Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
File: MBc-_VmPqpjUtSWOUfs6txbXrHE.mft (raw, json)
Hash identifier: xfoxx6x/q2aByA2I4XjvtgX/6ch9K+qwW3GKj0hrl84=
Subject key identifier: B7:68:CC:40:BC:7F:94:0C:41:39:03:0F:CA:2F:45:BA:37:AB:A8:DE
Authority key identifier: 30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71
Certificate issuer: /CN=30173efd598faa98d4b5258e51fb3ab716d7ac71
Certificate serial: 0197B74582E1CFF2FDEA4042CBC54E7F8B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
Manifest number: 1460
Signing time: Sat 28 Jun 2025 16:01:15 +0000
Manifest this update: Sat 28 Jun 2025 16:01:15 +0000
Manifest next update: Sun 29 Jun 2025 16:01:15 +0000
Files and hashes: 1: MBc-_VmPqpjUtSWOUfs6txbXrHE.crl (hash: 2iZFDq+CG9poAAxZ10dlRP+oJie8jDlkFSPZECO4EEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:82:e1:cf:f2:fd:ea:40:42:cb:c5:4e:7f:8b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30173efd598faa98d4b5258e51fb3ab716d7ac71
Validity
Not Before: Jun 28 16:01:15 2025 GMT
Not After : Jun 29 16:01:15 2025 GMT
Subject: CN=b768cc40bc7f940c4139030fca2f45ba37aba8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:90:a6:69:2f:a5:20:b0:bd:11:2f:06:c7:31:
ce:0a:88:c0:0f:62:80:1c:6f:9d:8f:9a:1e:d4:08:
0a:6a:8c:b8:75:67:62:79:f3:77:b1:b4:6a:2b:70:
9e:95:90:40:3d:94:11:6f:79:f0:45:d4:44:58:e4:
e3:ee:49:3c:35:28:14:7e:2b:58:b9:ba:50:64:b9:
51:85:ea:82:2d:e2:51:0c:b6:a5:de:5f:21:3e:14:
d3:7c:6f:1c:6b:cf:76:36:51:61:3b:db:22:03:59:
88:b7:e0:d2:5c:3f:55:84:5c:48:37:fd:7d:97:bb:
cb:81:45:83:37:2d:ef:6a:fb:66:c7:de:c2:eb:c7:
b0:5a:c0:b6:d4:93:e8:8a:ac:80:22:dc:dd:05:6f:
61:6c:b9:6f:64:cd:bc:28:27:74:cd:46:6a:c3:57:
4c:76:13:c9:a2:d2:9d:56:50:c0:a4:21:67:64:04:
17:54:36:8e:c2:8c:e6:9a:10:00:9a:06:f3:a4:1b:
c0:77:e4:e1:9f:77:1f:d1:8b:7e:00:66:a3:ac:6b:
c7:27:0e:82:d0:b4:13:49:b6:0d:9f:56:fe:60:f3:
79:67:26:6d:9b:1a:9b:9c:95:69:6e:f9:7d:c5:e5:
de:12:65:10:10:77:f7:55:88:ad:a3:3b:67:66:46:
7b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:68:CC:40:BC:7F:94:0C:41:39:03:0F:CA:2F:45:BA:37:AB:A8:DE
X509v3 Authority Key Identifier:
keyid:30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:14:6e:24:45:e5:91:e8:12:7c:50:4f:a7:6d:f7:da:a2:2c:
d1:3f:12:e2:91:7d:54:ed:41:17:95:a2:63:96:49:82:aa:84:
b4:7f:ce:34:67:6c:c2:d8:98:c2:df:c2:5a:89:93:83:7b:9d:
