Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
File: Mu0BRXesc_-H7yDKb3V5XkyTf84.mft (raw, json)
Hash identifier: e9Ewc5cr1tq0BBptVZDSf8dpFVfcRKAK/OTPouEVVXE=
Subject key identifier: 8B:2F:76:DC:F2:7D:63:85:39:0D:1B:5E:C2:87:28:56:8B:7A:07:52
Authority key identifier: 32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
Certificate issuer: /CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
Certificate serial: 019676E85002ABD3EC15F2AEB84838F76683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
Manifest number: 0700
Signing time: Sun 27 Apr 2025 11:00:58 +0000
Manifest this update: Sun 27 Apr 2025 11:00:58 +0000
Manifest next update: Mon 28 Apr 2025 11:00:58 +0000
Files and hashes: 1: Mu0BRXesc_-H7yDKb3V5XkyTf84.crl (hash: 8RXt4egaJ1hSJ8f5IZ/NI0sG4pbiYp72wZevy1bAvkg=)
2: Szpv7SbbTq_ZPkpVt0ZS-yigLYQ.roa (hash: tot/yU4vNOc3RqisHsJwZZdti1Jdkg5nZCtY1DuBRp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:50:02:ab:d3:ec:15:f2:ae:b8:48:38:f7:66:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ed014577ac73ff87ef20ca6f75795e4c937fce
Validity
Not Before: Apr 27 11:00:58 2025 GMT
Not After : Apr 28 11:00:58 2025 GMT
Subject: CN=8b2f76dcf27d6385390d1b5ec28728568b7a0752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ca:fc:1e:1f:87:77:bd:84:b1:2a:cb:7c:77:
c3:e7:56:fd:22:7d:4b:7c:f2:8a:6e:8c:f1:25:ca:
2c:85:70:e2:f5:93:d1:d5:f0:24:d6:27:3a:18:bb:
9b:75:de:30:51:41:73:0b:1d:b2:db:b6:7e:84:6e:
ec:f5:8a:b0:d9:74:42:db:83:7d:9a:21:7b:27:d1:
20:71:2c:b4:71:1f:e5:09:2e:54:60:65:aa:92:bf:
8b:9c:61:47:14:14:8e:56:c8:ac:ef:6d:fb:ee:9d:
bc:fb:db:5a:57:90:be:be:37:a2:43:6b:95:b8:ff:
45:e2:a1:f1:62:54:7b:2b:45:bd:ff:03:90:41:81:
d3:5a:b9:c4:9e:6f:a5:98:7c:49:a1:86:11:4b:b5:
b7:0c:ea:b8:c7:ec:50:c5:ce:b7:76:47:94:94:bc:
fe:22:e7:c5:1f:3f:86:04:22:ad:61:58:11:60:75:
51:d8:ab:26:3f:c0:5d:07:7d:7b:ea:dc:1a:33:a4:
9a:50:a4:9a:1d:a7:2b:f9:f3:e2:49:40:60:22:e8:
b4:60:bf:42:85:d2:74:8b:ac:6e:97:5f:50:15:cc:
85:31:f5:1a:cd:ee:25:0c:df:9d:dd:4c:53:a8:77:
37:ca:e7:7e:42:28:d8:3a:41:ff:c4:55:d3:e0:29:
6a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2F:76:DC:F2:7D:63:85:39:0D:1B:5E:C2:87:28:56:8B:7A:07:52
X509v3 Authority Key Identifier:
keyid:32:ED:01:45:77:AC:73:FF:87:EF:20:CA:6F:75:79:5E:4C:93:7F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu0BRXesc_-H7yDKb3V5XkyTf84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a395c-5185-42ee-948b-8fc2b71d030f/1/Mu0BRXesc_-H7yDKb3V5XkyTf84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:17:7a:46:4b:a7:f5:c5:8e:fb:80:6b:00:ae:45:dd:ee:d3:
