Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
File: FMuhsMMFzGL5KXwtmRiZRbl3leE.mft (raw, json)
Hash identifier: WbcV6mmSVsDJX6NYeJXR2LsO2RDFzOG4TMKvBFBdMjs=
Subject key identifier: 40:69:4F:72:E5:8E:E3:21:57:AA:E0:3B:B8:99:53:6C:56:41:F1:D4
Authority key identifier: 14:CB:A1:B0:C3:05:CC:62:F9:29:7C:2D:99:18:99:45:B9:77:95:E1
Certificate issuer: /CN=14cba1b0c305cc62f9297c2d99189945b97795e1
Certificate serial: 019679443E7A7E5DD6944629822414670C43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 22:00:37 +0000
Manifest this update: Sun 27 Apr 2025 22:00:37 +0000
Manifest next update: Mon 28 Apr 2025 22:00:37 +0000
Files and hashes: 1: FMuhsMMFzGL5KXwtmRiZRbl3leE.crl (hash: zB+95taKRADHohBWDzja5qp+Aws30BkwyneGQSECqy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:3e:7a:7e:5d:d6:94:46:29:82:24:14:67:0c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14cba1b0c305cc62f9297c2d99189945b97795e1
Validity
Not Before: Apr 27 22:00:37 2025 GMT
Not After : Apr 28 22:00:37 2025 GMT
Subject: CN=40694f72e58ee32157aae03bb899536c5641f1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:10:f1:e9:40:8c:e0:92:64:ff:af:01:70:30:
39:14:09:8a:b1:7d:b1:95:3c:f1:a2:22:36:ce:b6:
e1:ab:7f:3e:96:74:9a:ce:89:40:08:78:1f:62:7f:
ff:26:4f:c7:84:60:8a:ad:ac:2f:49:f2:73:2c:d6:
10:74:a9:77:fc:23:3f:57:7d:99:23:50:8e:96:4c:
09:92:ce:f5:2a:1c:99:1d:70:c0:ab:f1:f3:a8:3e:
d7:82:0e:89:b3:b6:21:ee:f2:b8:d7:3b:bd:2e:c4:
06:df:51:d2:93:ed:d8:f0:0e:59:2a:c5:ac:e3:c7:
a2:3d:51:91:72:40:83:77:22:9a:70:bf:9c:f3:30:
32:bc:1c:6b:aa:38:73:1c:43:1a:7a:48:e9:2a:c9:
ea:34:ed:85:1c:de:0a:6c:5b:33:32:74:29:80:26:
dd:6b:4d:c7:23:e8:fc:33:28:03:b4:64:eb:69:dd:
a8:78:6a:8b:e4:2f:0d:87:a4:c2:4e:8d:9e:91:a6:
ba:f4:87:d8:fd:5c:63:c1:e7:c6:a5:84:89:0f:47:
91:ce:76:2c:6c:a4:47:57:9d:ae:4c:6b:e9:58:48:
e6:fe:36:fb:a2:05:b1:96:7a:08:36:6f:4c:a1:4e:
3f:cf:03:0b:16:41:22:ed:ce:03:74:72:db:90:fb:
9f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:69:4F:72:E5:8E:E3:21:57:AA:E0:3B:B8:99:53:6C:56:41:F1:D4
X509v3 Authority Key Identifier:
keyid:14:CB:A1:B0:C3:05:CC:62:F9:29:7C:2D:99:18:99:45:B9:77:95:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f9:83:e8:90:42:fe:ad:72:f8:02:8e:86:ee:ef:e9:33:fa:
a6:2d:bc:2f:d3:18:67:dc:b4:b3:c4:44:4d:6b:1f:a6:65:ce:
62:53:46:65:dc:3c:0d:e2:42:e1:a3:0f:18:c4:90:1e:30:b6:
68:c6:a6:9e:9d:d4:ce:b4:9e:ec:6e:f6:64:f8:30:8f:50:e4:
21:9a:fc:7d:93:e8:3b:a1:2e:cd:29:90:8d:b8:56:fd:38:4f:
57:3a:39:ab:e1:4c:ea:bc:99:ba:d6:8a:dc:1c:41:10:1f:7f:
b2:aa:1b:56:9c:d3:d1:53:13:f1:72:0b:c5:ab:60:da:85:c1:
70:95:aa:a6:69:07:c0:1b:31:5a:8a:95:a0:09:f8:22:fb:89:
67:41:dc:3a:65:b3:de:45:34:c8:d0:0c:eb:a8:c3:a4:1c:1d:
a9:8d:f9:e2:09:d5:0e:de:d1:06:05:bf:71:05:6e:5e:fb:be:
70:74:97:21:d8:c2:6f:a9:a6:35:ea:78:89:b3:34:ad:f1:ce:
69:c3:09:5d:a8:ca:01:96:33:f6:f1:eb:2e:32:03:d2:c2:6b:
64:d2:3e:00:40:14:1e:53:b7:77:c9:64:0a:74:63:aa:23:dd:
7a:01:88:4a:fc:dd:4c:dc:e2:95:54:7d:ea:76:fb:f6:ea:5d:
76:77:f9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:53:36 2025 by rpki-client