Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
File: MuFdOEw49IcrD_k1L_GcTW37ZMY.mft (raw, json)
Hash identifier: 8Wvo98PHbPsQ6RDPDMqV2+IZBdpy6u3AmxSiS6REKlo=
Subject key identifier: B4:48:E0:01:46:36:5B:4E:A3:66:65:C0:DB:B8:4F:F6:2C:1F:CC:7E
Authority key identifier: 32:E1:5D:38:4C:38:F4:87:2B:0F:F9:35:2F:F1:9C:4D:6D:FB:64:C6
Certificate issuer: /CN=32e15d384c38f4872b0ff9352ff19c4d6dfb64c6
Certificate serial: 0198D54EA711CED27F20720EA31B139F4539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
Manifest number: 0D5B
Signing time: Sat 23 Aug 2025 05:02:38 +0000
Manifest this update: Sat 23 Aug 2025 05:02:38 +0000
Manifest next update: Sun 24 Aug 2025 05:02:38 +0000
Files and hashes: 1: MuFdOEw49IcrD_k1L_GcTW37ZMY.crl (hash: B8DxkWhwpR3aje1roPhEpNQAU1PGstUCHLVQX0q02ZM=)
2: nLlnLzhBW0q3Q45Kky0hHNKYV40.roa (hash: RNNKG+Zuzj9PpdwsoSPFqXxYXZoCjXiQJtMmCaWRm20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a7:11:ce:d2:7f:20:72:0e:a3:1b:13:9f:45:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32e15d384c38f4872b0ff9352ff19c4d6dfb64c6
Validity
Not Before: Aug 23 05:02:38 2025 GMT
Not After : Aug 24 05:02:38 2025 GMT
Subject: CN=b448e00146365b4ea36665c0dbb84ff62c1fcc7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:6a:cc:37:5d:6a:3d:b4:aa:cb:f6:11:34:
82:95:2c:13:da:aa:43:57:2a:67:18:b2:c6:60:0e:
f2:96:50:ed:d9:95:7d:6d:9b:ad:ae:f8:1e:c6:0f:
46:1f:02:e2:62:25:2a:fe:8f:b9:54:02:16:44:5d:
f3:65:8d:5d:9b:76:12:7f:21:e5:8f:ee:b8:50:64:
5c:cd:a8:9a:17:03:d8:1f:fd:25:8c:60:6f:74:c0:
8b:f2:b7:62:9a:fa:1b:1a:41:47:80:cf:14:15:8f:
71:7f:a4:97:de:02:74:06:08:4b:7a:ee:d9:30:ae:
99:77:a6:4b:26:a9:7e:7f:44:82:de:16:38:39:3c:
84:ab:89:4e:e5:8a:97:b6:6b:5e:b8:2c:9c:ad:aa:
6c:70:83:47:9e:fa:64:c2:95:e3:ee:0f:02:93:8e:
6a:6f:a5:3a:78:26:35:8b:f4:64:d0:49:05:5e:2a:
06:34:a8:b8:f2:0b:d7:26:2a:11:10:05:6a:c3:3e:
7c:2c:6e:9b:c6:43:d4:83:40:e0:60:da:ae:e3:21:
3c:96:5d:ea:ec:a0:90:0a:93:00:2a:73:d3:a0:a0:
2a:45:36:da:7e:ab:ea:36:f2:e2:5f:4b:0c:f1:ac:
3f:7d:69:3e:ce:cf:3f:b4:6d:c1:52:3e:d2:a2:8c:
0a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:48:E0:01:46:36:5B:4E:A3:66:65:C0:DB:B8:4F:F6:2C:1F:CC:7E
X509v3 Authority Key Identifier:
keyid:32:E1:5D:38:4C:38:F4:87:2B:0F:F9:35:2F:F1:9C:4D:6D:FB:64:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2e:46:93:24:fd:28:59:64:7b:50:12:e3:92:23:54:e4:0c:
8a:aa:75:1c:a1:fe:13:ab:c1:03:4e:a8:11:5d:94:69:fd:e1:
b6:40:d2:46:99:cc:71:5a:90:67:e6:99:16:3f:97:0e:07:1c:
c6:29:2f:8a:fc:f9:5b:95:04:82:f6:66:af:00:04:df:9c:d8:
8c:14:88:0b:41:c5:7d:2c:17:b7:57:1d:05:7a:b7:87:b8:94:
d7:e9:59:a4:b9:0f:87:9c:ae:30:2b:8b:0f:ec:63:f5:70:d8:
d8:b6:89:15:81:36:e5:3d:85:c6:fc:2a:e2:43:76:77:7c:1c:
97:c0:f7:b3:21:45:a7:b9:77:99:d2:52:16:49:3a:c0:2c:b7:
d8:2e:5c:f8:6f:5e:44:f5:e2:af:87:13:f5:a5:4f:39:6a:51:
84:b0:df:c4:c6:00:81:0e:72:69:71:2c:f3:5e:b4:d3:2a:24:
7f:13:92:a2:35:24:af:cb:74:77:dd:22:56:8f:3a:5f:13:bd:
17:65:7b:30:5d:75:6c:b3:b7:9a:3f:e5:a8:e4:30:ee:f9:2e:
02:d0:f9:da:e2:71:8d:df:52:ca:99:61:70:4f:58:c5:7d:ec:
b8:76:8c:c4:5e:ad:a8:b0:49:d4:c0:bd:c4:8f:35:a3:0a:48:
2f:c7:fe:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:50 2025 by rpki-client