Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
File: 1-muQgEgTpldoh5it3nvb0ObQ5T4.mft (raw, json)
Hash identifier: EJDgUtb0GAs0DWzF9Jc15W3uAMhK2lQ/vCdjRQwiqP4=
Subject key identifier: BB:0A:70:37:96:B6:BA:20:76:B9:98:90:53:22:BD:33:D4:57:D7:21
Authority key identifier: FA:6B:90:80:48:13:A6:57:68:87:98:AD:DE:7B:DB:D0:E6:D0:E5:3E
Certificate issuer: /CN=fa6b90804813a657688798adde7bdbd0e6d0e53e
Certificate serial: 0197B7B311E936986376E6C1CAD6A15528AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
Manifest number: 04DA
Signing time: Sat 28 Jun 2025 18:00:55 +0000
Manifest this update: Sat 28 Jun 2025 18:00:55 +0000
Manifest next update: Sun 29 Jun 2025 18:00:55 +0000
Files and hashes: 1: 1-muQgEgTpldoh5it3nvb0ObQ5T4.crl (hash: F2OjDRbn6U6b64CoHINqjGub/4kGKLN3TlhDmEiPzsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:11:e9:36:98:63:76:e6:c1:ca:d6:a1:55:28:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa6b90804813a657688798adde7bdbd0e6d0e53e
Validity
Not Before: Jun 28 18:00:55 2025 GMT
Not After : Jun 29 18:00:55 2025 GMT
Subject: CN=bb0a703796b6ba2076b998905322bd33d457d721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b6:cf:71:3e:4d:db:98:41:2a:7a:55:57:cd:
4b:96:4c:fb:40:ef:77:b2:16:b5:66:29:df:c7:2b:
e1:04:06:fc:b6:53:58:c3:19:fe:c0:77:b9:f0:f8:
9a:49:b4:59:a3:e9:37:76:b4:28:ff:93:1b:23:53:
49:e8:eb:43:bc:f0:ab:09:5e:38:e6:08:d0:35:48:
4c:48:26:83:19:35:0e:f5:cc:a2:fd:8d:f2:a0:7b:
af:a6:f8:9f:4d:67:cf:59:e0:4e:c7:be:11:36:4f:
d6:87:ef:c3:17:13:2a:11:91:3a:2f:b3:02:7c:21:
6f:0e:ca:d2:ad:79:d2:49:9c:9e:fb:b1:a5:6a:84:
ef:dc:ac:c3:f7:77:c4:40:b0:71:cd:b3:15:a2:b7:
d1:8a:65:44:20:5b:29:06:c5:a9:bc:3c:5c:12:6b:
da:d0:48:35:99:2e:1b:b1:43:f6:66:d9:20:f6:39:
2f:a1:0f:0d:ba:f9:f5:30:6d:27:47:10:f7:ed:c7:
97:cd:3d:98:12:88:82:4f:06:50:1d:73:38:ea:bc:
21:ba:a6:fb:2c:1f:58:82:8d:66:90:f6:e2:a8:75:
f5:a6:5a:ee:80:ab:55:d3:18:27:63:45:ea:fb:53:
7c:09:e1:69:60:2d:26:de:c1:5c:91:db:3e:4f:ea:
50:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0A:70:37:96:B6:BA:20:76:B9:98:90:53:22:BD:33:D4:57:D7:21
X509v3 Authority Key Identifier:
keyid:FA:6B:90:80:48:13:A6:57:68:87:98:AD:DE:7B:DB:D0:E6:D0:E5:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:eb:04:9a:62:2e:d8:50:96:76:84:d6:22:ec:70:9b:2a:f5:
73:84:47:4f:e8:8f:f9:af:9f:74:88:6d:b1:66:27:6b:b3:ab:
6d:f4:37:8e:3b:88:3f:eb:89:cf:7d:e5:16:8b:49:09:d2:82:
a9:ed:6b:21:ed:0c:4a:0f:17:ba:7c:10:cb:1c:1b:d7:4d:79:
b6:e7:b0:1f:df:74:d3:46:3e:b7:2e:e1:57:3a:1a:f8:8f:90:
5d:59:6f:18:61:36:c8:8b:65:d6:7b:b6:78:30:00:fb:5e:f6:
1a:37:46:85:6f:af:52:42:fd:98:fe:aa:c1:3a:9f:3d:23:da:
1e:22:62:59:73:e8:f6:5d:b5:81:13:0c:12:77:b7:44:08:e6:
d0:bc:19:49:e2:63:d6:9d:fb:be:8f:a1:71:41:a1:23:b6:47:
3f:fd:62:c7:32:76:a9:70:e0:a3:e1:d1:d5:0e:04:9c:ea:2d:
a8:3a:d0:bb:c2:eb:a6:0b:16:89:0f:55:c8:37:83:20:0a:e0:
b7:53:38:6e:ee:e0:d6:40:d3:2f:f8:d0:76:f9:e1:6f:67:e7:
25:82:f0:03:26:c9:e2:bf:c2:6e:e7:72:8e:b9:70:55:a3:29:
87:39:84:00:14:6e:08:ff:1d:8b:a4:d9:de:b1:e3:d2:fe:d2:
6b:36:1c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:31:32 2025 by rpki-client