Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.mft
File: muVOVVW5meWct0g6YG1rJMv2GYw.mft (raw, json)
Hash identifier: HJRFD2FIxqg2WP3htcVuXCXcRZ8+SWGlfHHK22j/t/g=
Subject key identifier: C8:31:BB:AC:09:B6:F6:4A:42:2D:71:9B:E2:64:54:38:75:31:5A:E6
Authority key identifier: 9A:E5:4E:55:55:B9:99:E5:9C:B7:48:3A:60:6D:6B:24:CB:F6:19:8C
Certificate issuer: /CN=9ae54e5555b999e59cb7483a606d6b24cbf6198c
Certificate serial: 0197C64ACC723921A0E37ABC430AFAD56D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muVOVVW5meWct0g6YG1rJMv2GYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.mft
Manifest number: 8F
Signing time: Tue 01 Jul 2025 14:01:19 +0000
Manifest this update: Tue 01 Jul 2025 14:01:19 +0000
Manifest next update: Wed 02 Jul 2025 14:01:19 +0000
Files and hashes: 1: muVOVVW5meWct0g6YG1rJMv2GYw.crl (hash: oWQhh30FodVhNVp6eiSD5v5v5KFayHwGjXZvjVGzlPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/muVOVVW5meWct0g6YG1rJMv2GYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:4a:cc:72:39:21:a0:e3:7a:bc:43:0a:fa:d5:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae54e5555b999e59cb7483a606d6b24cbf6198c
Validity
Not Before: Jul 1 14:01:19 2025 GMT
Not After : Jul 2 14:01:19 2025 GMT
Subject: CN=c831bbac09b6f64a422d719be264543875315ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e9:e3:17:b9:60:33:45:96:30:de:96:7c:c4:
30:b3:4e:76:f7:b7:b2:9f:a9:47:4c:3d:32:36:06:
c1:78:d3:50:be:74:3d:e6:0a:a8:2e:df:1e:20:09:
e5:29:a7:e4:d0:b0:a4:fb:f6:2f:b6:7b:ca:0b:c2:
c7:3e:4f:88:af:03:4a:c9:31:a7:4b:61:89:95:10:
a3:46:93:7e:0b:af:86:53:c5:d9:16:f2:77:e0:57:
b1:11:b3:b9:98:5a:d9:e8:78:b4:71:e1:a6:1f:95:
c5:fe:cf:10:c4:32:d0:fb:a7:80:68:7c:b7:a1:04:
ea:6d:34:89:70:33:c8:94:1f:28:d2:61:aa:b1:37:
67:39:a1:86:11:65:b4:28:e8:0f:0b:fa:ad:40:eb:
af:ad:fa:8e:28:85:34:a4:cd:c0:1b:53:03:d4:f1:
92:20:f9:45:f7:74:58:29:fb:f1:41:04:f2:50:b2:
18:dd:ec:fa:33:6b:9d:67:48:10:0b:fd:a0:73:71:
df:8a:35:76:0f:60:8a:8e:e3:d4:b5:9b:09:c4:95:
39:4a:69:7e:20:04:67:63:b8:bb:d9:b3:0f:26:00:
98:5e:b7:22:77:8b:5f:cb:6b:13:50:29:6b:7d:a0:
dd:cb:03:13:94:ba:27:a0:42:55:0f:df:5a:af:15:
31:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:31:BB:AC:09:B6:F6:4A:42:2D:71:9B:E2:64:54:38:75:31:5A:E6
X509v3 Authority Key Identifier:
keyid:9A:E5:4E:55:55:B9:99:E5:9C:B7:48:3A:60:6D:6B:24:CB:F6:19:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muVOVVW5meWct0g6YG1rJMv2GYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e5:cf:e3:a9:2c:cc:40:57:90:db:3f:94:55:a7:87:de:e6:
d4:36:3c:cf:d3:75:bc:34:98:2f:7a:22:85:d6:32:64:95:35:
70:a6:bb:f2:ad:15:ab:21:d8:8b:7c:f8:ee:2b:93:1d:6a:62:
d8:53:86:f8:aa:d9:45:2f:8b:82:0c:d7:6f:96:cd:22:2b:2f:
2a:c3:d5:61:2f:42:8a:c6:8d:aa:43:ee:24:93:a7:f5:03:7b:
4d:47:a5:c2:99:c4:f0:03:74:78:e3:bb:41:6e:4e:f2:81:1f:
ed:5a:b7:c5:c0:0c:10:c7:24:ce:d8:f8:73:0c:f7:3c:7c:9a:
80:7b:49:78:9f:14:f1:4e:7a:99:ba:a3:df:55:d1:03:f6:99:
89:a3:4b:2c:09:9a:65:2a:92:49:c1:28:46:88:06:91:10:46:
fe:1c:ac:b4:10:38:d9:62:90:cb:70:d0:b1:d8:65:4c:3b:57:
71:c3:da:e7:81:3e:92:dd:b7:cd:ec:e3:da:f4:93:38:ed:1b:
5d:10:95:4b:92:81:23:32:3b:a6:28:10:6b:9a:ac:0d:e3:de:
2d:32:4a:37:d9:12:b9:17:91:bd:bb:bc:5a:b7:df:fd:8d:26:
aa:09:4b:c5:bf:d4:d2:42:1e:23:c0:0a:81:9c:2b:45:17:3f:
97:94:ab:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:50:22 2025 by rpki-client