61:22:bc:05:52:1a:3d:3a:c4:01:2c:7e:3d:95:0a:62:4c:3f:
6f:d4:22:84:0a:47:5c:c4:78:7f:11:61:8c:8a:6e:53:81:5a:
b5:f6:c9:ea:0d:d2:87:3b:2a:eb:89:4d:ce:10:32:29:66:64:
f2:3e:04:7f:a1:01:97:86:64:1f:54:08:ba:32:e4:37:5f:13:
05:b9:70:fe:71:80:b3:7e:77:dc:94:c7:35:ff:29:48:68:18:
d1:0e:4f:be:cf:42:68:e3:7d:2d:6b:c4:83:70:3d:3a:6f:e8:
ba:29:9a:b9:7e:2f:72:cf:e4:4d:a4:46:98:da:29:58:b3:68:
b0:34:87:a8:a6:1c:f0:a9:be:b8:df:af:b9:a4:fc:b2:74:0e:
c2:e8:6a:e5:b6:73:e6:b8:7e:de:fc:01:03:19:2b:4d:9e:8d:
14:78:98:18:e9:c2:06:b8:aa:10:42:ea:ff:cc:8c:aa:e4:33:
e0:60:51:c5:53:16:1f:09:2d:26:c2:39:2a:2a:02:93:b2:55:
8d:53:2e:b5:3c:10:a4:f4:47:14:16:29:d2:79:43:58:87:a8:
a9:e0:67:8e:ca:2d:4e:95:76:4a:68:07:7a:da:7c:56:b5:1b:
e4:78:ac:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ26FACq9PsFfKuuEg492aDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZWQwMTQ1NzdhYzczZmY4N2VmMjBjYTZmNzU3OTVlNGM5
MzdmY2UwHhcNMjUwNDI3MTEwMDU4WhcNMjUwNDI4MTEwMDU4WjAzMTEwLwYDVQQD
Eyg4YjJmNzZkY2YyN2Q2Mzg1MzkwZDFiNWVjMjg3Mjg1NjhiN2EwNzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsr8Hh+Hd72EsSrLfHfD51b9In1L
fPKKbozxJcoshXDi9ZPR1fAk1ic6GLubdd4wUUFzCx2y27Z+hG7s9Yqw2XRC24N9
miF7J9EgcSy0cR/lCS5UYGWqkr+LnGFHFBSOVsis72377p28+9taV5C+vjeiQ2uV
uP9F4qHxYlR7K0W9/wOQQYHTWrnEnm+lmHxJoYYRS7W3DOq4x+xQxc63dkeUlLz+
IufFHz+GBCKtYVgRYHVR2KsmP8BdB3176twaM6SaUKSaHacr+fPiSUBgIui0YL9C
hdJ0i6xul19QFcyFMfUaze4lDN+d3UxTqHc3yud+QijYOkH/xFXT4ClqlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsvdtzyfWOFOQ0bXsKHKFaLegdSMB8GA1UdIwQY
MBaAFDLtAUV3rHP/h+8gym91eV5Mk3/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXUwQlJYZXNjXy1IN3lES2IzVjVYa3lUZjg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80YTM5NWMtNTE4NS00MmVlLTk0OGIt
OGZjMmI3MWQwMzBmLzEvTXUwQlJYZXNjXy1IN3lES2IzVjVYa3lUZjg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy80YTM5NWMtNTE4NS00MmVlLTk0OGItOGZjMmI3MWQwMzBm
LzEvTXUwQlJYZXNjXy1IN3lES2IzVjVYa3lUZjg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUhd6Rkun
9cWO+4BrAK5F3e7TYSK8BVIaPTrEASx+PZUKYkw/b9QihApHXMR4fxFhjIpuU4Fa
tfbJ6g3Shzsq64lNzhAyKWZk8j4Ef6EBl4ZkH1QIujLkN18TBblw/nGAs3533JTH
Nf8pSGgY0Q5Pvs9CaON9LWvEg3A9Om/ouimauX4vcs/kTaRGmNopWLNosDSHqKYc
8Km+uN+vuaT8snQOwuhq5bZz5rh+3vwBAxkrTZ6NFHiYGOnCBriqEELq/8yMquQz
4GBRxVMWHwktJsI5KioCk7JVjVMutTwQpPRHFBYp0nlDWIeoqeBnjsotTpV2SmgH
etp8VrUb5HisKQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 14:15:36 2025 by rpki-client