Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
File: MusrUeN0jCUnQC5oYBqIkSiDoFg.mft (raw, json)
Hash identifier: UE66x7fquGNSHcUL8XQ6s6vXa51XvKVTJhwro/yi12A=
Subject key identifier: 87:76:27:04:9A:AB:6C:77:DF:91:71:A8:E5:50:17:4D:7E:9A:52:41
Authority key identifier: 32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58
Certificate issuer: /CN=32eb2b51e3748c2527402e68601a88912883a058
Certificate serial: 01969E9A9ED4832DB8C0B00D38FE0B149971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 04:00:55 +0000
Manifest this update: Mon 05 May 2025 04:00:55 +0000
Manifest next update: Tue 06 May 2025 04:00:55 +0000
Files and hashes: 1: KhlRzejfpvDxwhcPEcTkW8z6UJk.roa (hash: OH1bpS6azjDuSrz2eDsCxiLR1IWtc/vamDUbBv4QJmc=)
2: MusrUeN0jCUnQC5oYBqIkSiDoFg.crl (hash: OcwlYQscXDRvTyc1Kkco9gp7oapvuPLv9w5E5yVRWvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:9e:d4:83:2d:b8:c0:b0:0d:38:fe:0b:14:99:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32eb2b51e3748c2527402e68601a88912883a058
Validity
Not Before: May 5 04:00:55 2025 GMT
Not After : May 6 04:00:55 2025 GMT
Subject: CN=877627049aab6c77df9171a8e550174d7e9a5241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:df:0a:17:0c:de:a3:f6:c4:e6:df:08:10:
84:1d:c2:78:78:ba:2d:ec:cb:3b:bf:77:a2:9a:c6:
82:a2:03:f9:84:ed:ec:ef:6e:08:0d:82:62:bd:65:
27:7e:76:d1:b3:31:0e:7a:26:7f:ac:93:99:9d:cc:
89:77:2d:b1:75:21:d8:4a:dc:4d:b5:82:78:c0:e6:
5a:7e:cc:d2:2d:43:71:c9:52:11:7a:a2:2c:ff:f7:
9a:32:90:9a:3c:b3:23:02:96:ca:f0:b4:2f:35:de:
0e:70:51:67:9e:13:77:cb:b3:f7:44:b7:df:08:15:
78:fb:d1:01:6b:70:9e:13:cf:1a:11:21:b9:6a:5a:
6e:b8:89:45:5c:f7:06:0f:87:ba:3a:8e:01:8a:48:
59:ec:07:b6:44:f1:a2:dc:90:88:aa:ca:11:13:5d:
b4:40:ff:80:71:49:61:65:61:b3:40:6a:24:54:1f:
36:f2:4f:04:94:4a:d4:45:c6:53:14:a2:ae:a1:32:
af:6d:3f:bd:5b:46:0d:33:13:e4:b5:44:a7:05:ea:
fb:de:e4:b2:65:2d:32:26:64:96:9a:39:1e:de:ff:
71:d5:9c:ff:f5:42:ea:a8:ff:25:67:ac:10:94:64:
2f:1f:62:18:5b:c4:35:09:19:e2:e6:77:21:63:f8:
4b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:76:27:04:9A:AB:6C:77:DF:91:71:A8:E5:50:17:4D:7E:9A:52:41
X509v3 Authority Key Identifier:
keyid:32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f3:0c:db:c5:39:f9:a2:72:89:e5:e4:f8:19:2f:61:06:e5:
2b:2d:c3:d7:38:ac:24:9c:53:8c:3d:f2:58:e5:5e:ec:c2:07:
38:8a:b1:43:a0:e4:ab:aa:28:57:d5:13:57:f4:f6:63:65:6a:
68:26:ad:54:b6:b1:54:5a:71:50:c8:0a:d7:0f:39:53:13:11:
e9:0b:1b:46:16:b9:93:59:3b:98:5a:7c:54:a6:17:ba:61:20:
0d:ce:bc:01:0a:57:58:0d:1b:65:67:11:eb:81:0a:e1:86:fb:
73:cc:da:05:d2:03:64:58:b8:21:ec:14:4d:b2:f6:8e:75:66:
61:19:e6:f6:be:21:89:31:63:13:b0:7b:e3:c7:47:b2:6f:39:
c2:77:03:a3:12:89:de:26:dd:c4:93:48:0e:9a:33:71:fc:fb:
a2:97:01:c9:0b:00:63:a2:bc:53:a1:83:b3:27:53:ba:57:70:
1b:32:56:c6:b5:ce:d1:2d:c4:9d:9d:8f:4c:1f:a3:25:aa:b7:
68:35:47:c0:9a:d9:a6:ec:ec:a5:03:e1:6d:c5:bd:a8:4f:8d:
dc:7c:b0:d9:21:03:43:03:53:ca:97:b8:b0:56:c8:e4:70:e1:
3d:5c:40:71:e9:ee:18:00:87:10:93:24:e3:40:99:b5:e9:7c:
02:34:6b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:38:39 2025 by rpki-client