Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft
File: MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft (raw, json)
Hash identifier: K19LVhdbiO1W6Kt1hZgUhcnjERoC7nD+P8hbsbTOoMU=
Subject key identifier: 1E:E8:4A:1B:9E:61:A6:D5:09:F7:A4:05:05:A8:8C:CD:B4:58:41:2B
Authority key identifier: 32:E8:8A:8C:3F:2F:24:D6:93:31:6D:1F:21:1E:DE:EB:23:23:42:A6
Certificate issuer: /CN=32e88a8c3f2f24d693316d1f211edeeb232342a6
Certificate serial: 019776E5805075D75F20725D3D7FC39D0440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MuiKjD8vJNaTMW0fIR7e6yMjQqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft
Manifest number: 0727
Signing time: Mon 16 Jun 2025 04:00:41 +0000
Manifest this update: Mon 16 Jun 2025 04:00:41 +0000
Manifest next update: Tue 17 Jun 2025 04:00:41 +0000
Files and hashes: 1: MuiKjD8vJNaTMW0fIR7e6yMjQqY.crl (hash: Af6boK3iGsPGeIxC3Y9hAM8HwjCeB7nLMNGsyflr+Zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MuiKjD8vJNaTMW0fIR7e6yMjQqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e5:80:50:75:d7:5f:20:72:5d:3d:7f:c3:9d:04:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32e88a8c3f2f24d693316d1f211edeeb232342a6
Validity
Not Before: Jun 16 04:00:41 2025 GMT
Not After : Jun 17 04:00:41 2025 GMT
Subject: CN=1ee84a1b9e61a6d509f7a40505a88ccdb458412b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2d:bb:b1:c2:dc:d1:0e:be:0b:d7:05:b8:3e:
1a:a5:57:ff:ac:22:c5:ab:ef:1d:aa:c7:46:a6:ae:
e6:29:3c:cf:6c:c4:51:bb:5a:d1:c0:0d:84:ff:fe:
6d:49:96:ac:6e:e0:f8:a5:1f:32:bb:34:d0:bb:a0:
1b:04:b3:b0:cf:04:67:e6:10:79:00:1c:3d:b1:2b:
1c:3d:75:1e:65:40:75:0a:81:84:4c:d7:ac:65:2d:
17:7d:4d:40:28:5f:3d:b9:e9:2b:41:3b:ee:ff:75:
1f:2d:a2:2a:67:c5:27:86:82:ef:a6:19:fe:51:0d:
b5:ca:ac:a6:dd:40:c5:b8:47:3e:2e:d9:e6:0f:fb:
4b:75:b7:6e:71:a0:72:9c:44:64:09:3b:c4:44:c3:
7a:0d:4d:c0:a9:6f:7f:6e:47:51:40:80:7d:fa:ce:
f9:95:5d:81:a3:33:08:d9:ea:e9:bd:d2:c5:88:37:
e9:56:5b:3a:49:df:8d:4e:f3:c4:9e:ea:f3:33:fd:
a1:86:f1:14:54:34:21:6c:79:eb:41:d8:f0:9e:f3:
ae:12:f6:ba:60:69:7c:29:eb:0c:c3:42:d7:34:1b:
ac:8c:82:a2:e7:5c:6b:cc:00:37:02:3f:ae:18:71:
21:0c:72:fe:dc:2a:5b:ab:b1:a5:52:26:9f:a2:81:
d2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E8:4A:1B:9E:61:A6:D5:09:F7:A4:05:05:A8:8C:CD:B4:58:41:2B
X509v3 Authority Key Identifier:
keyid:32:E8:8A:8C:3F:2F:24:D6:93:31:6D:1F:21:1E:DE:EB:23:23:42:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuiKjD8vJNaTMW0fIR7e6yMjQqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:61:62:9c:61:88:0e:43:4b:b6:87:05:89:f6:89:c3:29:d8:
0c:9b:19:b8:c0:0f:4e:4b:53:4f:25:24:64:2e:37:5c:55:91:
63:f8:1e:94:41:e8:69:dd:84:d2:1f:ff:bf:16:62:c1:f9:5f:
ce:b9:ca:a7:59:25:df:8f:cf:11:6c:61:4c:ca:13:36:30:f3:
e0:f2:56:e4:44:60:14:d0:0a:3d:b0:ca:86:d8:4e:1b:cb:fc:
91:78:f9:ad:d0:e0:32:7c:50:b2:49:86:9b:79:5d:d4:2f:be:
10:87:17:5b:56:9c:27:c1:46:44:65:ad:52:9e:6d:f1:a5:90:
9a:76:6f:50:39:db:99:97:99:93:49:39:7f:d4:f5:11:9b:b6:
5a:36:fa:6e:e3:73:a7:f1:b3:38:99:a1:5f:87:cc:84:7b:22:
50:63:9d:90:8a:0e:84:dd:24:3d:89:a6:24:3a:b4:ef:b0:48:
74:d6:a6:6b:e4:b0:e1:53:aa:34:f5:5f:2d:c2:26:0e:ec:56:
69:47:a2:db:c0:97:79:5e:47:7b:16:de:c6:9d:16:80:ab:5c:
03:4b:f1:50:29:e4:38:66:2a:08:41:2a:2d:32:b9:ee:74:7d:
01:0e:6f:35:c3:ab:f8:26:07:8d:4d:68:e5:4f:4e:08:fb:a5:
e4:38:99:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:42:04 2025 by rpki-client