Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
File: 1-MUB87-tSa1OVubkwY90Dt6gXSE.mft (raw, json)
Hash identifier: 3FsdxddthbOrqXVCQ/fg/QegeIB2e0pbwGLcUF6NN+o=
Subject key identifier: D3:E0:BC:F3:7C:9B:BC:D9:12:ED:03:28:F0:FF:0A:B5:11:F4:AE:D5
Authority key identifier: F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
Certificate issuer: /CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Certificate serial: 0196C2A6E564D3259EE0BDDE060757BF097D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
Manifest number: 111B
Signing time: Mon 12 May 2025 04:00:39 +0000
Manifest this update: Mon 12 May 2025 04:00:39 +0000
Manifest next update: Tue 13 May 2025 04:00:39 +0000
Files and hashes: 1: 1-MUB87-tSa1OVubkwY90Dt6gXSE.crl (hash: B3xrdascFhYgqp2IEWW9VkyGaQwBmKYnV16G+WMffA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:e5:64:d3:25:9e:e0:bd:de:06:07:57:bf:09:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Validity
Not Before: May 12 04:00:39 2025 GMT
Not After : May 13 04:00:39 2025 GMT
Subject: CN=d3e0bcf37c9bbcd912ed0328f0ff0ab511f4aed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:49:f3:3f:dc:c7:81:34:5c:4f:2d:33:14:
a7:83:d1:66:62:6b:e7:9c:d8:a2:65:fb:a1:3c:c7:
e7:4a:4e:8d:a5:fc:dc:af:2a:1c:a9:fe:d5:57:aa:
41:dc:6f:cd:be:12:1d:c2:25:4c:e8:6a:2c:e2:c6:
a9:8a:da:32:0b:34:d2:86:2b:b0:78:ba:d0:65:88:
2b:78:30:fe:c1:25:fc:e7:c0:b5:3f:e4:c7:25:ff:
28:0e:1e:d3:9b:62:12:28:1e:ec:c2:93:ee:50:4f:
56:9e:c8:a7:23:62:33:29:77:2a:58:8b:95:77:a6:
4d:1c:d4:c1:f8:be:81:59:33:43:86:7c:f6:9d:4e:
b5:62:24:c0:4c:fb:1c:7d:da:0c:7c:e9:6d:8d:06:
80:48:6e:0a:c6:b4:2b:f6:d5:82:cd:c3:12:8d:7d:
7e:52:0c:fe:c6:ad:c1:cc:97:6d:73:a5:47:84:2e:
63:45:40:df:8b:b8:43:05:5c:66:ca:7b:94:c6:95:
c4:ae:61:bb:1f:fa:9e:24:8c:33:c0:b3:57:bb:8a:
e9:47:8e:47:20:ea:71:3d:f9:db:0e:7e:b5:86:85:
db:86:7e:2b:dc:2d:67:8c:ce:71:f6:58:40:28:50:
04:2f:26:2b:2c:09:02:0c:81:16:2c:a9:bb:7c:06:
a5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E0:BC:F3:7C:9B:BC:D9:12:ED:03:28:F0:FF:0A:B5:11:F4:AE:D5
X509v3 Authority Key Identifier:
keyid:F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6e:8c:3f:9d:5b:4a:55:64:dd:b8:c6:76:6a:7e:40:23:f8:
78:c3:05:fe:aa:5f:44:9b:af:aa:6b:25:05:e2:38:5c:cb:24:
85:42:f0:f3:fd:16:4f:58:36:4a:4b:71:0d:08:ca:6f:97:5e:
