Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
File: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft (raw, json)
Hash identifier: EiG78qYzTjgvQ22j4mPAC2T5C2zl2++h+U3Y6WT2f1c=
Subject key identifier: 97:DD:FB:6D:8C:7E:98:DC:37:C8:EE:77:23:F6:25:1C:16:A3:18:80
Authority key identifier: 30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
Certificate issuer: /CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Certificate serial: 0197B7EA7171877C5FB246B8E4148201F340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
Manifest number: 12B9
Signing time: Sat 28 Jun 2025 19:01:24 +0000
Manifest this update: Sat 28 Jun 2025 19:01:24 +0000
Manifest next update: Sun 29 Jun 2025 19:01:24 +0000
Files and hashes: 1: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl (hash: kUcz6GaLK3YIUOoN24lOQKsgElm09P5JNE79ZKGz46M=)
2: Xd6umzoHHdEiQVdMV3BPecnkdkk.roa (hash: lBwKPo2uZQdPejEMFQzj+SxghwJ68Haky7eMmtLDiQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:71:71:87:7c:5f:b2:46:b8:e4:14:82:01:f3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Validity
Not Before: Jun 28 19:01:24 2025 GMT
Not After : Jun 29 19:01:24 2025 GMT
Subject: CN=97ddfb6d8c7e98dc37c8ee7723f6251c16a31880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:46:50:6e:3b:e7:3b:de:78:72:29:36:67:09:
0e:b4:08:cf:5e:bf:4b:fd:a1:5a:57:15:02:18:ce:
1e:67:9b:49:6c:67:d7:bd:f5:91:96:c8:30:0a:e8:
1b:c9:5c:37:c8:f6:b6:65:1a:9d:27:fa:ec:8e:13:
7a:ca:03:60:88:68:8a:8b:24:5b:08:fa:db:ea:8f:
90:e1:81:2c:a2:44:70:7f:e8:af:a8:7f:ed:7a:39:
93:ce:36:6f:2d:bc:b3:d7:39:0f:12:82:fb:52:ac:
b7:23:26:52:b4:0c:43:18:25:cc:3c:f6:41:0c:10:
ac:d7:2a:dd:ad:51:52:f4:93:ef:76:66:13:9d:20:
77:34:00:b6:a9:75:a1:e4:41:94:d9:04:71:cd:ed:
f2:2e:d7:c6:24:4b:93:1e:8c:fd:a9:a1:f3:45:b1:
00:1d:42:71:a3:3f:b7:4b:a1:9d:4c:ba:52:92:1d:
0a:d6:49:11:9c:af:56:c9:99:12:9d:24:e3:34:37:
dc:6d:c7:bb:11:fb:6b:54:4a:c2:3b:fe:d0:97:d1:
30:1e:67:3c:d4:35:cd:f3:2b:36:a0:14:26:f9:b1:
b1:f5:f7:4a:b1:de:94:78:76:3c:e7:3b:66:6b:65:
da:0a:38:b3:c8:af:0e:44:3f:fb:5e:9e:05:7f:c9:
d3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DD:FB:6D:8C:7E:98:DC:37:C8:EE:77:23:F6:25:1C:16:A3:18:80
X509v3 Authority Key Identifier:
keyid:30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:05:da:99:a9:fc:d1:79:ec:19:88:31:9f:c9:90:34:1e:cd:
66:5c:66:13:10:29:ef:50:37:4f:a8:d2:d7:68:43:ba:ad:0c:
3f:1a:f2:52:6f:a9:43:79:4f:2e:2d:98:1d:c7:c5:ff:66:8f:
cf:6d:26:22:1e:8d:d1:fa:b7:dc:c6:bd:c6:be:9f:27:43:7b:
14:3e:e0:bf:67:9f:18:91:90:5a:d1:db:c6:cb:fe:d3:ec:50:
41:9e:05:01:29:b1:ce:26:d9:cf:ba:47:3a:9e:f1:02:13:0d:
18:96:ec:2e:a9:35:0d:43:29:59:e8:3d:e3:b5:59:b7:34:03:
b5:54:dc:84:16:8f:4b:98:c4:a1:f6:10:3a:18:9f:95:a3:1f:
df:04:35:f6:4d:a9:94:6c:69:e8:59:81:0e:11:a2:92:1e:ca:
a9:1d:2d:08:ae:4e:7d:52:ca:3f:e6:1d:53:e9:79:ce:97:44:
9e:78:48:2a:64:e3:9e:98:d3:db:b0:9a:e9:5e:d6:cf:a9:20:
eb:63:b4:7d:2a:86:02:2d:5e:eb:d2:a0:76:86:e5:3e:10:12:
d3:ba:e2:67:f1:59:64:7e:a6:b6:4d:10:ca:de:5e:9d:4c:0f:
68:62:24:96:37:59:18:54:48:2e:21:ca:4d:32:74:86:25:c0:
25:74:28:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:41 2025 by rpki-client