Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft
File: MbXwrK42UqU8caB0ojR6tvF_0_g.mft (raw, json)
Hash identifier: 5EyFsLCs6th51m3eRU6zJ3W4CnGHtMKpISMUlZ4DXjg=
Subject key identifier: 6C:A9:CA:06:6A:12:63:FC:FB:DC:F2:5B:08:0F:31:C6:11:0B:C3:87
Authority key identifier: 31:B5:F0:AC:AE:36:52:A5:3C:71:A0:74:A2:34:7A:B6:F1:7F:D3:F8
Certificate issuer: /CN=31b5f0acae3652a53c71a074a2347ab6f17fd3f8
Certificate serial: 0197B77CAAC5B98A545E57502C49EBAD6594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbXwrK42UqU8caB0ojR6tvF_0_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft
Manifest number: 1541
Signing time: Sat 28 Jun 2025 17:01:30 +0000
Manifest this update: Sat 28 Jun 2025 17:01:30 +0000
Manifest next update: Sun 29 Jun 2025 17:01:30 +0000
Files and hashes: 1: KlCag1k38E35giK2RwCL86wfRww.roa (hash: 3A8pcHf0/9mVDJ/I9xf+96E0LjYi6EEs2LRUfPZpiNc=)
2: MbXwrK42UqU8caB0ojR6tvF_0_g.crl (hash: fJDqO4KtAgRXIF7IRg3F/UpXv3ozT7/HNaIHwWzxe6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbXwrK42UqU8caB0ojR6tvF_0_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:aa:c5:b9:8a:54:5e:57:50:2c:49:eb:ad:65:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b5f0acae3652a53c71a074a2347ab6f17fd3f8
Validity
Not Before: Jun 28 17:01:30 2025 GMT
Not After : Jun 29 17:01:30 2025 GMT
Subject: CN=6ca9ca066a1263fcfbdcf25b080f31c6110bc387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ee:23:08:9b:f4:de:f8:f7:0e:93:43:26:b8:
af:37:d6:ed:a3:a1:0b:74:f4:68:96:67:de:57:d1:
71:81:c8:5a:14:06:69:f1:e8:43:0b:ef:4b:eb:ad:
a3:68:04:b5:6c:cf:ff:40:a9:7a:ba:b1:72:6c:86:
15:86:8a:ea:0a:ac:4a:4a:0a:b3:04:aa:fa:5f:1a:
82:55:a8:fe:c5:47:cd:35:c9:86:84:47:d1:e2:de:
a7:6d:14:b1:78:68:71:87:a2:88:31:8b:ea:e2:cd:
e2:fa:b8:56:2e:0f:14:64:cb:29:ad:86:7a:6b:72:
46:d3:e7:77:42:48:c8:bd:47:e3:71:f5:16:c0:19:
0e:65:63:ed:ad:44:42:a1:7f:0d:a7:d3:1d:54:35:
2e:b8:45:e0:02:14:e6:01:9c:a6:df:33:f0:70:59:
25:2f:a5:5e:7e:cc:6f:2e:7a:ed:f9:db:e4:d5:e0:
55:28:70:b0:4e:78:43:a6:c9:47:80:b8:86:8c:9f:
a0:11:68:3d:6e:91:2c:02:a3:41:74:3f:95:97:a4:
0b:89:fa:94:6c:8b:d0:94:44:03:07:46:4c:c8:e2:
2f:2c:de:0c:78:bc:68:23:ee:ab:cf:bb:b0:6d:a4:
fe:83:26:f0:0c:57:66:f6:8c:28:30:e1:c0:b8:b6:
53:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A9:CA:06:6A:12:63:FC:FB:DC:F2:5B:08:0F:31:C6:11:0B:C3:87
X509v3 Authority Key Identifier:
keyid:31:B5:F0:AC:AE:36:52:A5:3C:71:A0:74:A2:34:7A:B6:F1:7F:D3:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbXwrK42UqU8caB0ojR6tvF_0_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:22:1c:87:11:f9:b2:5a:25:ff:14:47:e9:98:32:e6:bb:03:
1b:28:d0:c1:6a:dd:7a:9c:03:5e:aa:5b:01:5d:92:62:28:1b:
5e:94:dd:82:ee:f1:95:8f:ec:3e:41:45:68:f1:c0:26:2f:ba:
5c:d3:f9:09:51:78:a8:69:5d:a9:75:31:7a:8d:1d:96:6a:70:
d5:bc:58:da:a9:8d:3e:7b:66:f3:34:7e:7c:25:a0:4d:10:78:
51:40:20:81:5b:97:4f:00:5c:f9:8a:af:e6:2f:3a:42:08:cf:
e4:4d:9e:86:72:bd:6f:d4:f5:4a:d4:fd:d2:ed:87:b5:45:5b:
3b:db:6c:a8:42:a1:e4:5b:2f:67:53:53:37:55:8a:dd:70:c5:
51:d6:55:af:4e:6d:e6:6a:61:17:e9:a9:c9:e3:fd:3b:fc:a9:
60:0a:62:98:cf:43:fa:2a:0e:ab:43:d1:1d:5d:40:5d:64:84:
05:fb:6e:8f:a2:51:20:ce:02:5a:57:a9:98:84:49:9f:e2:ff:
04:1f:82:27:94:6e:51:27:91:8d:34:34:04:0a:a5:1b:7b:21:
bd:81:ea:92:fb:37:c2:43:f7:c5:bf:16:2a:d0:63:55:94:32:
a4:f2:a1:2b:95:bd:8a:e6:1e:84:d5:e6:fe:65:08:68:64:77:
db:d3:b3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:21 2025 by rpki-client