43:92:0b:4e:bd:d8:82:53:5e:1d:85:2d:0a:58:21:08:10:9e:
e6:6c:56:42:f1:9b:de:8a:60:d1:df:4b:16:2a:7a:77:76:ee:
ae:92:a2:ba:ad:b6:0e:56:a4:73:ab:fa:4f:ef:d2:56:2f:8f:
fa:ba:17:53:ba:28:8d:d4:42:47:21:8f:c7:95:0d:af:85:09:
f9:18:82:f4:d2:d6:00:b3:69:e7:53:03:79:bf:c5:8a:4f:65:
97:60:e4:13:93:e1:75:2a:ca:1b:1f:af:04:4a:bd:6a:ca:bf:
64:66:be:92:1f:34:68:f6:b0:18:1d:8e:e2:4f:42:db:94:a5:
f1:07:48:b6:4e:ae:5e:06:10:a4:b6:66:87:7b:a8:b3:cd:de:
06:da:66:58:9f:0d:61:7c:e7:5a:89:f1:cd:08:dc:95:2b:d6:
bd:17:ae:8f:9e:ad:d8:ef:33:96:53:c4:c4:8c:83:f9:dc:3a:
c5:e2:ce:c3:63:d8:74:6d:c5:54:49:7b:17:21:b1:9f:71:61:
a8:0e:9d:40
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZbCpuVk0yWe4L3eBgdXvwl9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YzUwMWYzYmZhZDQ5YWQ0ZTU2ZTZlNGMxOGY3NDBlZGVh
MDVkMjEwHhcNMjUwNTEyMDQwMDM5WhcNMjUwNTEzMDQwMDM5WjAzMTEwLwYDVQQD
EyhkM2UwYmNmMzdjOWJiY2Q5MTJlZDAzMjhmMGZmMGFiNTExZjRhZWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSVJ8z/cx4E0XE8tMxSng9FmYmvn
nNiiZfuhPMfnSk6Npfzcryocqf7VV6pB3G/NvhIdwiVM6Gos4sapitoyCzTShiuw
eLrQZYgreDD+wSX858C1P+THJf8oDh7Tm2ISKB7swpPuUE9WnsinI2IzKXcqWIuV
d6ZNHNTB+L6BWTNDhnz2nU61YiTATPscfdoMfOltjQaASG4KxrQr9tWCzcMSjX1+
Ugz+xq3BzJdtc6VHhC5jRUDfi7hDBVxmynuUxpXErmG7H/qeJIwzwLNXu4rpR45H
IOpxPfnbDn61hoXbhn4r3C1njM5x9lhAKFAELyYrLAkCDIEWLKm7fAalvQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNPgvPN8m7zZEu0DKPD/CrUR9K7VMB8GA1UdIwQY
MBaAFPjFAfO/rUmtTlbm5MGPdA7eoF0hMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1NVUI4Ny10U2ExT1Z1Ymt3WTkwRHQ2Z1hTRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcvMzVkNTJjLTZjYzAtNGYwMS05Mzc2
LTY0ZjQ5MmUzMjZlZC8xLzEtTVVCODctdFNhMU9WdWJrd1k5MER0NmdYU0UubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2U3LzM1ZDUyYy02Y2MwLTRmMDEtOTM3Ni02NGY0OTJlMzI2
ZWQvMS8xLU1VQjg3LXRTYTFPVnVia3dZOTBEdDZnWFNFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeW6M
P51bSlVk3bjGdmp+QCP4eMMF/qpfRJuvqmslBeI4XMskhULw8/0WT1g2SktxDQjK
b5deQ5ILTr3YglNeHYUtClghCBCe5mxWQvGb3opg0d9LFip6d3burpKiuq22Dlak
c6v6T+/SVi+P+roXU7oojdRCRyGPx5UNr4UJ+RiC9NLWALNp51MDeb/Fik9ll2Dk
E5PhdSrKGx+vBEq9asq/ZGa+kh80aPawGB2O4k9C25Sl8QdItk6uXgYQpLZmh3uo
s83eBtpmWJ8NYXznWonxzQjclSvWvReuj56t2O8zllPExIyD+dw6xeLOw2PYdG3F
VEl7FyGxn3FhqA6dQA==
-----END CERTIFICATE-----
Generated at Mon May 12 07:14:06 2025 by rpki-client