Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
File: MBc-_VmPqpjUtSWOUfs6txbXrHE.mft (raw, json)
Hash identifier: V3+flvl3pHu8ncqgND1OABnoVA4uyrELF4Z7GFOml7Y=
Subject key identifier: 21:F9:8D:C3:F0:27:19:01:4C:FB:29:25:B6:19:72:49:72:DC:63:FD
Authority key identifier: 30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71
Certificate issuer: /CN=30173efd598faa98d4b5258e51fb3ab716d7ac71
Certificate serial: 019A006C63AA31E8FC3498DE5E8614624BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
Manifest number: 158F
Signing time: Mon 20 Oct 2025 07:01:34 +0000
Manifest this update: Mon 20 Oct 2025 07:01:34 +0000
Manifest next update: Tue 21 Oct 2025 07:01:34 +0000
Files and hashes: 1: MBc-_VmPqpjUtSWOUfs6txbXrHE.crl (hash: gPygQK0dSdq6tTRBfY8jncA7RiDAmJcT8vEROZYKOJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:63:aa:31:e8:fc:34:98:de:5e:86:14:62:4b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30173efd598faa98d4b5258e51fb3ab716d7ac71
Validity
Not Before: Oct 20 07:01:34 2025 GMT
Not After : Oct 21 07:01:34 2025 GMT
Subject: CN=21f98dc3f02719014cfb2925b619724972dc63fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f6:84:5b:61:b8:4f:9b:20:64:8f:bb:cf:77:
a0:f1:54:af:1b:3f:0a:19:1a:fc:48:66:0c:7c:e7:
e1:6e:85:6c:5d:e4:f1:58:25:07:9b:ec:22:b3:bb:
bc:14:06:db:92:f8:52:9e:7f:d5:33:f1:8e:38:b6:
0c:73:8e:51:7e:9b:07:ba:b3:52:0e:82:04:b8:3d:
77:ca:49:fa:10:3c:ec:80:0e:31:10:80:7b:cf:92:
e2:52:0a:2a:34:95:f6:f2:01:c3:f6:f8:12:6d:b8:
00:1f:8d:5b:83:b3:85:4e:58:55:84:c4:e7:01:d0:
ed:44:c3:f2:42:16:db:2a:c9:a2:d8:fd:9f:8e:e3:
78:1a:b0:b8:7e:49:ef:7d:16:35:50:dd:b9:a6:43:
2a:f7:81:e9:91:e8:5d:f4:44:9b:62:96:0a:2b:38:
64:49:20:ab:f3:64:13:f8:50:13:d9:d5:80:b5:1a:
fd:31:ae:62:c2:3f:fe:f4:30:2e:9e:62:0d:c0:79:
41:38:3c:68:f7:8e:34:6b:1e:67:8f:cf:e7:d5:e1:
84:3e:46:18:04:df:38:52:67:9e:73:9b:69:ed:51:
a7:74:7d:6f:48:e7:de:7b:a4:b4:b8:1f:82:a4:d0:
5e:85:d8:3e:6a:3f:12:9e:bf:b3:e8:d8:21:b2:dd:
7e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F9:8D:C3:F0:27:19:01:4C:FB:29:25:B6:19:72:49:72:DC:63:FD
X509v3 Authority Key Identifier:
keyid:30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:01:6e:e6:99:60:d6:51:74:be:14:33:d3:3d:58:71:d1:27:
45:4d:e3:c6:3f:1e:36:92:2d:ba:2d:ed:1d:57:d8:fb:19:93:
02:b7:b9:7c:c5:b3:cf:93:7a:ef:f5:ec:b5:6a:39:61:2d:2e:
70:42:5a:43:45:53:13:fd:28:69:01:b1:eb:1d:39:82:4c:b8:
14:44:c7:d9:53:b6:58:14:33:47:9d:0b:1f:cc:6c:0f:0d:fc:
8c:87:ce:43:b0:48:76:bf:e0:1a:6a:69:1a:69:1b:55:76:eb:
56:f0:85:28:6d:07:f3:62:bd:2a:57:69:7c:7d:4c:a8:b8:47:
6c:92:5f:72:3e:f4:53:cc:ac:52:cb:4e:77:69:f5:48:b9:96:
5f:cb:06:73:f6:b9:a6:53:a0:75:09:54:eb:a5:92:0e:14:4e:
97:c9:a4:a1:6a:e2:78:ae:2b:3f:46:14:b2:7d:e8:01:f9:ac:
16:44:1d:ea:0f:f1:c6:57:cb:1c:d1:b8:67:7d:23:5e:bd:52:
17:8f:ed:39:bf:f3:a6:65:2c:61:8c:65:88:40:eb:a6:e2:8e:
6f:be:d0:c7:75:7f:77:d5:ec:2f:84:0f:b0:5a:25:7c:c8:8a:
79:0c:04:a6:2f:df:35:8a:ad:45:c5:28:19:2b:38:b2:4d:2d:
e6:b1:3f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:09:08 2025 by rpki-client