Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft
File: MbXwrK42UqU8caB0ojR6tvF_0_g.mft (raw, json)
Hash identifier: pQMqK2tJfhSt9CP13lrv3ifD9SzRv7rpQ6vdXQvGz88=
Subject key identifier: 3F:29:DC:8E:ED:A1:9B:E1:6D:F6:EB:F5:10:D0:1E:F6:0F:2C:AD:07
Authority key identifier: 31:B5:F0:AC:AE:36:52:A5:3C:71:A0:74:A2:34:7A:B6:F1:7F:D3:F8
Certificate issuer: /CN=31b5f0acae3652a53c71a074a2347ab6f17fd3f8
Certificate serial: 0198D73BD4D5CDBE44CDB2C761CA0E16CACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbXwrK42UqU8caB0ojR6tvF_0_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft
Manifest number: 15D6
Signing time: Sat 23 Aug 2025 14:01:19 +0000
Manifest this update: Sat 23 Aug 2025 14:01:19 +0000
Manifest next update: Sun 24 Aug 2025 14:01:19 +0000
Files and hashes: 1: KlCag1k38E35giK2RwCL86wfRww.roa (hash: 3A8pcHf0/9mVDJ/I9xf+96E0LjYi6EEs2LRUfPZpiNc=)
2: MbXwrK42UqU8caB0ojR6tvF_0_g.crl (hash: YxRnmIUJXFRe97SnuUEWaGoAhXxtKtbXS7myiEU67dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbXwrK42UqU8caB0ojR6tvF_0_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:d4:d5:cd:be:44:cd:b2:c7:61:ca:0e:16:ca:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b5f0acae3652a53c71a074a2347ab6f17fd3f8
Validity
Not Before: Aug 23 14:01:19 2025 GMT
Not After : Aug 24 14:01:19 2025 GMT
Subject: CN=3f29dc8eeda19be16df6ebf510d01ef60f2cad07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:42:e1:2a:66:1e:1d:11:5f:14:51:1c:38:2a:
84:a3:f6:e0:b7:3b:b5:19:ae:a1:0c:f3:2a:10:e0:
a3:85:e5:f4:11:40:ce:a7:48:f4:1a:64:a6:9c:e3:
63:fe:9f:a3:89:62:0c:73:ba:aa:a8:f1:12:b4:1e:
55:c6:75:0d:f1:37:e7:03:68:7d:15:a9:25:bd:02:
cb:9a:ab:4b:aa:00:32:48:d7:3b:fa:91:69:96:c6:
cf:b5:48:aa:67:74:30:4c:15:f0:64:f4:fe:b2:10:
2a:44:4e:e9:55:89:d6:e5:99:dc:3f:3a:0f:c3:09:
2d:28:7e:7c:ba:23:6e:80:39:e1:90:50:fa:0f:bd:
e0:74:74:bf:ca:5e:bc:88:51:d0:9c:ac:f0:67:d2:
7a:76:ae:78:93:63:01:c6:0d:01:66:19:7d:4b:a8:
b3:00:31:f2:69:13:ba:5e:d8:d7:bf:0b:3a:34:21:
ef:55:55:2e:2b:71:e7:f6:4f:6f:ea:a2:20:07:e4:
de:9a:74:92:be:a3:f5:c6:23:d3:d4:6f:bc:8d:3d:
f8:ae:be:b8:e2:1a:7b:0a:92:4e:0c:a3:1f:c6:d8:
7a:e3:19:32:69:48:7d:45:de:bd:95:aa:19:92:83:
9f:9c:9b:05:d2:52:9e:92:8c:bc:d0:98:ee:56:59:
f7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:29:DC:8E:ED:A1:9B:E1:6D:F6:EB:F5:10:D0:1E:F6:0F:2C:AD:07
X509v3 Authority Key Identifier:
keyid:31:B5:F0:AC:AE:36:52:A5:3C:71:A0:74:A2:34:7A:B6:F1:7F:D3:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbXwrK42UqU8caB0ojR6tvF_0_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:0e:ab:3c:f6:c9:84:82:a3:91:b0:8d:4a:a6:0a:ed:b9:25:
e2:11:ae:1c:5b:ff:db:4b:6b:5a:b4:2a:1a:d5:60:db:bb:c3:
ed:43:a0:96:fa:f3:b5:1a:74:22:f3:03:26:aa:68:64:6f:95:
70:86:17:17:0b:fb:c3:0a:ef:1a:0e:82:f7:4f:e6:a4:4a:ab:
98:2a:4e:f5:62:0a:2a:76:0e:72:63:d6:69:47:79:45:c9:93:
b1:7a:6a:b3:7c:de:1f:86:c7:37:af:25:33:f8:7f:b3:78:04:
7a:a0:da:fd:7f:e7:c4:61:b3:79:b8:92:b3:64:a3:55:cf:82:
e0:e0:36:79:9a:62:bb:dc:c5:19:f8:70:ce:da:a4:c7:cc:a3:
65:05:b2:76:c1:7c:88:66:85:ad:de:c3:cd:e9:18:b4:29:23:
38:2d:6d:e0:19:6a:30:cc:da:69:27:d4:ea:18:c9:d6:c7:ef:
7f:9f:64:46:a7:0b:b3:07:b4:d2:4f:91:88:60:cf:05:16:d6:
d7:67:c1:ad:d8:aa:61:4e:89:67:a3:d5:93:13:2c:f4:a9:1a:
21:ac:0d:e3:fb:5b:5a:98:9b:74:18:49:88:fd:c7:eb:6e:f9:
03:fa:e2:6c:26:4b:4f:88:3b:6a:0b:23:c9:9e:2d:a5:9c:b6:
91:66:5a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:23:36 2025 by rpki-client