Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
File: 1-muQgEgTpldoh5it3nvb0ObQ5T4.mft (raw, json)
Hash identifier: xY4j18QfEPXFDb3OBupPIvNj6keLmPi6ayRzwnqRSEQ=
Subject key identifier: 49:0D:33:E1:33:11:14:67:6A:8B:74:7B:E0:C9:91:A9:C7:C7:D1:B6
Authority key identifier: FA:6B:90:80:48:13:A6:57:68:87:98:AD:DE:7B:DB:D0:E6:D0:E5:3E
Certificate issuer: /CN=fa6b90804813a657688798adde7bdbd0e6d0e53e
Certificate serial: 01988FFDE22684C8C72E4CBEAA8AE08C37D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
Manifest number: 054A
Signing time: Sat 09 Aug 2025 18:00:37 +0000
Manifest this update: Sat 09 Aug 2025 18:00:37 +0000
Manifest next update: Sun 10 Aug 2025 18:00:37 +0000
Files and hashes: 1: 1-muQgEgTpldoh5it3nvb0ObQ5T4.crl (hash: 5M0eFJlWXDaaCc3UKr4pNs7B6DZcBJHDU/f39rWR500=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:fd:e2:26:84:c8:c7:2e:4c:be:aa:8a:e0:8c:37:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa6b90804813a657688798adde7bdbd0e6d0e53e
Validity
Not Before: Aug 9 18:00:37 2025 GMT
Not After : Aug 10 18:00:37 2025 GMT
Subject: CN=490d33e1331114676a8b747be0c991a9c7c7d1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2f:95:ea:cd:53:31:bd:e2:00:2b:85:53:52:
bf:e5:ac:c1:2f:81:3a:0f:39:30:62:27:29:af:c5:
9b:cd:e8:89:21:d4:d5:55:81:97:f3:b8:8d:70:a7:
39:45:ef:eb:eb:bf:79:88:ae:f6:b5:f6:a4:41:ef:
81:fd:e0:2b:6b:dd:04:37:2b:26:b1:db:0c:c3:9e:
d5:45:b0:91:15:50:42:87:a6:14:cf:fc:9b:d7:e2:
0d:85:54:aa:0d:8e:98:85:00:b0:f9:be:5e:63:66:
ec:fe:7a:15:db:20:0e:a1:27:d2:2f:ac:e4:80:55:
42:33:34:23:28:a5:9b:9d:e4:ad:70:ad:22:fa:fd:
c7:da:94:7f:b7:88:df:dc:b8:52:42:b0:c3:5a:19:
67:46:61:07:ff:b4:81:78:4c:d1:41:07:b3:bc:09:
6f:fc:5e:21:d6:5f:16:8e:03:51:1f:89:71:af:ff:
fc:b8:56:4d:81:f5:f9:e9:96:b5:5e:dc:29:17:68:
bf:24:e0:e9:44:33:0d:96:90:96:7c:57:cd:ed:23:
0b:08:c0:e9:0a:9e:9b:8b:11:09:a7:19:d6:91:b2:
f7:5f:b0:b0:e5:c1:f3:10:e5:e3:6d:fe:aa:da:e3:
96:3b:8c:da:90:46:f3:b1:24:15:0c:68:18:11:0a:
aa:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0D:33:E1:33:11:14:67:6A:8B:74:7B:E0:C9:91:A9:C7:C7:D1:B6
X509v3 Authority Key Identifier:
keyid:FA:6B:90:80:48:13:A6:57:68:87:98:AD:DE:7B:DB:D0:E6:D0:E5:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ce:e9:a4:d6:94:7a:75:85:de:a6:ec:e9:25:f9:47:68:74:
c7:12:a2:ec:bc:33:82:81:dd:02:73:d2:55:65:f2:e0:7e:81:
de:c4:63:a4:1e:96:cc:08:8e:c2:11:9f:6d:f1:aa:a5:b7:0f:
bc:eb:cf:b8:f6:55:1d:3a:04:cd:6e:42:ef:cb:40:25:5e:83:
01:dd:19:2a:5c:cc:36:5d:ef:b1:6f:2c:7b:5f:c2:29:1d:4a:
7a:5c:03:55:bb:ca:f7:2f:03:5e:fd:c8:b7:f4:90:47:55:c8:
43:f7:d9:94:54:d8:2c:50:1f:e5:86:e5:a0:74:8b:30:b2:91:
90:63:72:40:2a:14:6c:6e:17:62:28:da:52:30:27:c3:90:5f:
cb:eb:38:9a:91:99:95:0e:eb:34:ee:11:88:d4:a6:a4:2e:75:
09:69:c7:80:99:d5:3d:a4:08:47:21:d7:d8:0e:a2:71:93:84:
cf:e4:41:8d:a5:ef:17:81:6c:de:64:52:fd:f1:65:62:96:3b:
42:2d:72:6f:ac:11:d9:de:eb:7e:14:aa:89:16:6b:c3:bc:d7:
71:4d:10:10:16:c4:75:93:d5:20:ae:7f:31:14:89:53:04:3c:
b5:29:9e:64:6e:ea:e1:09:a6:9f:dd:97:0c:48:a7:3c:36:cd:
19:e9:21:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:33:00 2025 by rpki-client