Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
File: muB8lKimr3pdGPTqrqeeJt-TIhQ.mft (raw, json)
Hash identifier: kFL0QsyTX1dTXZUaUlgMPZWkEAMPrnpHho7keJl1vag=
Subject key identifier: 16:BA:72:34:E3:F2:DA:00:3F:3F:B2:F4:FF:CF:40:52:ED:00:07:FD
Authority key identifier: 9A:E0:7C:94:A8:A6:AF:7A:5D:18:F4:EA:AE:A7:9E:26:DF:93:22:14
Certificate issuer: /CN=9ae07c94a8a6af7a5d18f4eaaea79e26df932214
Certificate serial: 01968D6FE9DD68CBF5FBA07036376226BA8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
Manifest number: 1521
Signing time: Thu 01 May 2025 20:00:43 +0000
Manifest this update: Thu 01 May 2025 20:00:43 +0000
Manifest next update: Fri 02 May 2025 20:00:43 +0000
Files and hashes: 1: hirmv4l90daqtziUonbqzbb8z94.roa (hash: 2pWfc5u+sM7C4s4+z6TKeGnl46lQEVqcp+2HcKGG7wg=)
2: muB8lKimr3pdGPTqrqeeJt-TIhQ.crl (hash: s+HGtaUgxZksvTnAeASlz8ZbjAxEktR4K7GXI11CT9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:6f:e9:dd:68:cb:f5:fb:a0:70:36:37:62:26:ba:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae07c94a8a6af7a5d18f4eaaea79e26df932214
Validity
Not Before: May 1 20:00:43 2025 GMT
Not After : May 2 20:00:43 2025 GMT
Subject: CN=16ba7234e3f2da003f3fb2f4ffcf4052ed0007fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:54:d1:c3:2d:1e:3a:16:30:d1:4d:ac:4a:c6:
91:c9:17:80:28:99:5d:d3:e6:5c:a2:83:68:86:96:
94:fb:8b:2e:85:2b:4d:5f:f6:7a:f1:98:1e:85:c4:
01:cb:6a:47:85:c2:73:c8:b1:e3:4d:b1:ea:fb:cc:
e2:46:d6:24:87:76:62:c0:0b:ba:8e:79:07:c6:c2:
4f:df:07:ad:73:00:a2:d7:4e:10:89:f9:74:b8:e8:
4d:c4:1d:31:5b:45:94:f7:ba:16:8d:dc:b4:73:93:
87:63:76:2e:d9:8a:7d:cf:8c:0a:10:8e:46:e0:f9:
41:34:58:9f:83:f6:f0:a4:5e:1b:ea:07:87:c6:ab:
21:a8:1b:15:e0:30:cb:3f:9a:f6:3a:42:b6:dd:37:
62:47:1f:67:45:34:1e:46:b3:53:4a:68:d6:f3:5b:
e5:40:e3:de:df:a9:bc:7e:27:30:d8:a9:0c:c8:f3:
17:c2:ff:7a:e9:04:6f:72:d2:28:73:65:db:1c:6d:
7a:1c:bb:ec:84:ec:12:ad:79:09:51:9f:de:00:30:
3d:31:38:5a:ab:41:e5:8b:15:20:5d:fa:03:6a:d3:
b5:b2:39:b5:90:fd:7e:59:ee:c1:5e:80:f6:8e:0a:
cb:d6:c7:cf:72:c6:df:54:0a:ac:c1:92:37:0d:11:
3e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BA:72:34:E3:F2:DA:00:3F:3F:B2:F4:FF:CF:40:52:ED:00:07:FD
X509v3 Authority Key Identifier:
keyid:9A:E0:7C:94:A8:A6:AF:7A:5D:18:F4:EA:AE:A7:9E:26:DF:93:22:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:24:09:18:07:de:a7:3b:ac:47:81:45:a7:37:b0:0c:f6:8f:
9a:0d:87:50:aa:b6:62:5d:2f:b1:d9:c5:37:e5:b4:8c:f6:61:
93:90:a7:3c:a1:00:fb:1c:32:17:08:99:4a:46:24:71:79:04:
33:54:0d:51:af:44:a2:cd:1c:2c:5b:16:79:83:ca:eb:17:59:
4c:12:2c:59:28:95:d6:23:14:53:b1:4d:63:4b:cc:d2:bc:5c:
0c:38:b7:c6:83:b0:30:ed:93:b2:e6:2d:35:9f:f9:b9:bb:95:
9b:7a:9f:51:cd:63:a1:66:16:95:b6:55:15:bf:db:2e:1a:2f:
27:b8:b6:b2:83:38:0d:d8:03:32:d2:f1:9b:8d:dd:71:28:6f:
56:37:6e:1e:ef:b3:18:23:3f:b7:e3:b9:da:38:00:eb:f6:08:
d1:0f:42:bc:d1:6f:4b:fb:14:20:17:3f:c3:02:30:71:e6:47:
1e:44:42:26:98:ac:2f:e5:2c:e2:cd:db:66:5f:31:46:53:e7:
8b:6a:65:ef:bd:c7:0c:f6:75:a0:24:ab:a3:96:a7:0c:ae:e7:
43:72:e0:bc:7a:d3:ff:62:41:d2:ec:cd:94:f7:39:48:c2:94:
a1:99:30:08:7d:2b:6e:2a:13:37:d2:05:34:a0:28:a8:37:2b:
68:63:8d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:39:55 2025 by rpki-client