
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
File: MXuBR1A-oZ9YHKANKNvuXljLj0g.mft (raw, json)
Hash identifier: RgBto4PGdc/BIaEU6A7Z8T1q/Do4i34nb9B4ahdZC5I=
Subject key identifier: EB:E3:E6:CD:6B:12:EC:82:C4:1F:9E:C1:91:DC:06:3E:2F:D1:A9:5E
Authority key identifier: 31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
Certificate issuer: /CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Certificate serial: 0197B820F96F84A4148406B90C381EA55F25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 20:00:58 +0000
Manifest this update: Sat 28 Jun 2025 20:00:58 +0000
Manifest next update: Sun 29 Jun 2025 20:00:58 +0000
Files and hashes: 1: MXuBR1A-oZ9YHKANKNvuXljLj0g.crl (hash: UuFUzREitSsu/0iaWVh6Z68BaGGZ4WPrPa5SZNwbst0=)
2: Xvq5E9FjSgetaXURRKNVucLHpJA.roa (hash: Q0VYCtfy8botfioT4TVhD+jb4Ht709fLdZsnE/9HQwY=)
3: ZthEX-bem71wxx1bLgVPG5w9ZTc.roa (hash: T1Z1de8P32daOdZ6/2GmlJdKCTcAVlmu6uwlpR9ZYC8=)
4: cpm1MJFdWjEQeCJ1LBHfzw5iKXY.roa (hash: gbGURzXBFbe9SdreBkh+gl3ChVchhLD0ie8p4XE7DdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:f9:6f:84:a4:14:84:06:b9:0c:38:1e:a5:5f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Validity
Not Before: Jun 28 20:00:58 2025 GMT
Not After : Jun 29 20:00:58 2025 GMT
Subject: CN=ebe3e6cd6b12ec82c41f9ec191dc063e2fd1a95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:76:92:35:04:78:ef:b0:6e:bd:37:ae:b1:27:
cd:51:87:f7:d1:dd:16:3b:24:94:8a:90:9f:fb:09:
ac:2d:24:ef:f5:4b:2d:77:eb:10:af:70:5c:bb:b0:
56:36:a1:af:26:fc:b1:15:a9:5c:f8:78:68:bc:2a:
9d:4b:2d:b4:46:24:6c:a6:04:46:0d:1c:47:1a:8d:
0d:e8:87:7e:80:6d:e7:16:28:bd:ae:09:a7:54:43:
be:20:f8:c7:86:25:0e:38:37:4e:64:48:d0:43:8f:
7f:d6:68:0b:7d:a7:68:fb:23:f6:65:8d:d2:61:b4:
95:f5:d7:52:4a:64:54:09:f0:0c:e5:21:db:52:4c:
b1:b9:95:4f:d1:6d:71:8a:b8:72:76:28:70:a9:f0:
dd:9e:4d:c8:63:12:ff:b5:ff:11:dd:a9:1c:49:14:
15:03:0a:0a:47:3f:8d:c9:a9:82:0c:23:ca:e6:a8:
cc:d4:5b:2e:c6:2a:fc:d7:3f:e4:8c:32:9b:3d:19:
46:4e:62:6a:b5:b1:6c:cf:cf:b3:65:73:d2:be:3f:
1d:3e:03:3b:84:8b:28:6b:91:e6:b3:82:2a:49:84:
7c:54:12:20:86:74:58:81:47:2d:a2:d5:ee:7f:cd:
19:7e:89:69:6d:6d:74:f7:17:fb:3d:19:39:23:9d:
4a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E3:E6:CD:6B:12:EC:82:C4:1F:9E:C1:91:DC:06:3E:2F:D1:A9:5E
X509v3 Authority Key Identifier:
keyid:31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:33:74:e2:03:72:ef:f8:c8:48:2e:10:c7:1f:45:45:e8:4c:
d9:ea:3f:df:53:2e:52:8b:86:99:dc:d6:e4:86:8a:a4:1c:75:
98:d7:47:ab:10:9f:95:31:4f:c4:a4:90:b8:9d:ee:99:73:e1:
d1:87:ad:2d:dc:04:8e:62:ac:45:19:20:ce:02:93:5d:51:b2:
73:7d:7c:06:19:a6:ac:38:fc:57:9e:de:cc:8a:6e:52:71:a2:
3c:fc:41:dc:06:7f:17:24:9d:11:8c:82:74:a2:a2:d7:28:79:
7e:4e:6b:4e:6b:3a:ce:8d:6d:fe:b7:2c:68:4d:eb:ea:c0:53:
62:f0:8d:0c:6e:e3:1e:ae:e6:16:b0:76:f1:5b:5b:04:6c:45:
09:70:80:e2:b0:8f:61:2c:47:f6:10:39:5a:f6:78:e2:c8:bb:
93:e9:d2:8f:65:11:2c:49:d4:56:f9:e1:ca:9a:00:d4:e9:60:
c9:f7:d2:44:7d:5f:3a:e5:19:92:0e:80:53:ef:8f:d3:43:07:
46:97:18:ee:c3:fd:cc:c4:21:4c:7f:12:ea:ba:46:ed:c8:31:
aa:95:26:a8:da:a2:fd:dc:89:32:83:7b:80:d4:d5:ef:52:4c:
7b:59:61:16:96:07:1d:bd:e2:b2:48:3f:5d:15:20:17:20:8b:
58:4e:7e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:38 2025 by rpki-client