Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
File: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft (raw, json)
Hash identifier: pkLX+LkOBUzHUsVT4GsYJYEZNZrAtM3DblUglTr0YlE=
Subject key identifier: 63:6F:AA:6A:F6:FA:48:3A:1C:53:E8:BC:B5:09:C8:B9:2A:EB:E0:49
Authority key identifier: 30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
Certificate issuer: /CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Certificate serial: 0198D5BBB8AE2631319000B46A6790A3AEE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
Manifest number: 134D
Signing time: Sat 23 Aug 2025 07:01:45 +0000
Manifest this update: Sat 23 Aug 2025 07:01:45 +0000
Manifest next update: Sun 24 Aug 2025 07:01:45 +0000
Files and hashes: 1: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl (hash: m11xxs5cOfmtr1XHfXqQK5T5cKCN5U3D3q/j700Qa0E=)
2: Xd6umzoHHdEiQVdMV3BPecnkdkk.roa (hash: lBwKPo2uZQdPejEMFQzj+SxghwJ68Haky7eMmtLDiQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:b8:ae:26:31:31:90:00:b4:6a:67:90:a3:ae:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Validity
Not Before: Aug 23 07:01:45 2025 GMT
Not After : Aug 24 07:01:45 2025 GMT
Subject: CN=636faa6af6fa483a1c53e8bcb509c8b92aebe049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5f:23:44:d5:cb:ae:69:49:a9:8a:9f:94:77:
63:bd:8b:c2:3e:80:2c:20:92:c2:56:c2:86:b5:38:
88:9a:3e:d1:e0:c4:e6:47:b5:9c:87:3e:4e:54:62:
b9:04:82:d6:e0:8c:e1:fd:6e:d7:7c:20:d3:f9:73:
a3:b2:24:46:b8:bb:93:81:80:4a:79:be:cf:0d:bd:
5b:ad:94:c7:b1:7b:dd:d1:71:b1:5f:6b:03:07:f2:
0a:cd:eb:4e:07:53:20:58:e8:6a:53:69:3f:80:0b:
e5:ea:de:85:af:b3:c9:ca:79:0c:a5:40:e1:0c:e2:
1d:5a:3c:46:59:fa:84:10:1b:08:aa:eb:3f:fe:a0:
79:b1:a8:d2:60:1a:20:4c:06:20:db:e2:b0:7a:a7:
ee:56:66:de:3f:10:eb:eb:33:57:0b:44:3d:63:46:
9e:eb:e2:93:27:22:44:41:65:3f:bb:5c:3c:75:c3:
ec:1d:af:56:8b:42:44:06:04:46:74:1d:c1:d1:0c:
5f:1c:3c:03:c7:fc:ec:31:f3:89:86:87:36:09:cb:
79:ed:fb:45:08:81:fa:c5:7f:14:6b:0f:31:28:ed:
ba:10:81:f3:71:69:58:89:d3:f1:ec:4c:38:1f:9c:
53:c1:6f:e3:aa:6f:70:7e:38:ca:97:58:b9:30:51:
1d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6F:AA:6A:F6:FA:48:3A:1C:53:E8:BC:B5:09:C8:B9:2A:EB:E0:49
X509v3 Authority Key Identifier:
keyid:30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:96:af:f4:b3:c8:1e:79:81:2a:6e:cb:df:a8:5f:1d:87:a0:
e0:04:af:c9:ab:5a:f3:36:9d:80:2f:6f:b4:86:f6:d2:35:69:
