Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft
File: MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft (raw, json)
Hash identifier: /M5k/5ve4tElNKhgMwIRrgAbM9kjAFLtRwmpvVJfjWk=
Subject key identifier: 34:C0:10:C5:ED:9E:4D:28:06:C8:7E:66:B8:6C:DD:C3:16:CE:EF:FF
Authority key identifier: 32:E8:8A:8C:3F:2F:24:D6:93:31:6D:1F:21:1E:DE:EB:23:23:42:A6
Certificate issuer: /CN=32e88a8c3f2f24d693316d1f211edeeb232342a6
Certificate serial: 0197B6A12209A12165D2A7F1DDD2F1E2BBD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuiKjD8vJNaTMW0fIR7e6yMjQqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft
Manifest number: 0748
Signing time: Sat 28 Jun 2025 13:01:42 +0000
Manifest this update: Sat 28 Jun 2025 13:01:42 +0000
Manifest next update: Sun 29 Jun 2025 13:01:42 +0000
Files and hashes: 1: MuiKjD8vJNaTMW0fIR7e6yMjQqY.crl (hash: vOBz+BakDHUJ96GayGTWi93Caj0AD79qwAEHyM54sME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MuiKjD8vJNaTMW0fIR7e6yMjQqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:22:09:a1:21:65:d2:a7:f1:dd:d2:f1:e2:bb:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32e88a8c3f2f24d693316d1f211edeeb232342a6
Validity
Not Before: Jun 28 13:01:42 2025 GMT
Not After : Jun 29 13:01:42 2025 GMT
Subject: CN=34c010c5ed9e4d2806c87e66b86cddc316ceefff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e5:ea:2e:5a:05:ac:9b:cb:11:04:96:97:0a:
35:79:d9:98:a5:2e:cd:fc:46:8c:31:0c:69:92:60:
f4:d6:78:4c:cd:09:62:83:3b:f1:bb:58:3b:e9:83:
2f:43:1e:ce:57:bc:78:fa:5d:fa:ec:62:63:f6:22:
c7:83:10:42:1d:c7:e4:d8:a7:59:41:a4:f3:4a:3c:
57:84:10:3f:a8:77:14:e3:11:c8:75:07:22:a1:89:
96:7b:58:46:5f:7b:e7:ae:6c:28:39:c3:ef:93:12:
0a:3a:7b:d0:74:84:1c:b9:da:89:58:aa:27:c9:cd:
94:47:e5:7d:bd:a2:86:18:ef:b3:b5:7c:5d:9e:85:
96:0f:78:cf:a4:b6:f8:5a:5d:c5:18:d3:b1:33:25:
97:19:60:c4:54:9d:45:b2:58:3e:c1:10:e5:b5:cb:
bc:6b:6c:53:35:6e:f2:59:49:11:fe:d9:fb:cb:5a:
f5:99:23:49:10:27:8d:f2:c9:c8:e2:b9:9d:72:32:
19:c6:19:73:f5:cf:3b:8e:9f:7c:9c:57:83:f1:c6:
8d:52:58:84:ad:b6:e3:f0:4e:ce:fe:57:d1:fc:c6:
a7:a9:3c:ef:98:00:8f:f2:54:0d:40:85:ec:3e:f8:
47:20:7b:68:07:dc:41:3b:58:55:2d:d5:45:1b:c0:
3d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C0:10:C5:ED:9E:4D:28:06:C8:7E:66:B8:6C:DD:C3:16:CE:EF:FF
X509v3 Authority Key Identifier:
keyid:32:E8:8A:8C:3F:2F:24:D6:93:31:6D:1F:21:1E:DE:EB:23:23:42:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuiKjD8vJNaTMW0fIR7e6yMjQqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:60:36:a8:c6:10:94:a3:d1:e1:97:fd:32:db:dc:ec:78:7e:
