +0000
Files and hashes: 1: Q5quNHtUe1gA-TqHlWvHzX8gMwA.roa (hash: OcDB3dr6mB13HmStrHlq8aYMZtKWBgjyeIYXKmgVBnM=)
2: muOJscw5niFvztjTnsPuifwguDk.crl (hash: eHKqzMAF+yDZC1toC8QC5dUTj/J6gP+SPidJKnlgOd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:4f:b3:05:97:62:e3:63:3d:dd:a0:cd:46:d8:d9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839
Validity
Not Before: May 14 15:00:28 2025 GMT
Not After : May 15 15:00:28 2025 GMT
Subject: CN=1e6e6dbb56ebf33b76a7465e1dd4b85b4f6e60be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cc:8a:6c:76:3a:15:9a:71:05:6b:3f:98:da:
66:f4:26:57:3d:a0:e2:c6:8f:c7:a4:c1:3e:93:e8:
96:70:bd:ee:dc:e5:81:e7:cf:66:c6:cd:2c:76:5b:
13:d4:57:b7:e7:98:25:93:3e:dd:b9:90:05:d9:78:
79:dd:90:f4:73:6c:18:c4:a6:ce:85:9a:90:19:b2:
dd:65:28:86:f3:af:a6:90:4b:82:5a:38:2f:dd:be:
9a:4f:cc:99:48:79:5c:2c:63:7b:0d:32:1b:65:61:
3a:27:f9:90:46:ee:45:ac:e6:ff:12:13:7c:e2:d5:
82:7b:25:f9:24:9d:e3:ae:45:8f:c8:b6:cf:94:c4:
91:2e:b9:02:8a:7b:f7:f6:f4:a3:be:28:57:43:a4:
81:da:da:02:85:52:4b:30:77:cd:9a:03:d5:50:92:
94:fc:ee:1b:f4:19:c3:b0:68:bd:36:7b:85:d8:da:
96:c1:de:58:94:fd:82:b6:ec:90:c9:28:81:09:bb:
91:5b:42:0e:12:0f:28:48:be:2c:28:70:d6:2d:f6:
ce:97:9e:90:53:5e:14:63:82:d0:a0:87:86:4b:91:
d7:1e:da:86:39:3b:98:51:96:80:90:ee:a2:99:40:
c4:22:f6:a3:37:05:3d:15:dc:79:1a:99:57:2d:89:
d3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6E:6D:BB:56:EB:F3:3B:76:A7:46:5E:1D:D4:B8:5B:4F:6E:60:BE
X509v3 Authority Key Identifier:
keyid:9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:11:9e:33:06:86:70:ec:f7:56:50:6f:f5:a3:bf:d0:56:d5:
3d:74:4e:b8:bd:da:b1:af:c3:9a:97:4f:35:22:e3:ab:88:e2:
37:62:8b:e2:6b:82:65:38:4f:2e:61:2b:e4:d6:a6:56:c4:c0:
4d:88:dd:17:46:1f:3c:99:34:22:00:05:7c:a7:da:b3:45:26:
7e:15:fa:aa:58:3e:b2:c8:92:69:15:5f:ac:db:9c:ba:94:0c:
d5:64:a9:48:a8:d9:07:dc:d2:33:cf:68:ae:a9:4d:98:8b:33:
98:b1:54:60:8b:d7:b7:4d:10:49:95:1b:35:94:11:16:83:01:
e6:a9:d1:2e:fc:39:98:90:f6:31:06:b4:26:16:50:a3:af:80:
ba:b7:be:d5:7c:83:b7:1b:8c:f3:a1:73:63:02:a2:a6:8e:09:
77:5a:b4:bf:57:c4:f6:9f:11:21:f3:47:23:77:98:c1:6a:a5:
b1:42:7e:ad:de:2e:df:45:02:f1:8c:40:58:de:cb:11:17:c8:
59:04:b9:0c:c7:b4:7a:18:28:82:34:5b:5f:cd:4a:ff:f8:7d:
aa:f7:b9:f5:82:38:c7:a2:08:94:99:96:67:65:28:66:23:c1:
96:19:61:ed:2d:1d:35:f5:7d:81:f5:9d:e1:00:d0:18:4d:b4:
65:c0:b5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 19:28:08 2025 by rpki-client