Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
File: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft (raw, json)
Hash identifier: 3HOPS5C1F3l1FTYRWoNd87lQrjHsYzA9JOlCOTwKM1w=
Subject key identifier: AC:38:F3:A6:7A:4B:D0:4A:BB:27:ED:FE:B9:03:32:D6:84:98:85:9C
Authority key identifier: 30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
Certificate issuer: /CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Certificate serial: 0196CA6034D8D657F2A9F51CD5F4EEEBCB9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
Manifest number: 123E
Signing time: Tue 13 May 2025 16:00:24 +0000
Manifest this update: Tue 13 May 2025 16:00:24 +0000
Manifest next update: Wed 14 May 2025 16:00:24 +0000
Files and hashes: 1: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl (hash: GF5XG6EgojvpVbrQgc7cn9xCoeqbK9n2vhotwthDqiM=)
2: Xd6umzoHHdEiQVdMV3BPecnkdkk.roa (hash: lBwKPo2uZQdPejEMFQzj+SxghwJ68Haky7eMmtLDiQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:60:34:d8:d6:57:f2:a9:f5:1c:d5:f4:ee:eb:cb:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Validity
Not Before: May 13 16:00:24 2025 GMT
Not After : May 14 16:00:24 2025 GMT
Subject: CN=ac38f3a67a4bd04abb27edfeb90332d68498859c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:90:91:4f:ca:e6:8d:b5:99:a0:22:56:1c:e8:
91:69:1d:b9:98:03:71:1e:a5:46:f8:7c:dc:ac:fa:
98:a0:f5:20:28:cb:6b:a3:ed:06:d1:8d:00:52:dc:
d7:22:f7:0e:5e:ed:f5:03:0f:da:28:e0:3d:90:c1:
9d:a9:82:96:39:91:dc:ae:59:0b:af:02:31:fa:02:
7b:0e:1f:80:43:33:55:76:98:94:c3:82:8d:c8:ae:
4a:48:00:79:41:42:db:f6:03:62:c5:d2:99:77:e7:
22:b5:67:92:ef:d3:5f:74:f3:60:db:89:64:54:d2:
f6:84:6d:35:48:26:23:fb:4a:81:08:7c:9b:44:c5:
fd:04:a2:6a:df:26:be:31:b2:5e:b1:dd:7d:17:51:
3a:51:13:86:3f:fc:d7:61:db:63:48:df:b3:33:aa:
9b:62:73:f3:72:5a:5d:1c:a6:68:38:8a:c2:6f:cc:
e1:84:b8:99:df:07:25:b9:50:ff:73:4d:60:fb:72:
c1:ec:9d:59:b9:a8:52:26:f3:26:94:d8:fb:8b:c2:
5f:6f:be:b9:91:db:ef:23:71:f7:12:89:6b:f4:15:
d9:80:7d:52:e3:47:f3:53:a3:a9:a7:e9:0b:38:e4:
3c:7b:0d:dc:c6:8d:2f:33:88:7e:32:00:36:04:6d:
c7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:38:F3:A6:7A:4B:D0:4A:BB:27:ED:FE:B9:03:32:D6:84:98:85:9C
X509v3 Authority Key Identifier:
keyid:30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:24:04:85:15:5e:4f:0c:75:5c:b0:f4:9e:ae:bf:a8:13:7b:
9c:5f:88:52:89:57:c4:a7:62:5e:68:d3:38:c0:c2:93:f4:b8:
04:31:d3:bd:8e:67:33:fb:b9:15:cc:32:a7:a4:c8:0c:5d:24:
f9:6d:7e:69:97:c6:60:d4:97:18:19:92:d7:75:2d:46:b6:fd:
e7:06:5b:23:77:0b:a0:19:83:64:de:55:1f:51:2c:a3:f7:00:
5b:d9:00:ac:a0:e5:8d:dd:b8:40:e4:97:b6:9c:03:a7:e8:54:
ee:fe:0d:0d:05:92:cf:bf:f5:4d:c7:ad:ca:2a:a3:37:bf:58:
4e:79:17:78:b2:54:ec:70:fc:a9:29:46:30:89:b5:9b:58:5a:
bc:09:27:53:92:bb:ce:26:9d:4d:cc:07:cc:c5:91:6b:ad:cf:
d3:79:7b:e6:98:3c:88:ff:cd:78:63:fb:b7:39:82:85:ce:47:
54:0b:5a:8e:80:7e:81:a8:5d:ad:1b:d9:80:a8:c0:d3:3f:87:
cb:fb:30:a6:09:5b:6e:3b:ae:f2:b4:5b:35:22:9b:58:64:e3:
d1:4a:0e:cc:72:ce:a5:ca:36:81:8a:e0:ad:09:0c:9d:25:75:
5a:a2:ff:9d:7e:54:17:ca:59:2d:f6:f2:7e:5b:a5:24:f0:70:
1b:fe:79:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:51:43 2025 by rpki-client