Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
File: Mu0BRXesc_-H7yDKb3V5XkyTf84.mft (raw, json)
Hash identifier: IZxgqPQLCEPi3zb1wW9rr/Dc+DhgvNDey/HWN72a5kU=
Subject key identifier: 8D:C5:BB:26:2E:A0:9A:16:46:DC:3A:D3:DD:DD:4C:68:94:2F:A5:DF
Authority key identifier: 32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
Certificate issuer: /CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
Certificate serial: 0196A91E6BA06A7EE1477FCA7F75C9C4155F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
Manifest number: 071A
Signing time: Wed 07 May 2025 05:01:05 +0000
Manifest this update: Wed 07 May 2025 05:01:05 +0000
Manifest next update: Thu 08 May 2025 05:01:05 +0000
Files and hashes: 1: Mu0BRXesc_-H7yDKb3V5XkyTf84.crl (hash: hMnsCYRXzDY5hmK/oidzRDNBP/z4wskIsxAVleUe7WU=)
2: Szpv7SbbTq_ZPkpVt0ZS-yigLYQ.roa (hash: tot/yU4vNOc3RqisHsJwZZdti1Jdkg5nZCtY1DuBRp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:1e:6b:a0:6a:7e:e1:47:7f:ca:7f:75:c9:c4:15:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
Validity
Not Before: May 7 05:01:05 2025 GMT
Not After : May 8 05:01:05 2025 GMT
Subject: CN=8dc5bb262ea09a1646dc3ad3dddd4c68942fa5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:35:10:9d:c2:a3:fa:c5:e5:2c:6d:5e:4a:33:
09:3b:b6:6b:29:98:ff:de:08:69:02:3b:96:f8:60:
aa:17:34:37:93:5c:0f:3a:a9:c1:1a:a7:12:de:7a:
e5:f6:8f:e3:5d:55:25:33:9d:9d:03:c6:ee:72:20:
30:6b:c2:28:bd:6e:c0:b1:04:9e:97:51:f7:a6:43:
a8:07:41:1a:69:d5:19:ba:19:7d:2b:2a:11:cd:ff:
04:5b:77:38:c4:e9:7b:6b:b8:3d:1d:70:77:15:de:
71:4f:74:ba:52:9b:f6:1c:ea:d0:d9:7f:96:f6:8a:
c6:10:28:6d:67:1f:80:86:89:1e:03:18:d8:a8:f8:
f5:7e:f2:3f:2b:d4:7c:6e:fe:99:eb:e0:e0:fd:23:
fb:a2:72:0c:15:91:cf:a3:9e:c3:5a:7f:0d:93:de:
22:44:a4:4f:61:e9:05:68:19:6d:77:7c:b1:34:31:
75:1d:03:d1:a0:71:76:41:e6:a1:d0:4c:99:e5:46:
b7:0b:6d:6b:62:0c:c4:ae:db:46:7d:3d:d4:19:38:
cf:8c:c8:6f:bd:06:52:4c:b3:d2:b3:f3:94:e7:f3:
42:ac:9a:af:5b:86:60:a1:86:ce:58:11:a7:fa:5b:
f0:7f:db:60:9f:fe:73:e4:44:cd:b9:95:bd:58:e2:
96:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C5:BB:26:2E:A0:9A:16:46:DC:3A:D3:DD:DD:4C:68:94:2F:A5:DF
X509v3 Authority Key Identifier:
keyid:32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e9:f0:24:98:bc:c0:45:21:b5:52:25:cd:b8:10:b1:49:64:
99:f0:a3:a8:75:77:5e:a4:53:44:c2:24:95:7d:5f:75:02:7a:
08:02:a9:d0:6c:a8:b6:df:29:18:04:87:20:45:b3:8e:91:81:
e1:eb:1e:73:d2:0b:af:bc:0d:9a:12:70:52:fa:25:3c:1f:18:
b0:38:2d:b1:e9:c1:ff:de:f3:60:b9:07:a7:a6:c4:36:61:86:
ec:8e:b9:e1:b1:53:d9:05:cb:7f:a8:38:5f:56:df:52:1f:56:
c7:28:84:1a:4e:e6:3e:69:a2:97:32:00:c0:6e:9a:c4:8c:9b:
3d:70:a4:3f:4d:63:9b:5f:76:6d:1b:99:f4:b7:11:ab:eb:b4:
aa:10:f0:16:73:12:af:97:6b:a3:bb:f0:75:68:a1:8b:98:e0:
8b:c1:70:31:fb:af:41:aa:ef:e1:a7:e7:dd:1b:c9:1a:45:59:
38:62:21:fa:23:8e:72:53:56:da:d6:ac:3e:48:a9:a0:3d:06:
e9:c2:f1:61:f8:a5:b4:13:4c:ae:e5:dd:82:ba:af:e9:6a:80:
47:01:31:94:7f:b5:bc:5b:3c:46:27:00:1c:8f:5b:a8:c6:41:
ba:da:33:40:f9:82:46:a2:1c:39:5c:30:6a:7e:99:6e:76:6c:
8b:b5:bd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 08:45:54 2025 by rpki-client