ff:7b:03:a2:7e:4b:20:15:7f:e2:6e:7b:2e:b9:cc:5b:95:be:
51:05:33:c0:e4:f3:ea:22:a8:dd:a6:5b:29:43:10:b4:1e:12:
bc:cd:20:96:ba:22:00:83:41:28:a8:9e:6b:f7:2e:c7:9f:2b:
b6:e1:04:19:aa:37:c9:5b:0b:91:90:2a:2b:e7:64:e9:54:fd:
bd:41:70:36:4c:29:ee:3a:4a:9b:45:46:20:12:28:d6:3c:24:
b5:98:c0:f6:78:d1:77:2d:40:4b:08:f9:99:28:3c:59:b9:c5:
c3:58:13:50:b9:c9:52:29:c9:e5:d5:c1:5a:e4:fd:97:21:ce:
fe:3b:73:8f:4a:bf:35:9d:e7:cb:f5:fa:f4:32:af:83:06:21:
53:90:f9:6f:c4:0b:0c:cb:e8:02:73:55:d0:94:83:f5:36:d3:
5a:66:4c:2c:da:8a:6c:68:58:68:e5:8d:cf:42:27:48:56:2c:
bf:71:f7:57:1e:ee:00:94:46:bf:b0:ca:0a:bc:99:86:6f:fb:
23:9b:fe:08:d9:17:d4:04:b1:02:58:22:ec:e9:7c:66:45:cc:
6c:03:ef:7e:6b:08:80:e8:f8:a3:78:79:16:69:5c:33:2e:72:
50:a9:42:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oSIJoSFl0qfx3dLx4rvTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZTg4YThjM2YyZjI0ZDY5MzMxNmQxZjIxMWVkZWViMjMy
MzQyYTYwHhcNMjUwNjI4MTMwMTQyWhcNMjUwNjI5MTMwMTQyWjAzMTEwLwYDVQQD
EygzNGMwMTBjNWVkOWU0ZDI4MDZjODdlNjZiODZjZGRjMzE2Y2VlZmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOXqLloFrJvLEQSWlwo1edmYpS7N
/EaMMQxpkmD01nhMzQligzvxu1g76YMvQx7OV7x4+l367GJj9iLHgxBCHcfk2KdZ
QaTzSjxXhBA/qHcU4xHIdQcioYmWe1hGX3vnrmwoOcPvkxIKOnvQdIQcudqJWKon
yc2UR+V9vaKGGO+ztXxdnoWWD3jPpLb4Wl3FGNOxMyWXGWDEVJ1Fslg+wRDltcu8
a2xTNW7yWUkR/tn7y1r1mSNJECeN8snI4rmdcjIZxhlz9c87jp98nFeD8caNUliE
rbbj8E7O/lfR/ManqTzvmACP8lQNQIXsPvhHIHtoB9xBO1hVLdVFG8A9FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTAEMXtnk0oBsh+Zrhs3cMWzu//MB8GA1UdIwQY
MBaAFDLoiow/LyTWkzFtHyEe3usjI0KmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXVpS2pEOHZKTmFUTVcwZklSN2U2eU1qUXFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8wNmQzYmUtMDI1Yi00ZDEwLWE3OTkt
NzkxNjE1ODczZDk0LzEvTXVpS2pEOHZKTmFUTVcwZklSN2U2eU1qUXFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8wNmQzYmUtMDI1Yi00ZDEwLWE3OTktNzkxNjE1ODczZDk0
LzEvTXVpS2pEOHZKTmFUTVcwZklSN2U2eU1qUXFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALWA2qMYQ
lKPR4Zf9Mtvc7Hh+/3sDon5LIBV/4m57LrnMW5W+UQUzwOTz6iKo3aZbKUMQtB4S
vM0glroiAINBKKiea/cux58rtuEEGao3yVsLkZAqK+dk6VT9vUFwNkwp7jpKm0VG
IBIo1jwktZjA9njRdy1ASwj5mSg8WbnFw1gTULnJUinJ5dXBWuT9lyHO/jtzj0q/
NZ3ny/X69DKvgwYhU5D5b8QLDMvoAnNV0JSD9TbTWmZMLNqKbGhYaOWNz0InSFYs
v3H3Vx7uAJRGv7DKCryZhm/7I5v+CNkX1ASxAlgi7Ol8ZkXMbAPvfmsIgOj4o3h5
FmlcMy5yUKlC6Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:21 2025 by rpki-client