Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
File: mupW9uHBw1kAHsImfvD-4bRW3f0.mft (raw, json)
Hash identifier: zjiqn2J+lNX5rjcppyrIS+T+tknFREgr3DJQiQQjU80=
Subject key identifier: 4C:FE:6A:5A:32:C3:EC:C4:AA:AF:7A:2E:D4:1D:F5:75:7D:F4:30:F5
Authority key identifier: 9A:EA:56:F6:E1:C1:C3:59:00:1E:C2:26:7E:F0:FE:E1:B4:56:DD:FD
Certificate issuer: /CN=9aea56f6e1c1c359001ec2267ef0fee1b456ddfd
Certificate serial: 019769611E63AFE94BC363FF2BA1A0894EB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mupW9uHBw1kAHsImfvD-4bRW3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
Manifest number: 1589
Signing time: Fri 13 Jun 2025 13:01:01 +0000
Manifest this update: Fri 13 Jun 2025 13:01:01 +0000
Manifest next update: Sat 14 Jun 2025 13:01:01 +0000
Files and hashes: 1: mupW9uHBw1kAHsImfvD-4bRW3f0.crl (hash: lciGa3lS5CYvFTUQGTRJZm4vXMAqL0cFeqAM804I/1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mupW9uHBw1kAHsImfvD-4bRW3f0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:1e:63:af:e9:4b:c3:63:ff:2b:a1:a0:89:4e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aea56f6e1c1c359001ec2267ef0fee1b456ddfd
Validity
Not Before: Jun 13 13:01:01 2025 GMT
Not After : Jun 14 13:01:01 2025 GMT
Subject: CN=4cfe6a5a32c3ecc4aaaf7a2ed41df5757df430f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b1:09:cc:46:10:58:f1:21:e0:49:18:12:fc:
ed:4f:39:5b:0f:4f:77:73:44:09:de:55:28:32:d7:
89:07:c7:ae:24:0b:9f:42:cd:52:10:36:a9:8e:a2:
8a:c1:a1:55:21:cd:62:ed:82:60:bf:f4:a4:72:50:
03:01:c1:06:d9:3a:d4:42:c9:44:42:bb:6b:b4:4f:
e3:47:3f:5a:1d:9f:24:d9:47:a9:bd:35:3c:78:68:
47:9e:d8:8f:08:e3:92:f6:27:68:df:d4:92:26:52:
8d:1b:4a:c4:44:2c:b2:7d:7e:d3:11:3a:0c:c4:f5:
55:ed:94:46:90:96:32:b3:a7:77:5e:4d:ce:95:7a:
b8:b9:6b:d4:9a:75:89:34:d2:0a:80:cc:48:14:82:
8a:57:8e:e4:d0:d1:39:c3:9e:10:05:11:c8:83:cf:
2c:0f:2e:df:e8:7b:54:9a:28:dc:85:d2:89:c9:c2:
33:da:7c:3a:b2:ee:b7:c2:9c:40:1b:69:5a:f5:86:
a0:46:91:3f:99:01:f0:2c:2d:39:da:86:20:75:e1:
d1:eb:02:d2:ab:a2:93:02:dc:b6:7b:ab:9f:10:74:
35:e2:65:f3:7e:b5:3a:97:d0:80:80:b2:83:c3:a4:
52:b7:4f:d6:47:ad:d5:79:31:16:00:1d:5a:5a:ac:
47:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FE:6A:5A:32:C3:EC:C4:AA:AF:7A:2E:D4:1D:F5:75:7D:F4:30:F5
X509v3 Authority Key Identifier:
keyid:9A:EA:56:F6:E1:C1:C3:59:00:1E:C2:26:7E:F0:FE:E1:B4:56:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mupW9uHBw1kAHsImfvD-4bRW3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:1b:f0:48:16:94:d1:ea:10:5c:20:0f:52:55:68:2b:77:64:
88:b8:48:bb:83:ed:46:a4:4d:57:cc:2d:b7:b2:14:b9:0a:5c:
e5:d0:75:aa:4c:c1:6b:c3:6f:7d:95:5d:36:e3:5b:16:f0:23:
91:f2:cc:7a:0b:22:d8:59:8c:29:af:50:0a:d6:d8:20:2e:70:
d7:6b:7a:52:f5:96:a7:8e:ca:a7:65:d1:ea:77:76:b6:db:d6:
a7:71:dc:ad:ba:e9:a0:4a:b9:ee:87:08:42:d9:76:f7:61:34:
71:30:b3:5a:a6:c7:a4:24:ed:e9:4b:83:9a:da:67:e5:4f:21:
91:b4:15:bc:85:de:19:1a:bd:2b:63:d3:ca:ea:a8:29:40:70:
89:ef:40:7f:df:3d:0e:6c:87:76:cb:a2:cc:9c:e3:08:5a:7f:
66:8e:2a:3e:bc:9f:a4:d4:0f:27:4b:b3:0f:71:75:03:1e:e2:
1c:3e:78:0d:05:26:c8:78:b0:fd:0c:64:a4:d9:3e:2d:7d:7d:
96:d2:63:01:30:b9:3d:35:d0:03:25:86:6e:80:38:d8:c8:8e:
2b:2b:51:1a:23:e5:ae:88:8e:ee:1e:b4:1b:3e:52:69:af:6b:
83:a1:a7:f1:d7:63:ba:28:94:6a:5c:41:b5:75:0e:51:9e:c6:
10:20:75:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:44 2025 by rpki-client