
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
File: FMuhsMMFzGL5KXwtmRiZRbl3leE.mft (raw, json)
Hash identifier: +9bIqZ3M0OMdkuWnLNLOqNYcK5kTmIJSNErxieB1cHc=
Subject key identifier: F6:3C:C1:8B:D7:D1:FC:78:BD:9B:8D:48:6D:8F:79:3F:CC:17:E8:54
Authority key identifier: 14:CB:A1:B0:C3:05:CC:62:F9:29:7C:2D:99:18:99:45:B9:77:95:E1
Certificate issuer: /CN=14cba1b0c305cc62f9297c2d99189945b97795e1
Certificate serial: 0196A3C08EDE39EBCD660F6DF702834F4DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
Manifest number: 1525
Signing time: Tue 06 May 2025 04:00:27 +0000
Manifest this update: Tue 06 May 2025 04:00:27 +0000
Manifest next update: Wed 07 May 2025 04:00:27 +0000
Files and hashes: 1: FMuhsMMFzGL5KXwtmRiZRbl3leE.crl (hash: 1KzvfIalYkTMMGcChMIlgKyj92qJOvWCU4x4P8F8w38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:c0:8e:de:39:eb:cd:66:0f:6d:f7:02:83:4f:4d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14cba1b0c305cc62f9297c2d99189945b97795e1
Validity
Not Before: May 6 04:00:27 2025 GMT
Not After : May 7 04:00:27 2025 GMT
Subject: CN=f63cc18bd7d1fc78bd9b8d486d8f793fcc17e854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:90:ad:76:00:fa:4f:c2:63:28:c4:7d:44:3b:
ac:18:b7:c6:0b:48:70:76:ad:7d:c1:33:2a:4e:c7:
fa:5b:22:54:12:e7:5a:23:eb:a8:d6:c5:c6:6f:af:
f9:58:c1:31:f7:3c:dd:60:a1:3e:01:cc:1f:a7:27:
d3:82:c6:b7:c2:23:04:44:aa:d0:f1:eb:07:ca:01:
6e:49:7c:95:c5:1b:ca:f5:b0:2e:e1:89:f1:0e:98:
f6:1b:2a:19:6a:c5:ba:ef:95:92:d6:f2:d7:c0:ce:
79:7b:c7:01:45:d9:65:c3:4a:c5:17:4f:d2:d0:c7:
75:68:8d:2c:3b:5c:a4:13:63:12:bd:cf:85:25:e1:
0d:a6:a0:e1:6f:58:56:11:8a:3e:2f:99:29:38:eb:
3d:32:46:15:32:be:d5:8b:a5:9c:17:ef:4b:48:c7:
47:d4:8a:a1:17:82:79:ba:48:5b:0c:c4:d6:f2:c3:
0f:04:25:99:4c:14:59:12:09:12:ac:89:70:83:3f:
4c:33:37:45:09:9d:9f:51:6a:70:58:4c:fe:58:f8:
bd:f7:5e:e3:59:25:8d:9c:5e:cb:bf:26:33:7c:cd:
7d:ae:9a:a3:26:ac:d3:91:94:63:b5:1c:7e:94:12:
27:97:0e:7f:5f:18:4e:36:01:f4:8b:74:04:ee:0b:
b3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3C:C1:8B:D7:D1:FC:78:BD:9B:8D:48:6D:8F:79:3F:CC:17:E8:54
X509v3 Authority Key Identifier:
keyid:14:CB:A1:B0:C3:05:CC:62:F9:29:7C:2D:99:18:99:45:B9:77:95:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:58:50:0b:51:1a:c1:46:59:26:2e:11:54:ab:c8:71:18:9d:
f1:72:35:51:80:33:fe:9a:39:72:ff:da:c0:d6:12:1a:fa:21:
ac:64:a5:05:d0:6a:2a:68:db:e4:28:00:d2:be:cc:ae:20:bd:
1c:04:88:26:cb:84:67:2b:ad:f7:aa:e1:f8:14:a0:51:cc:09:
e1:d8:b7:cb:e9:dd:7c:7c:e9:d6:90:54:89:3b:dc:b7:49:c3:
44:b4:30:de:ed:d5:a6:52:11:b4:64:41:ea:c1:e7:ee:cf:f9:
83:82:f2:7b:5b:c8:f8:d5:97:27:52:81:86:26:df:ba:7e:0a:
37:b7:fd:1e:f6:35:7b:30:26:6c:1b:cb:bd:41:2d:c3:f0:25:
67:98:9b:95:c5:7e:40:4d:5b:8a:ce:cc:95:41:26:54:2f:60:
2f:57:b0:e4:ad:5a:df:d1:67:3a:00:32:5d:22:9f:93:33:b2:
0d:d5:76:40:12:0a:92:9c:fc:6c:b7:ba:f3:23:82:d9:f7:be:
3f:46:8d:60:ff:44:09:69:38:6f:6a:c6:c0:dd:9d:0c:17:cb:
f1:73:bd:7d:18:b2:db:ae:99:00:fd:33:70:8a:dd:f3:e8:8e:
9d:54:26:dd:44:e6:c0:2d:f3:08:db:ea:63:0a:21:70:d1:f5:
a7:dd:17:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:53:43 2025 by rpki-client