Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
File: mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft (raw, json)
Hash identifier: O2wR9HE/bKHh1uviMuDcSWxUmEtE0wC+3+/tOciU7IU=
Subject key identifier: 99:AE:5D:70:CC:43:48:44:0A:89:3E:22:83:D9:0C:81:36:A8:DB:58
Authority key identifier: 9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
Certificate issuer: /CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Certificate serial: 0196BDB75C29C535185DD11D435486494685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
Manifest number: 0E22
Signing time: Sun 11 May 2025 05:00:32 +0000
Manifest this update: Sun 11 May 2025 05:00:32 +0000
Manifest next update: Mon 12 May 2025 05:00:32 +0000
Files and hashes: 1: mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl (hash: Cf0L348OoBKNCMpql9yV9mh7n+R8p3EBt510mwKAxXk=)
2: zAfXaaTLSsRoB5kUrFVM41jmKKM.roa (hash: Qyk65ct/H4EE3CmFVP3i+QvaSpxHvWaeOqI7968YDoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:5c:29:c5:35:18:5d:d1:1d:43:54:86:49:46:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Validity
Not Before: May 11 05:00:32 2025 GMT
Not After : May 12 05:00:32 2025 GMT
Subject: CN=99ae5d70cc4348440a893e2283d90c8136a8db58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:94:39:71:86:23:9a:ea:ef:06:eb:16:e5:53:
be:46:b5:f2:24:5d:55:ff:d8:6b:58:72:d9:d0:31:
9c:0a:35:42:e2:ae:a4:25:69:27:f6:2b:ff:23:2e:
36:89:d5:d0:49:8b:72:6d:d7:11:e8:80:57:a7:f6:
58:a4:9d:33:38:b1:23:58:23:e4:d3:af:aa:ee:56:
fe:43:d6:66:c3:b5:d0:63:d6:40:06:84:6d:9a:ba:
a5:5d:49:8a:89:0a:9a:92:38:1b:1b:73:c2:ce:f9:
b7:59:56:b7:7b:c6:65:83:84:35:8d:13:38:8d:0f:
fd:bf:20:9a:a9:e1:34:09:a4:04:dd:c8:58:95:d6:
e9:ef:62:23:d3:21:d4:27:31:fa:76:9e:aa:ed:aa:
1e:3c:9f:20:23:fe:2c:96:09:41:d1:a8:43:62:55:
51:5a:af:17:3e:3f:e7:37:1a:f5:80:a9:4c:02:b2:
6e:dc:d3:91:ef:f8:55:72:e1:e3:17:1c:6c:a0:5c:
a3:3d:c7:cf:20:8c:f0:2c:8e:bc:05:e1:94:95:11:
8f:2b:54:1c:ba:92:b2:f9:e6:41:97:48:2e:fe:c1:
7c:14:fd:63:a5:cf:d3:c1:27:6b:2f:02:ec:ca:79:
df:b5:cb:ef:04:8c:52:41:ed:f2:b9:d5:1a:ff:fa:
05:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AE:5D:70:CC:43:48:44:0A:89:3E:22:83:D9:0C:81:36:A8:DB:58
X509v3 Authority Key Identifier:
keyid:9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:56:8f:e4:4a:ca:07:e9:7b:30:e7:b1:4f:29:74:f1:38:1d:
e7:04:29:a8:82:80:77:c1:2a:30:66:3c:d1:f8:67:17:b8:c4:
29:3e:9d:e2:84:b4:18:32:b6:75:01:af:6f:e9:71:c2:2b:61:
04:e5:4c:6c:26:ab:91:17:7c:86:12:e6:d2:10:bf:51:08:83:
78:10:d6:56:34:f7:31:17:a6:22:e0:39:24:64:54:79:2f:4d:
a6:b1:f8:8d:34:d5:59:28:09:9e:72:f1:30:94:2e:cc:5b:d3:
c8:e2:ca:bb:84:6c:2b:7b:9a:85:ff:1f:bb:30:35:e9:77:94:
03:a2:44:20:0b:f4:18:e4:5b:76:b4:f9:65:81:ce:a3:2b:80:
01:ed:02:84:e2:c1:ec:3b:c6:4c:94:2a:04:a7:a1:42:3d:73:
b7:86:3b:ae:3c:b2:9c:27:46:ef:36:c8:ef:b8:ae:9b:01:18:
a7:bf:79:83:41:9c:c9:01:73:47:00:28:10:1f:05:5a:13:f9:
d6:85:3c:1a:df:d6:48:51:4d:5d:c5:a3:c8:9c:75:0a:78:74:
42:82:c1:38:c9:3b:51:c9:17:6b:44:5c:ab:f0:fe:da:d8:f6:
13:8c:5d:1e:d0:f5:9e:fc:45:68:66:6e:4f:a2:6c:c4:1d:74:
70:12:9c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:32:58 2025 by rpki-client