Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
File: MusrUeN0jCUnQC5oYBqIkSiDoFg.mft (raw, json)
Hash identifier: nS1SNZ41X3ME7mlWPLXUh6BH8kVGvLLB2Gwc7BMq/XE=
Subject key identifier: B2:9F:B8:52:D7:B6:02:85:70:27:57:24:17:60:A4:BB:3F:4C:C6:F1
Authority key identifier: 32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58
Certificate issuer: /CN=32eb2b51e3748c2527402e68601a88912883a058
Certificate serial: 0196760CE1AAA964998C59AF3B62605FDB59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 07:01:17 +0000
Manifest this update: Sun 27 Apr 2025 07:01:17 +0000
Manifest next update: Mon 28 Apr 2025 07:01:17 +0000
Files and hashes: 1: KhlRzejfpvDxwhcPEcTkW8z6UJk.roa (hash: OH1bpS6azjDuSrz2eDsCxiLR1IWtc/vamDUbBv4QJmc=)
2: MusrUeN0jCUnQC5oYBqIkSiDoFg.crl (hash: L/5ZYw0LqHCoa3h9cSZoD0LWZduC8C5Hk0bBaNsI0j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:e1:aa:a9:64:99:8c:59:af:3b:62:60:5f:db:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32eb2b51e3748c2527402e68601a88912883a058
Validity
Not Before: Apr 27 07:01:17 2025 GMT
Not After : Apr 28 07:01:17 2025 GMT
Subject: CN=b29fb852d7b60285702757241760a4bb3f4cc6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6c:6a:0f:aa:68:0b:d3:cb:14:76:a4:75:de:
ad:3d:19:f9:77:9c:c6:95:ad:30:69:2b:f5:b9:3d:
e6:06:ed:c9:2a:9a:8b:9d:80:2c:f7:92:cc:30:e2:
bf:d1:31:bf:b6:2d:9d:3d:53:6b:74:dd:d5:a9:fc:
25:1b:7c:b6:0d:d0:41:9f:24:44:21:26:25:b3:f4:
05:a7:ab:6c:7c:a7:c8:f6:4b:98:5b:a0:ae:52:24:
29:86:14:23:1c:f1:d5:1f:26:3e:f7:2c:04:bd:93:
f9:a9:a2:59:42:76:42:d3:6c:23:50:bc:c4:c6:8e:
e3:d6:57:b2:b6:87:f9:d2:5c:f7:d7:f5:a1:b7:c8:
99:d5:26:17:4b:13:e0:db:de:32:18:a7:2c:c5:91:
d0:c1:4c:5d:9f:97:27:8c:76:8f:cf:af:eb:78:7c:
30:8a:71:f9:fa:dd:59:ee:06:ac:6b:cb:5a:30:29:
26:b3:40:26:c2:1a:93:55:ff:b4:2d:7d:99:c3:2b:
3b:b7:8f:9b:65:36:0f:60:87:99:ec:ee:d9:38:56:
c9:be:6a:23:0a:2e:11:3e:ec:59:d3:07:48:e9:f1:
c9:36:19:66:76:7c:c9:52:ae:a2:5e:28:f1:39:06:
d6:e8:35:0a:ce:24:b4:71:0e:06:69:63:71:b8:79:
58:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9F:B8:52:D7:B6:02:85:70:27:57:24:17:60:A4:BB:3F:4C:C6:F1
X509v3 Authority Key Identifier:
keyid:32:EB:2B:51:E3:74:8C:25:27:40:2E:68:60:1A:88:91:28:83:A0:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MusrUeN0jCUnQC5oYBqIkSiDoFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/bab0e5-ebe8-4e0a-a649-6ac1aff36c07/1/MusrUeN0jCUnQC5oYBqIkSiDoFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b3:ba:22:22:ab:3b:1e:4f:f6:00:d0:a3:83:05:ca:cd:3e:
f5:82:5e:40:58:27:9c:17:29:5b:b2:3b:88:4f:23:f0:61:ea:
94:fc:c8:1b:75:16:3f:e0:dc:1a:f3:17:27:2d:aa:46:e1:d4:
45:3a:48:44:53:d7:dd:83:60:63:4a:7e:bc:48:de:78:39:32:
98:12:ba:90:3e:3c:85:81:a8:ad:40:08:0c:a3:90:21:3a:99:
94:02:36:5d:a4:dc:38:ad:d7:1a:09:b1:f7:cb:07:f8:10:be:
c4:83:d6:f7:3f:8e:69:c9:72:21:62:d7:a0:2d:2f:cc:31:fe:
eb:29:fc:aa:3b:26:f3:ec:90:ae:6a:cf:3e:0d:49:38:73:9c:
12:f5:c3:80:39:3f:f6:08:52:c1:5f:18:92:75:b4:48:d5:1d:
45:d6:47:52:15:22:4d:d8:ac:07:6c:09:b5:b8:a4:2f:e2:f1:
2f:58:7c:d8:d9:ef:2c:3f:c2:06:e2:80:97:7a:4f:d7:bc:1d:
7e:10:1b:4f:3a:a2:10:c9:4d:92:1e:f7:3e:38:f1:b4:47:19:
e7:a2:9a:18:91:fc:bd:e5:49:08:84:63:ed:8d:8a:c5:c3:32:
ee:cc:1c:75:ad:4a:4a:be:64:c2:1d:4d:0a:f0:78:17:5e:7a:
07:b9:df:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:12:49 2025 by rpki-client