Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
File: MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft (raw, json)
Hash identifier: RdTdH6ub4ZbSbVHYE+Zrff/EKDu3GqzfgBFvsafXF5c=
Subject key identifier: B3:B4:3B:FE:62:53:69:E9:6D:E3:E8:C4:66:C1:8F:E2:14:B2:78:B1
Authority key identifier: 30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
Certificate issuer: /CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Certificate serial: 0196A2ADE347031E4774978DE4C375C3745D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 23:00:27 +0000
Manifest this update: Mon 05 May 2025 23:00:27 +0000
Manifest next update: Tue 06 May 2025 23:00:27 +0000
Files and hashes: 1: HlO9ZQi1YEqVxRv4xtahO5YLBGA.roa (hash: aJ2b3cCx1ndyavIj0cgELjQKu/oO/oTwQkl8MyIO1oI=)
2: MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl (hash: A/mjgAdktuZ5+XFRY8zDVxHVinBk8wLQKA5NYs5CAOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:ad:e3:47:03:1e:47:74:97:8d:e4:c3:75:c3:74:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Validity
Not Before: May 5 23:00:27 2025 GMT
Not After : May 6 23:00:27 2025 GMT
Subject: CN=b3b43bfe625369e96de3e8c466c18fe214b278b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:16:47:8d:7e:5c:80:c0:02:8f:f4:10:6c:51:
92:e1:7b:f2:90:b8:87:b6:fd:4e:4e:4d:2f:08:6a:
12:fc:da:3f:9f:b0:cf:5f:aa:0e:57:6f:0e:c2:22:
5a:f7:11:91:80:f5:4a:f2:b8:67:14:a1:93:f0:e0:
b1:cb:2e:32:22:ed:16:ff:4b:c8:33:c0:1f:64:70:
3c:00:91:ba:15:53:eb:b1:b6:ec:e8:01:1a:93:b0:
73:eb:5d:49:c5:ac:9e:db:ec:28:53:f3:26:49:c7:
df:bc:bc:b0:e3:df:84:c9:dc:6e:79:46:20:07:98:
64:16:a1:53:44:ad:b0:b9:67:65:e4:a1:95:42:0a:
c5:d8:59:43:d7:9c:15:88:17:6d:c7:52:83:5f:38:
8a:8d:24:a8:9a:f5:2c:ad:5e:03:c8:c1:86:f9:02:
a7:d6:35:90:62:24:a6:24:2a:bd:1f:c0:3a:d5:2d:
6b:74:df:aa:5a:41:c6:42:dc:7c:5f:0e:ec:09:29:
be:07:95:ef:26:3f:28:5f:1e:b6:c1:bd:78:98:97:
51:39:9d:90:03:41:5d:4c:d2:1c:9c:c5:20:60:b5:
bc:8b:20:5b:6f:90:17:32:47:95:9e:a8:8c:7a:25:
fa:1d:1c:34:59:ff:65:ee:51:3c:8f:a7:b1:61:b8:
46:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B4:3B:FE:62:53:69:E9:6D:E3:E8:C4:66:C1:8F:E2:14:B2:78:B1
X509v3 Authority Key Identifier:
keyid:30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:8f:22:f6:c5:10:2f:12:f8:6b:fc:c7:3b:43:14:57:31:cb:
d3:ab:09:2c:f1:75:a3:5a:d9:c5:2c:10:42:fa:c1:18:79:77:
9d:38:e8:bb:d3:a3:52:b1:b2:4e:91:6d:9a:a1:c7:45:9c:20:
94:9a:a3:65:dd:25:1c:6d:94:48:95:ee:d6:58:32:34:06:94:
27:48:e7:10:43:ab:bb:37:e3:60:55:83:a5:da:0a:4c:61:d1:
c2:65:1e:63:c2:ec:22:df:f6:c9:21:63:84:1b:37:ba:b9:f2:
de:cd:57:15:c1:12:5f:b6:9a:fe:bc:fa:65:c1:12:e0:a8:6f:
ee:aa:4f:ba:59:b6:48:8a:44:fe:01:28:71:4a:bc:83:47:8c:
fb:2e:e3:ad:d5:2b:2b:ae:56:2a:ce:ac:c8:7e:f5:b6:a5:20:
76:73:09:33:c0:d7:2e:7f:d7:a4:92:71:62:93:dd:31:cf:70:
a5:b2:3b:52:7a:17:1e:9a:72:fe:4f:93:21:1e:d2:67:07:fd:
02:48:60:7f:10:c4:06:7a:66:36:6e:3b:49:f7:8b:7d:67:a0:
85:38:f7:b7:7e:ec:58:a3:78:3b:85:bc:4a:71:e5:1e:67:0a:
04:b9:bc:1c:1c:86:fa:2c:5a:01:98:06:ba:e5:87:a3:56:1f:
03:13:12:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:25:30 2025 by rpki-client