Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
File: MuFdOEw49IcrD_k1L_GcTW37ZMY.mft (raw, json)
Hash identifier: msLFAQcPAYn41NBRqCa7zEflUePndR8okJdbSBCvrZM=
Subject key identifier: BF:FA:AB:CE:3F:06:01:7B:B9:0F:F0:D5:99:11:8A:BA:7A:7A:E4:ED
Authority key identifier: 32:E1:5D:38:4C:38:F4:87:2B:0F:F9:35:2F:F1:9C:4D:6D:FB:64:C6
Certificate issuer: /CN=32e15d384c38f4872b0ff9352ff19c4d6dfb64c6
Certificate serial: 0196BA7FA58472EF0D5AC4D431CAA4EFE1F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
Manifest number: 0C44
Signing time: Sat 10 May 2025 14:00:49 +0000
Manifest this update: Sat 10 May 2025 14:00:49 +0000
Manifest next update: Sun 11 May 2025 14:00:49 +0000
Files and hashes: 1: MuFdOEw49IcrD_k1L_GcTW37ZMY.crl (hash: PggYngjae1GbSLEQ37OSeqkNEOai5pwf2OswfrnFELs=)
2: nLlnLzhBW0q3Q45Kky0hHNKYV40.roa (hash: RNNKG+Zuzj9PpdwsoSPFqXxYXZoCjXiQJtMmCaWRm20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:a5:84:72:ef:0d:5a:c4:d4:31:ca:a4:ef:e1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32e15d384c38f4872b0ff9352ff19c4d6dfb64c6
Validity
Not Before: May 10 14:00:49 2025 GMT
Not After : May 11 14:00:49 2025 GMT
Subject: CN=bffaabce3f06017bb90ff0d599118aba7a7ae4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:10:ef:d6:c9:73:fb:3f:2c:f5:8c:9a:ef:19:
4a:4b:39:6c:29:16:05:45:66:62:94:be:0d:31:46:
56:b9:ae:91:b0:b9:40:cf:e9:d7:3f:f9:c6:ba:5f:
f2:cf:38:00:ec:6e:35:84:2f:42:fb:1c:64:13:d3:
fc:60:a6:fb:43:78:d7:fb:a8:10:af:0a:2e:e1:5c:
13:07:00:7d:ea:38:47:96:e4:99:64:bb:22:c0:fb:
ad:d9:20:83:5f:3b:1f:4e:be:46:e7:cd:d5:a8:71:
dd:73:e7:0b:56:a0:fc:83:c2:46:44:69:7d:3d:f9:
53:8c:b4:17:67:db:95:cf:41:63:ae:81:d1:c4:28:
6a:3a:03:cb:f9:9a:e6:25:e9:3e:9a:e6:df:57:91:
75:7e:1a:e7:42:78:22:16:85:03:c1:03:96:32:19:
4d:33:08:f9:88:89:e3:ca:59:67:9d:f4:56:26:a8:
9e:95:6c:f8:13:e6:e0:08:4a:9e:66:08:37:bb:44:
57:7a:a5:ac:c3:f1:94:fe:30:b7:c4:1c:59:73:f7:
68:70:4e:8c:29:d3:45:e4:99:12:fb:73:40:3c:20:
be:72:d9:e3:73:0d:3c:ea:81:68:5a:15:ae:a5:63:
84:19:19:b4:4e:c2:64:74:4d:8c:fa:90:9b:58:c6:
7c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FA:AB:CE:3F:06:01:7B:B9:0F:F0:D5:99:11:8A:BA:7A:7A:E4:ED
X509v3 Authority Key Identifier:
keyid:32:E1:5D:38:4C:38:F4:87:2B:0F:F9:35:2F:F1:9C:4D:6D:FB:64:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f1:d3:f7:a0:bb:61:c6:43:b5:38:36:a3:9d:48:79:aa:e2:
6d:c9:2f:63:b5:40:02:6c:63:a2:46:77:5c:2b:3b:c8:f4:4c:
0f:d0:38:8a:ba:82:20:fa:c6:6b:4d:9f:5e:32:6c:9b:4d:7c:
db:aa:e7:19:4f:56:0b:de:d3:d5:91:af:a5:30:76:dc:eb:ef:
62:13:0c:72:15:49:34:53:32:f3:2f:a7:1e:00:ee:d0:c2:56:
e4:00:8b:30:88:35:51:91:a5:2a:1c:47:cb:43:db:58:33:55:
62:16:87:ad:bf:a1:23:01:4b:ee:ad:61:69:d4:bc:42:38:88:
a8:59:ca:f1:f9:1a:cf:d7:b3:ab:50:03:0e:a7:83:9b:8e:79:
10:ac:dd:62:ab:23:ae:b0:47:12:8b:14:82:ab:ea:1e:bf:51:
05:f0:57:43:89:bb:84:b1:69:9e:20:06:d8:5a:22:3f:e5:92:
27:35:2e:00:ef:75:6c:d4:d5:ce:4e:0d:02:27:3f:1e:b0:b6:
69:21:3f:27:7f:63:ab:a2:0a:09:4f:cf:24:98:7e:ee:e6:c0:
c2:bf:66:c0:78:f4:79:46:57:f3:15:22:41:df:c7:bd:5c:e2:
f3:ff:42:06:4c:b0:a7:30:a9:46:21:1a:95:b9:0b:41:e4:94:
a5:14:49:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:14:51 2025 by rpki-client