Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
File: MuFdOEw49IcrD_k1L_GcTW37ZMY.mft (raw, json)
Hash identifier: oWKoNGue1Py3cO/XDzwrlD7PTKov6ENoobwZvc6GX2A=
Subject key identifier: 7C:23:A1:04:EE:7D:07:1B:6E:69:A8:E1:5C:F3:1A:62:A2:44:7F:11
Authority key identifier: 32:E1:5D:38:4C:38:F4:87:2B:0F:F9:35:2F:F1:9C:4D:6D:FB:64:C6
Certificate issuer: /CN=32e15d384c38f4872b0ff9352ff19c4d6dfb64c6
Certificate serial: 0197B77CCED86904498427F7B1B5B6F79C25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
Manifest number: 0CC7
Signing time: Sat 28 Jun 2025 17:01:39 +0000
Manifest this update: Sat 28 Jun 2025 17:01:39 +0000
Manifest next update: Sun 29 Jun 2025 17:01:39 +0000
Files and hashes: 1: MuFdOEw49IcrD_k1L_GcTW37ZMY.crl (hash: B82tDQn//py81Zhzx98RGKiTxc6glTSQKwA81QwvluE=)
2: nLlnLzhBW0q3Q45Kky0hHNKYV40.roa (hash: RNNKG+Zuzj9PpdwsoSPFqXxYXZoCjXiQJtMmCaWRm20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:ce:d8:69:04:49:84:27:f7:b1:b5:b6:f7:9c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32e15d384c38f4872b0ff9352ff19c4d6dfb64c6
Validity
Not Before: Jun 28 17:01:39 2025 GMT
Not After : Jun 29 17:01:39 2025 GMT
Subject: CN=7c23a104ee7d071b6e69a8e15cf31a62a2447f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:59:2c:2a:c4:c2:7a:36:20:f3:29:ba:ec:25:
61:bb:78:7c:4d:4e:49:ae:63:cb:7d:09:c2:31:40:
18:07:a0:75:6a:82:c7:0c:50:94:4a:7e:13:97:0f:
67:64:c1:50:cc:4d:50:91:5d:79:4a:49:c4:75:7f:
6e:cf:ce:27:89:8b:4b:a4:66:2b:37:0b:5c:75:b4:
d7:9d:f0:5b:8d:df:e8:34:df:8e:3b:3f:ca:27:67:
73:fc:f3:f1:98:33:8a:cf:8b:78:23:5e:68:a8:73:
ff:da:a7:e1:22:91:35:b1:c6:2e:13:a1:7e:7b:df:
c4:29:56:cb:55:cb:a5:8f:c2:18:52:3e:f6:e9:64:
9f:a5:b6:d9:9c:c9:b8:8a:b0:a5:8b:a5:50:be:c0:
e3:a2:c8:d1:0e:f1:bc:52:70:97:08:d7:e7:5f:5b:
5b:32:d7:a9:c7:f9:f8:20:44:6d:a3:19:87:5b:a3:
7a:7a:ca:8c:59:45:91:4c:43:c4:15:ff:c6:78:82:
3d:4e:3d:32:f8:df:96:c5:4c:97:f7:9a:e0:da:de:
44:a9:b5:5d:b3:5b:35:f6:f6:fb:56:56:b8:35:de:
30:f7:37:9a:32:a5:10:2b:b7:1b:6f:39:3f:0f:72:
1a:da:aa:a7:f4:03:d7:02:13:a4:1b:a0:21:4a:d9:
92:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:23:A1:04:EE:7D:07:1B:6E:69:A8:E1:5C:F3:1A:62:A2:44:7F:11
X509v3 Authority Key Identifier:
keyid:32:E1:5D:38:4C:38:F4:87:2B:0F:F9:35:2F:F1:9C:4D:6D:FB:64:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d0:57:3c:62:64:18:39:d3:0c:5b:53:cd:53:1f:ff:87:3e:
