Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
File: 1-MUB87-tSa1OVubkwY90Dt6gXSE.mft (raw, json)
Hash identifier: DntXghARfLyC4wNjhpWlvAs3a+ILCJmio4nzSrfm/Ik=
Subject key identifier: 2B:B7:20:24:9E:0F:AF:79:D5:87:FF:2F:08:75:17:A2:DC:6C:39:F6
Authority key identifier: F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
Certificate issuer: /CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Certificate serial: 019688B78747B79D679AF2277AA7FBE25954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
Manifest number: 10FD
Signing time: Wed 30 Apr 2025 22:00:51 +0000
Manifest this update: Wed 30 Apr 2025 22:00:51 +0000
Manifest next update: Thu 01 May 2025 22:00:51 +0000
Files and hashes: 1: 1-MUB87-tSa1OVubkwY90Dt6gXSE.crl (hash: L6bt9ZcmL57lDtnIv+mO7td/gLfF135O0cFBPgO1bkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:b7:87:47:b7:9d:67:9a:f2:27:7a:a7:fb:e2:59:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8c501f3bfad49ad4e56e6e4c18f740edea05d21
Validity
Not Before: Apr 30 22:00:51 2025 GMT
Not After : May 1 22:00:51 2025 GMT
Subject: CN=2bb720249e0faf79d587ff2f087517a2dc6c39f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:16:3a:9b:f7:f1:23:81:fd:05:24:fe:9d:26:
c9:e1:93:89:8f:43:f1:21:43:24:74:05:aa:61:71:
c0:ed:3f:37:a4:1c:ea:6d:57:a3:c4:84:2a:43:1d:
24:01:43:39:61:e5:74:b4:f5:db:3d:b8:a5:2f:eb:
83:68:d7:29:75:07:7a:c2:a9:7d:b5:d1:5e:aa:4b:
2b:08:14:bf:a5:47:76:e1:46:16:79:e9:27:90:7f:
c9:2e:f4:dc:51:83:0f:a8:b1:d5:b8:74:4d:50:c2:
4b:f0:7d:d1:54:dc:b6:0a:5e:35:d2:10:4d:44:5b:
77:51:96:bf:0c:03:b8:23:42:59:e1:2c:a3:ce:b1:
11:57:eb:a4:73:20:85:df:b3:58:15:8f:e5:7b:d0:
d8:d9:41:d7:54:83:4e:7d:cf:a5:d3:c6:d0:2c:1b:
51:85:52:31:5a:15:75:34:13:ec:08:c5:17:86:d3:
36:36:59:5e:5f:ca:44:9e:5d:7d:a5:eb:be:dc:d7:
63:ca:f2:81:07:f2:aa:30:2f:14:5e:dd:5d:69:c1:
d2:8e:a5:29:07:91:0d:be:14:58:f1:a6:9c:67:f2:
0c:ca:39:a6:93:29:85:f6:9b:66:2c:49:9a:02:a6:
4b:b1:d7:4d:aa:57:00:75:e5:e2:ab:10:6c:a7:ea:
51:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B7:20:24:9E:0F:AF:79:D5:87:FF:2F:08:75:17:A2:DC:6C:39:F6
X509v3 Authority Key Identifier:
keyid:F8:C5:01:F3:BF:AD:49:AD:4E:56:E6:E4:C1:8F:74:0E:DE:A0:5D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MUB87-tSa1OVubkwY90Dt6gXSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/35d52c-6cc0-4f01-9376-64f492e326ed/1/1-MUB87-tSa1OVubkwY90Dt6gXSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:62:13:87:b8:b6:9f:a1:d4:88:e8:33:b3:9a:90:21:1c:c4:
5e:1e:82:c7:04:37:75:c5:45:ea:c9:25:81:e8:35:3e:28:56:
1a:e4:35:e0:df:85:06:cc:af:d3:a8:8b:b7:a5:e8:73:9c:d4:
9e:18:89:e9:67:cd:08:79:8b:11:1c:da:99:a1:46:2e:b4:93:
91:42:6f:8a:f9:53:88:1a:6f:3a:23:0f:08:b6:5c:e5:47:52:
3f:1b:9f:28:5a:e5:a1:22:1e:8a:72:99:dd:c1:a1:f9:78:a7:
e1:99:22:36:4d:6b:75:fd:b7:ed:76:46:76:98:fa:c1:95:59:
31:f8:07:f3:be:c4:b1:ee:75:04:f9:48:41:83:ac:27:8a:be:
e0:01:89:dc:dc:bd:06:7d:f3:cb:b6:7e:de:9e:55:8d:f1:24:
0f:4d:5d:09:4e:3d:e2:0e:c4:41:d4:74:c9:6f:0a:a6:0b:99:
62:5c:f0:67:48:b3:55:a9:a1:71:7b:d7:6c:fe:aa:99:94:8f:
a5:1a:78:94:4b:0b:4a:65:93:84:68:e5:06:bd:ff:91:de:da:
c9:fc:bf:c8:cd:04:6d:74:56:14:c4:2a:71:d7:d8:c6:73:db:
85:8a:e7:64:4e:b3:1f:da:aa:bd:0c:6c:ba:ab:ee:85:f3:fe:
00:33:25:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:24:05 2025 by rpki-client