da:39:e5:63:b2:ab:bb:95:fb:e8:5a:55:d2:f8:e0:f7:36:51:
3e:20:67:dc:80:17:e2:e2:24:c8:af:b9:3b:cd:41:a8:ea:92:
b4:53:f5:b6:c0:cc:c4:5c:e7:01:c9:e1:20:4f:ce:10:db:df:
1d:01:9c:f1:6b:90:17:01:84:f8:db:58:f5:77:18:de:b3:0c:
3b:62:29:27:36:2f:1a:69:20:bf:ec:1b:d0:94:20:29:e7:fa:
93:63:f6:e5:de:1f:e7:04:e8:3b:be:fc:f5:0f:c9:91:7e:1d:
56:2c:7a:72:af:ba:fc:31:c9:27:4b:1a:9e:3f:6d:54:ff:39:
4e:bc:7e:84:40:bc:69:1e:09:07:78:f3:5f:21:c5:d1:a4:47:
dd:94:50:ac:92:4c:5c:16:dc:1b:51:bf:dd:ff:74:d3:39:79:
10:49:b9:25:05:86:dd:a8:c2:ac:08:72:98:bf:5e:19:63:22:
88:bb:ab:56:a5:33:41:4e:1b:f1:f6:52:8d:13:83:9f:c9:af:
4f:24:86:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RYLhz/L96kBCy8VOf4ttMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMTczZWZkNTk4ZmFhOThkNGI1MjU4ZTUxZmIzYWI3MTZk
N2FjNzEwHhcNMjUwNjI4MTYwMTE1WhcNMjUwNjI5MTYwMTE1WjAzMTEwLwYDVQQD
EyhiNzY4Y2M0MGJjN2Y5NDBjNDEzOTAzMGZjYTJmNDViYTM3YWJhOGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZCmaS+lILC9ES8GxzHOCojAD2KA
HG+dj5oe1AgKaoy4dWdiefN3sbRqK3CelZBAPZQRb3nwRdREWOTj7kk8NSgUfitY
ubpQZLlRheqCLeJRDLal3l8hPhTTfG8ca892NlFhO9siA1mIt+DSXD9VhFxIN/19
l7vLgUWDNy3vavtmx97C68ewWsC21JPoiqyAItzdBW9hbLlvZM28KCd0zUZqw1dM
dhPJotKdVlDApCFnZAQXVDaOwozmmhAAmgbzpBvAd+Thn3cf0Yt+AGajrGvHJw6C
0LQTSbYNn1b+YPN5ZyZtmxqbnJVpbvl9xeXeEmUQEHf3VYitoztnZkZ7JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLdozEC8f5QMQTkDD8ovRbo3q6jeMB8GA1UdIwQY
MBaAFDAXPv1Zj6qY1LUljlH7OrcW16xxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUJjLV9WbVBxcGpVdFNXT1VmczZ0eGJYckhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC83YTA2N2MtZWExOS00MDVhLThlNzQt
YjRhM2ZjM2EwMWYxLzEvTUJjLV9WbVBxcGpVdFNXT1VmczZ0eGJYckhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC83YTA2N2MtZWExOS00MDVhLThlNzQtYjRhM2ZjM2EwMWYx
LzEvTUJjLV9WbVBxcGpVdFNXT1VmczZ0eGJYckhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoxRuJEXl
kegSfFBPp2332qIs0T8S4pF9VO1BF5WiY5ZJgqqEtH/ONGdswtiYwt/CWomTg3ud
2jnlY7Kru5X76FpV0vjg9zZRPiBn3IAX4uIkyK+5O81BqOqStFP1tsDMxFznAcnh
IE/OENvfHQGc8WuQFwGE+NtY9XcY3rMMO2IpJzYvGmkgv+wb0JQgKef6k2P25d4f
5wToO7789Q/JkX4dVix6cq+6/DHJJ0sanj9tVP85Trx+hEC8aR4JB3jzXyHF0aRH
3ZRQrJJMXBbcG1G/3f900zl5EEm5JQWG3ajCrAhymL9eGWMiiLurVqUzQU4b8fZS
jRODn8mvTySGww==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:20:22 2025 by rpki-client