Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
File: 1-MUB87-tSa1OVubkwY90Dt6gXSE.mft (raw, json)
Hash identifier: EeVrpkVqi0voYrIxfTM19kPe+xj0TVZcxwBtWRZvwFo=
Subject key identifier: 14:1A:51:A0:C2:62:24:76:4D:76:57:A9:29:B8:C9:23:DF:15:2C:26
Authority key identifier: F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
Certificate issuer: /CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Certificate serial: 01989DB9594C4C908E3ED156137D1832D8FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
Manifest number: 1211
Signing time: Tue 12 Aug 2025 10:00:26 +0000
Manifest this update: Tue 12 Aug 2025 10:00:26 +0000
Manifest next update: Wed 13 Aug 2025 10:00:26 +0000
Files and hashes: 1: 1-MUB87-tSa1OVubkwY90Dt6gXSE.crl (hash: ZJeZ8p8wZhAsy+CmoQWgm47rM6Vn+Ra/+rC28q6yVMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:b9:59:4c:4c:90:8e:3e:d1:56:13:7d:18:32:d8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Validity
Not Before: Aug 12 10:00:26 2025 GMT
Not After : Aug 13 10:00:26 2025 GMT
Subject: CN=141a51a0c26224764d7657a929b8c923df152c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:05:3d:db:7d:0a:8f:b8:4f:eb:8c:38:49:60:
04:04:86:67:e1:50:53:cf:ff:ea:ba:a0:25:0f:6b:
7a:16:fd:e7:1a:5c:1c:1b:ce:cc:f6:66:e3:84:e4:
96:d1:08:24:0a:fc:8a:9d:05:9b:94:bb:c8:0d:4d:
f8:c3:ad:41:9b:d5:7e:48:c9:31:11:df:ef:d8:f3:
1d:60:ea:eb:01:e5:10:d0:3c:ec:2d:5b:97:7f:b1:
02:b9:82:25:08:68:84:ff:db:aa:75:9b:43:55:65:
3b:ec:b9:6f:0d:24:23:ab:b8:78:e0:66:3b:19:5f:
3b:ac:89:2f:de:0f:40:21:c6:07:5f:b0:5a:ff:35:
0d:53:d2:bf:1f:7f:c6:6c:59:a9:e0:64:77:94:d8:
32:5d:9c:9e:0b:8c:6b:13:8e:fb:62:ec:e9:e7:b4:
0d:19:5f:45:6c:ea:07:21:6b:c6:a9:86:49:5b:55:
0e:a3:ee:f2:8c:be:b7:ff:d9:a9:b8:b9:44:e3:7e:
bb:70:d8:f2:47:13:04:6d:34:85:79:13:9d:cb:16:
f9:52:c6:9c:0e:60:f4:01:2f:21:e9:e2:fa:a0:ea:
c3:66:1c:67:e3:ea:7e:af:9f:8c:ef:2c:e1:06:af:
2f:56:2c:be:50:b6:8f:ff:6a:47:41:3b:d4:b0:0c:
ee:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1A:51:A0:C2:62:24:76:4D:76:57:A9:29:B8:C9:23:DF:15:2C:26
X509v3 Authority Key Identifier:
keyid:F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:49:9f:f9:60:04:6a:f9:e5:9d:4d:78:6e:25:60:d7:a7:ac:
cf:1d:c3:23:3c:9a:5a:4f:17:77:9b:b0:74:fd:26:6e:0e:60:
51:19:7a:cf:8b:c9:eb:63:12:a1:15:4b:3e:3a:47:b1:80:74:
ec:e9:98:90:6c:be:39:70:54:7d:d0:37:69:48:72:9b:48:7c:
42:cc:a8:3b:53:3b:68:5e:41:51:5d:3e:97:3f:7e:23:87:23:
35:4a:9d:d1:ae:52:3d:ae:e5:9c:99:9b:59:2e:bc:95:b9:aa:
04:20:2c:31:7b:2a:55:c8:72:8b:11:9f:ff:c5:85:93:b7:a8:
4c:cd:86:9d:07:d1:73:2b:7f:1c:40:46:b1:47:91:6b:14:5f:
17:ba:9d:ef:8b:9f:0f:60:73:17:47:25:c7:48:91:d0:7c:8f:
94:5f:ad:33:3e:96:39:da:a3:c1:5c:99:07:1d:79:1c:09:86:
60:96:d5:d1:d8:7c:10:17:ac:93:ef:8b:1e:b1:08:5d:95:d0:
bf:e6:5a:06:67:b6:21:0f:a7:e3:2a:6b:b7:2c:08:17:a5:51:
ab:e7:36:d3:7a:5d:ef:b6:48:37:11:42:a3:4f:b0:66:7d:3f:
47:77:ed:38:d7:c4:96:54:73:23:55:a7:63:9a:9a:8f:ac:3c:
e6:b6:0b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 14:33:54 2025 by rpki-client