Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
File: Mu0BRXesc_-H7yDKb3V5XkyTf84.mft (raw, json)
Hash identifier: MAHTZHvWNy1ywx5Yqxw6YgOQSqULRo5Zx2rD+tuhQtg=
Subject key identifier: E8:35:23:85:D2:82:CC:90:18:00:F5:32:C5:F9:F6:B1:02:BD:79:9D
Authority key identifier: 32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
Certificate issuer: /CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
Certificate serial: 019872CFC9CC19ABCCDEB4D2643F89EF9B18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
Manifest number: 0807
Signing time: Mon 04 Aug 2025 02:01:16 +0000
Manifest this update: Mon 04 Aug 2025 02:01:16 +0000
Manifest next update: Tue 05 Aug 2025 02:01:16 +0000
Files and hashes: 1: Mu0BRXesc_-H7yDKb3V5XkyTf84.crl (hash: CZRHMdxSCF5qG+4T9wNpYTjYxmaDG17LmP4jtHylRZU=)
2: Szpv7SbbTq_ZPkpVt0ZS-yigLYQ.roa (hash: tot/yU4vNOc3RqisHsJwZZdti1Jdkg5nZCtY1DuBRp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:c9:cc:19:ab:cc:de:b4:d2:64:3f:89:ef:9b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
Validity
Not Before: Aug 4 02:01:16 2025 GMT
Not After : Aug 5 02:01:16 2025 GMT
Subject: CN=e8352385d282cc901800f532c5f9f6b102bd799d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a4:92:1f:45:33:4b:9a:2a:be:02:79:ce:41:
9d:4f:3a:b6:f7:b5:9f:41:5e:fc:f7:33:c2:45:ba:
56:a1:ba:9d:87:f9:12:0a:32:01:30:d9:14:e1:67:
b3:a0:a8:c1:cf:b7:d1:e8:ac:87:87:ae:bd:7c:c4:
f1:52:d9:59:88:9b:63:b4:a9:51:c8:67:4f:9a:59:
50:75:fe:7a:a1:93:88:e5:42:c4:c4:12:22:44:57:
71:bd:be:87:3d:5e:a9:3b:91:80:7e:d2:c2:13:2b:
82:85:86:f0:6c:77:51:ed:f9:6a:c2:18:c7:38:13:
e0:59:6e:35:53:36:8d:fd:51:e4:20:a4:78:d7:cd:
16:63:7a:0c:eb:1d:f7:4d:f8:a8:94:b6:2a:21:59:
0c:67:b8:7a:1d:c2:92:af:05:70:80:16:dd:d3:85:
70:de:e7:fd:ac:82:e3:6d:8a:23:b0:d3:fd:8f:93:
26:5c:84:9d:52:eb:27:ca:9e:55:e6:65:35:d3:28:
81:16:4d:98:73:ac:99:0f:29:cd:07:12:b6:53:bc:
82:0c:cf:60:4d:a7:e5:ee:4b:06:f1:62:59:df:97:
e2:6d:34:42:bb:f9:26:9b:25:c5:f7:2e:8f:7c:8a:
98:54:e3:87:e1:88:35:97:a4:ae:94:58:f6:b3:4d:
b2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:35:23:85:D2:82:CC:90:18:00:F5:32:C5:F9:F6:B1:02:BD:79:9D
X509v3 Authority Key Identifier:
keyid:32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:10:62:99:83:58:bf:5b:5b:68:15:ec:7e:01:dc:04:4e:0f:
7f:77:cf:c8:7f:2b:b5:ed:59:8b:eb:c6:c1:ac:4f:4d:40:fc:
0d:bf:c0:8d:d2:0a:ae:9f:9e:45:bb:64:0c:5e:7d:03:9b:57:
4e:6e:a0:3e:f5:1b:fe:93:8e:5a:9c:0d:ba:04:4c:32:0d:71:
3f:04:05:ba:a1:8e:95:64:66:09:5e:d7:af:c7:af:83:99:e2:
4d:64:4d:d5:0d:b4:e0:df:0e:6a:a6:3e:e5:4e:f6:90:4b:7f:
5f:14:8e:b1:0a:e0:dc:76:1b:90:36:f3:d2:87:0e:c2:e3:b7:
0a:13:f0:d7:47:05:f9:5b:75:7d:0e:3d:ed:09:5b:58:c8:f9:
9a:78:6f:85:51:62:f4:31:f0:24:ed:92:ca:57:ae:67:f5:07:
e1:cb:9a:70:e1:5e:1f:08:7f:93:56:2a:77:6b:e9:53:fc:05:
27:92:27:61:fc:eb:2d:c6:c7:26:ae:6f:0a:f0:41:ae:58:e9:
bd:de:98:56:55:3b:87:4e:a1:fc:5d:24:25:d0:f7:0f:8d:3e:
ba:de:dc:fb:57:b6:cf:cc:5f:1e:84:0a:72:12:68:6e:ff:8f:
99:ee:e4:75:0a:33:d9:97:5b:65:5d:89:dc:ae:34:72:cf:30:
67:f3:58:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:21 2025 by rpki-client