Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
File: MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft (raw, json)
Hash identifier: Xc54CrtmVukkbJTlYHZmoxXcCOb5RVnL52+xr4/BMZA=
Subject key identifier: C9:7D:CC:57:0A:AE:7C:BC:61:75:56:61:A5:96:86:B1:87:E1:90:2C
Authority key identifier: 30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
Certificate issuer: /CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Certificate serial: 0197B5C47EA735DCA28FB0A66D954B8E38A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 09:00:42 +0000
Manifest this update: Sat 28 Jun 2025 09:00:42 +0000
Manifest next update: Sun 29 Jun 2025 09:00:42 +0000
Files and hashes: 1: HlO9ZQi1YEqVxRv4xtahO5YLBGA.roa (hash: aJ2b3cCx1ndyavIj0cgELjQKu/oO/oTwQkl8MyIO1oI=)
2: MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl (hash: CCHFu0VjbFAT1d+xavBms3PCBATTyWUsvXG7faXYJuw=)
3: SnB27P4aE00JP6FbecTTod9K1rk.roa (hash: 5E+ZR3tJKvaUJ0xYE7TDulpUYo4F5Unw9Ys//QosG5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:7e:a7:35:dc:a2:8f:b0:a6:6d:95:4b:8e:38:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Validity
Not Before: Jun 28 09:00:42 2025 GMT
Not After : Jun 29 09:00:42 2025 GMT
Subject: CN=c97dcc570aae7cbc61755661a59686b187e1902c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:63:c9:06:cb:c6:80:dd:57:f3:5a:b7:be:5c:
08:0f:c1:ed:59:f3:1b:f2:13:10:c6:65:11:f4:6b:
49:a4:08:04:22:6e:9c:35:74:3e:cb:53:90:d0:07:
61:68:23:f7:6f:2c:97:aa:08:e2:28:6b:8e:72:5b:
5b:e6:f5:78:a4:8c:37:04:db:0b:46:2b:77:23:6d:
9d:2a:7e:a5:de:7a:7b:3f:f3:96:56:06:ad:01:94:
f5:84:59:fa:8a:ca:2b:ea:7f:6c:99:37:28:fc:e2:
15:83:ad:5c:85:a0:e7:d9:5d:39:d6:9e:ad:42:d7:
04:16:ca:bf:b1:17:bc:15:a6:34:9b:b5:c8:5c:5d:
7c:fc:d2:cd:2a:63:f9:b3:63:ab:96:fc:af:3d:38:
ff:af:41:7d:66:62:c3:72:85:19:56:9c:c7:4b:de:
5c:09:06:db:a8:7e:3c:e7:89:85:64:20:11:3d:ac:
41:55:1b:a3:9e:3f:24:7c:d7:af:5d:78:b0:1f:24:
01:7b:46:a4:de:61:69:62:96:ed:f9:d0:ba:dc:6e:
a9:96:be:88:18:08:05:e7:69:9c:0f:3c:35:09:7f:
49:dc:59:4c:30:b1:f5:23:7c:e8:b4:7c:4e:ca:a1:
1b:65:19:6b:5e:cd:76:b8:88:9f:6e:aa:36:56:b8:
00:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7D:CC:57:0A:AE:7C:BC:61:75:56:61:A5:96:86:B1:87:E1:90:2C
X509v3 Authority Key Identifier:
keyid:30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:16:62:fe:fe:96:69:f9:6d:c6:d0:a5:6c:d0:5b:1f:05:27:
bb:74:50:f8:13:1d:32:05:f9:35:9d:12:0d:1e:f5:ac:48:5f:
0e:fe:cc:f4:59:73:eb:c6:7c:bd:18:01:96:1e:f4:23:eb:88:
6c:6c:72:b0:10:3a:a9:fd:ad:b9:2b:56:55:79:83:47:68:b6:
15:23:aa:ce:a9:09:4d:5b:75:2f:59:37:a7:c8:2f:4a:90:d3:
40:95:96:dc:8b:49:3d:68:14:f3:28:2f:35:4d:0e:eb:69:ca:
f3:38:c7:44:34:43:7b:3c:39:a2:4d:90:bd:5a:30:c1:ff:f5:
f5:17:85:ff:e5:ca:bd:42:09:74:f7:76:05:c6:d3:09:04:a9:
f8:d5:68:37:a9:05:16:b7:48:1d:2f:a9:ab:ff:a6:7a:95:a5:
a4:f3:8e:57:fe:bf:ce:d0:41:c7:11:d3:38:0b:af:82:b9:c6:
4e:d8:b4:03:79:60:18:c5:e6:1c:fd:a2:69:0e:fd:59:fc:a6:
d0:85:59:62:dd:da:04:e9:e8:3e:63:4e:e0:59:d9:8a:3e:22:
22:73:86:b2:2d:fd:87:d1:2b:4c:dc:c9:25:9b:23:5e:98:4f:
62:6c:01:55:de:b4:6d:73:9d:64:c5:92:d0:70:b3:f3:72:e0:
ee:2a:de:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:38 2025 by rpki-client