34:15:e4:7e:db:bd:94:81:f1:41:da:9c:93:b7:d4:ed:2e:05:
98:de:a1:6c:d7:62:bb:7b:63:6a:9a:ee:87:9f:18:8e:1a:67:
9b:6e:43:eb:6d:0f:0b:a6:de:65:ae:00:3e:0f:29:f4:69:4b:
c6:5b:d9:d8:b7:35:e7:11:c9:54:a6:ce:02:b7:9d:61:75:bc:
31:23:f0:ff:02:9c:29:3b:2c:05:62:6e:5e:20:d7:cb:96:ce:
39:3f:7b:8f:f4:ac:26:e0:8c:1b:5b:18:6e:dc:e7:bf:90:b5:
24:7c:6a:d2:f9:1b:95:5b:80:5e:3c:e2:bb:52:d5:86:bc:a3:
b2:f2:d4:98:04:71:64:30:76:f6:1d:cf:42:53:89:b6:8e:f8:
68:b1:72:73:b8:02:6c:fa:82:d4:34:f5:8b:72:c6:c7:31:48:
e4:de:f7:fe:3f:83:68:1a:42:93:9f:98:64:eb:99:aa:74:ba:
82:70:fe:d3:d2:80:dc:03:26:d0:b3:52:f2:07:c9:88:96:af:
f8:78:eb:e7:4f:44:19:3a:51:86:5d:ac:8c:1c:bb:55:1d:6a:
cb:6f:db:dc:c5:7e:f7:70:e1:df:23:c3:fe:01:11:c4:3a:62:
aa:2a:13:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fM7YaQRJhCf3sbW295wlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZTE1ZDM4NGMzOGY0ODcyYjBmZjkzNTJmZjE5YzRkNmRm
YjY0YzYwHhcNMjUwNjI4MTcwMTM5WhcNMjUwNjI5MTcwMTM5WjAzMTEwLwYDVQQD
Eyg3YzIzYTEwNGVlN2QwNzFiNmU2OWE4ZTE1Y2YzMWE2MmEyNDQ3ZjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1ksKsTCejYg8ym67CVhu3h8TU5J
rmPLfQnCMUAYB6B1aoLHDFCUSn4Tlw9nZMFQzE1QkV15SknEdX9uz84niYtLpGYr
NwtcdbTXnfBbjd/oNN+OOz/KJ2dz/PPxmDOKz4t4I15oqHP/2qfhIpE1scYuE6F+
e9/EKVbLVculj8IYUj726WSfpbbZnMm4irCli6VQvsDjosjRDvG8UnCXCNfnX1tb
Mtepx/n4IERtoxmHW6N6esqMWUWRTEPEFf/GeII9Tj0y+N+WxUyX95rg2t5EqbVd
s1s19vb7Vla4Nd4w9zeaMqUQK7cbbzk/D3Ia2qqn9APXAhOkG6AhStmSSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwjoQTufQcbbmmo4VzzGmKiRH8RMB8GA1UdIwQY
MBaAFDLhXThMOPSHKw/5NS/xnE1t+2TGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXVGZE9FdzQ5SWNyRF9rMUxfR2NUVzM3Wk1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81NWQzY2MtYmNmMC00MjVlLTk4M2Qt
NGYzYzQ2ZjE3NzM3LzEvTXVGZE9FdzQ5SWNyRF9rMUxfR2NUVzM3Wk1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS81NWQzY2MtYmNmMC00MjVlLTk4M2QtNGYzYzQ2ZjE3NzM3
LzEvTXVGZE9FdzQ5SWNyRF9rMUxfR2NUVzM3Wk1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlNBXPGJk
GDnTDFtTzVMf/4c+NBXkftu9lIHxQdqck7fU7S4FmN6hbNdiu3tjapruh58Yjhpn
m25D620PC6beZa4APg8p9GlLxlvZ2Lc15xHJVKbOAredYXW8MSPw/wKcKTssBWJu
XiDXy5bOOT97j/SsJuCMG1sYbtznv5C1JHxq0vkblVuAXjziu1LVhryjsvLUmARx
ZDB29h3PQlOJto74aLFyc7gCbPqC1DT1i3LGxzFI5N73/j+DaBpCk5+YZOuZqnS6
gnD+09KA3AMm0LNS8gfJiJav+Hjr509EGTpRhl2sjBy7VR1qy2/b3MV+93Dh3yPD
/gERxDpiqioTKA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:09:20 2025 by rpki-client