47:44:26:0b:77:2c:c6:c5:d0:7a:10:2c:32:e2:0f:23:76:c5:
60:41:f9:32:cc:bc:df:a2:f9:2e:24:9d:67:98:49:11:ad:fe:
bb:53:92:20:8a:cd:45:f4:9b:a8:e2:6c:40:d6:48:7e:59:8b:
79:29:42:49:fc:88:a6:a9:47:2e:ab:3c:a5:c6:cc:aa:d0:01:
35:1b:0b:2a:d2:ae:a0:6d:2c:53:bb:5a:ae:03:b0:fa:a0:74:
7f:cf:de:ef:a3:55:11:1e:3d:5a:55:b0:71:4c:d9:4a:9a:fa:
bf:8b:c2:b8:8e:f2:c4:77:3b:53:16:56:90:8f:2f:52:77:e1:
ee:7d:b6:73:d3:73:c2:cb:8b:d7:2b:8e:19:74:31:51:55:44:
e6:20:7a:38:74:d0:79:fe:e0:bd:96:25:6f:97:7e:ef:4d:65:
88:f5:7f:c7:ab:fe:3f:51:9e:a6:04:06:65:c9:a8:f1:15:54:
0b:ea:0f:58:2d:c5:ce:17:e3:21:74:a5:fa:3c:17:a2:b5:4c:
67:58:1d:e2:20:4f:11:16:47:55:4c:ac:29:d1:72:09:6b:e6:
3e:bc:f3:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu7iuJjExkAC0ameQo67oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMTRiOGM3ZjUwOWUxMDA1MWIwY2QyOWZkOGQ2OWYyODU1
MDhkODcwHhcNMjUwODIzMDcwMTQ1WhcNMjUwODI0MDcwMTQ1WjAzMTEwLwYDVQQD
Eyg2MzZmYWE2YWY2ZmE0ODNhMWM1M2U4YmNiNTA5YzhiOTJhZWJlMDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV8jRNXLrmlJqYqflHdjvYvCPoAs
IJLCVsKGtTiImj7R4MTmR7Wchz5OVGK5BILW4Izh/W7XfCDT+XOjsiRGuLuTgYBK
eb7PDb1brZTHsXvd0XGxX2sDB/IKzetOB1MgWOhqU2k/gAvl6t6Fr7PJynkMpUDh
DOIdWjxGWfqEEBsIqus//qB5sajSYBogTAYg2+KweqfuVmbePxDr6zNXC0Q9Y0ae
6+KTJyJEQWU/u1w8dcPsHa9Wi0JEBgRGdB3B0QxfHDwDx/zsMfOJhoc2Cct57ftF
CIH6xX8Uaw8xKO26EIHzcWlYidPx7Ew4H5xTwW/jqm9wfjjKl1i5MFEdzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNvqmr2+kg6HFPovLUJyLkq6+BJMB8GA1UdIwQY
MBaAFDAUuMf1CeEAUbDNKf2NafKFUI2HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUJTNHhfVUo0UUJSc00wcF9ZMXA4b1ZRalljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84Yzc5MzUtMmVkYS00M2FjLThkMGYt
Nzk5NTI1YmU3MjE1LzEvTUJTNHhfVUo0UUJSc00wcF9ZMXA4b1ZRalljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84Yzc5MzUtMmVkYS00M2FjLThkMGYtNzk5NTI1YmU3MjE1
LzEvTUJTNHhfVUo0UUJSc00wcF9ZMXA4b1ZRalljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv5av9LPI
HnmBKm7L36hfHYeg4ASvyata8zadgC9vtIb20jVpR0QmC3csxsXQehAsMuIPI3bF
YEH5Msy836L5LiSdZ5hJEa3+u1OSIIrNRfSbqOJsQNZIflmLeSlCSfyIpqlHLqs8
pcbMqtABNRsLKtKuoG0sU7targOw+qB0f8/e76NVER49WlWwcUzZSpr6v4vCuI7y
xHc7UxZWkI8vUnfh7n22c9NzwsuL1yuOGXQxUVVE5iB6OHTQef7gvZYlb5d+701l
iPV/x6v+P1GepgQGZcmo8RVUC+oPWC3FzhfjIXSl+jwXorVMZ1gd4iBPERZHVUys
KdFyCWvmPrzzRA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:10:55 2025 by rpki-client