Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
File: MBc-_VmPqpjUtSWOUfs6txbXrHE.mft (raw, json)
Hash identifier: grpZr85u5ywuLzZi/rRYIvQkxep/zBnljzcZOq2yS8w=
Subject key identifier: 50:E0:95:42:AE:63:8A:8D:24:BB:54:2C:A1:4B:7D:74:01:87:26:C9
Authority key identifier: 30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71
Certificate issuer: /CN=30173efd598faa98d4b5258e51fb3ab716d7ac71
Certificate serial: 0198D7058E387BC4B26EB50A88EFF1A9ACF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
Manifest number: 14F5
Signing time: Sat 23 Aug 2025 13:02:02 +0000
Manifest this update: Sat 23 Aug 2025 13:02:02 +0000
Manifest next update: Sun 24 Aug 2025 13:02:02 +0000
Files and hashes: 1: MBc-_VmPqpjUtSWOUfs6txbXrHE.crl (hash: a8clGMAjHHgBlRk+QNxjUel2fjN/35LYaBd1983QOHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:8e:38:7b:c4:b2:6e:b5:0a:88:ef:f1:a9:ac:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30173efd598faa98d4b5258e51fb3ab716d7ac71
Validity
Not Before: Aug 23 13:02:02 2025 GMT
Not After : Aug 24 13:02:02 2025 GMT
Subject: CN=50e09542ae638a8d24bb542ca14b7d74018726c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5e:23:a3:7f:36:54:36:d9:42:39:78:ba:8c:
22:c9:9a:34:56:e7:52:d7:a2:e3:f2:62:d3:c9:96:
59:32:ea:27:a7:bc:84:d9:0d:90:77:01:00:13:ae:
e6:d7:d4:f3:34:92:6e:0f:bf:51:44:9c:b4:f5:eb:
87:18:fe:08:f3:62:2e:55:cc:cd:6c:48:e7:85:6a:
29:c8:ab:f1:ec:b5:70:8b:d2:cb:a3:74:a1:2d:af:
d7:6f:af:78:d4:92:64:c2:57:80:02:55:c9:e0:15:
22:8b:c5:26:23:0a:50:30:c8:74:4f:47:84:12:b6:
50:47:58:ff:3f:34:71:d8:59:e9:ae:dc:79:87:1d:
e1:df:c3:a3:24:66:d4:d1:f8:ae:bc:d7:c5:dd:73:
35:bc:6f:b7:e8:7c:03:31:2b:d9:4b:59:8a:8a:39:
89:09:dd:70:df:d1:2a:1d:71:5d:28:b0:4b:70:e8:
ba:d5:d5:1a:a2:62:c8:67:41:9d:a4:c4:28:23:dd:
33:20:b9:e0:6a:5d:22:49:f3:98:40:b5:32:af:37:
48:cb:3f:ae:40:f5:b7:a6:64:99:63:37:41:00:16:
9c:03:d2:f4:82:29:89:89:af:27:ba:02:6c:70:f6:
6f:da:97:d3:16:8b:d8:96:bd:e8:9c:4d:83:9c:cd:
0f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E0:95:42:AE:63:8A:8D:24:BB:54:2C:A1:4B:7D:74:01:87:26:C9
X509v3 Authority Key Identifier:
keyid:30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:3f:c5:24:1c:03:7a:3d:6a:63:59:a4:ce:14:4e:e4:14:21:
87:f7:d9:93:24:0b:96:2c:5f:e2:d3:42:eb:35:7a:dd:d0:5b:
1d:27:bc:00:62:e7:b4:95:d9:57:3a:0b:2a:8b:dc:e7:f9:d7:
ec:ad:b0:6b:f0:6a:cb:8b:86:d9:8a:6a:b7:2c:0c:dc:03:06:
6b:b7:8a:1e:05:cf:42:78:1f:2b:15:38:62:fa:27:36:84:e0:
c8:af:6f:1f:9a:b7:eb:76:96:33:1d:fe:7a:a0:80:9c:67:fe:
0a:5a:18:f3:32:bd:df:c3:32:29:1a:72:ec:78:5f:72:56:f2:
11:43:8a:a8:89:a2:46:52:f0:01:00:48:f1:06:66:cf:7a:06:
3b:09:7c:68:ea:77:1b:87:4d:29:27:cb:e7:d4:ea:ca:fd:f9:
59:2f:0a:1c:ed:02:47:b6:03:f9:9b:de:0d:d9:3d:c1:49:45:
08:0f:cf:b8:91:94:c8:a1:ad:3f:5b:07:3d:32:1f:cc:31:41:
65:0d:b0:e0:af:24:1e:67:0f:69:0a:a7:6c:1d:2d:42:fc:b6:
7e:b2:97:15:db:81:cf:d4:7e:9b:6f:fd:88:63:c3:fd:6d:e4:
5a:51:97:e7:3e:06:c1:50:13:b6:3d:92:a9:a0:5d:cf:ee:db:
36:f2:6f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:46:19 2025 by rpki-client