Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
File: MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft (raw, json)
Hash identifier: 005oO1Tp9T2Pg/tqZuwKdvXUZ7VSWRrmaw0KraQPsvA=
Subject key identifier: 31:0D:A9:22:C6:3B:97:A2:CA:13:B9:4A:F9:BC:49:9C:24:CA:F9:EB
Authority key identifier: 30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
Certificate issuer: /CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Certificate serial: 01983539CE847388A882112107AFE6ADB7AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
Manifest number: 15FB
Signing time: Wed 23 Jul 2025 03:00:37 +0000
Manifest this update: Wed 23 Jul 2025 03:00:37 +0000
Manifest next update: Thu 24 Jul 2025 03:00:37 +0000
Files and hashes: 1: HlO9ZQi1YEqVxRv4xtahO5YLBGA.roa (hash: aJ2b3cCx1ndyavIj0cgELjQKu/oO/oTwQkl8MyIO1oI=)
2: MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl (hash: R6TVVzV1SMMDmUJhu6u4VJjsP6lbTTpe1yz8haH2aF4=)
3: SnB27P4aE00JP6FbecTTod9K1rk.roa (hash: 5E+ZR3tJKvaUJ0xYE7TDulpUYo4F5Unw9Ys//QosG5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:39:ce:84:73:88:a8:82:11:21:07:af:e6:ad:b7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Validity
Not Before: Jul 23 03:00:37 2025 GMT
Not After : Jul 24 03:00:37 2025 GMT
Subject: CN=310da922c63b97a2ca13b94af9bc499c24caf9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f9:da:c3:7a:1d:af:84:eb:0c:09:81:ae:11:
90:1c:03:a2:df:85:b8:19:23:14:1f:db:cc:c9:70:
30:ec:1a:91:bc:ca:a1:29:0a:e7:5f:4c:85:8d:19:
47:da:f7:17:d8:b1:4d:f2:bf:c5:38:86:94:5e:e6:
0d:88:96:eb:9a:70:ab:f3:20:2a:e3:46:ac:cf:3a:
cb:cb:fb:25:e1:3b:b0:e7:a6:15:e1:26:3d:5c:4a:
5c:db:3b:97:dd:05:df:7a:28:cf:36:42:9d:29:78:
b2:52:a4:b2:76:90:77:bc:1d:d7:31:61:37:11:bd:
77:58:d7:9a:1d:22:5e:8a:e6:c9:0a:ec:1f:69:60:
2a:fa:3e:e9:94:88:6d:c6:85:de:9e:89:cb:01:61:
57:ec:ae:9b:bb:79:e5:df:ec:3e:f1:ba:dd:2e:9b:
43:99:be:2f:72:aa:9f:4d:3a:1e:84:d3:39:12:98:
00:bd:e7:be:7e:ab:95:90:ea:be:ab:15:98:ae:0c:
31:96:16:80:07:57:64:c4:be:2a:43:9b:b2:10:60:
cc:c5:a3:01:34:53:4e:ab:77:b2:3c:ef:a9:88:f8:
f9:bb:95:69:0f:25:70:2d:ce:1e:ce:91:24:31:30:
f7:44:1a:8c:0c:5f:2d:01:72:6c:3f:6f:e3:d7:c4:
77:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0D:A9:22:C6:3B:97:A2:CA:13:B9:4A:F9:BC:49:9C:24:CA:F9:EB
X509v3 Authority Key Identifier:
keyid:30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c5:b2:3b:a0:1e:05:5a:1e:7a:72:1f:1f:5d:a9:c8:0c:ac:
ea:e7:26:53:6d:2b:ec:91:55:df:3e:86:76:4d:73:4b:c3:d9:
8d:18:b6:0d:0b:9e:da:d7:2c:3a:48:f6:fc:42:f7:0c:7e:e4:
b4:1a:85:eb:e9:40:66:24:06:7b:5c:7c:87:b5:46:d7:17:7c:
d1:95:14:3d:bc:df:a5:1a:77:f8:71:de:0f:64:5c:54:50:48:
b4:4a:36:f9:5e:14:ff:fc:89:4c:47:d5:8a:51:24:2b:c6:d7:
ad:6b:e2:61:28:96:fe:35:9d:1b:a6:4c:8d:32:82:76:03:23:
b3:15:36:b5:15:3c:97:94:a0:55:06:7b:31:ae:9a:41:f8:63:
da:05:d8:fe:1e:08:c6:be:fa:6d:5f:3a:c0:2e:66:e6:8a:59:
a8:4a:32:e8:4a:1c:27:4d:0e:e4:64:77:0c:06:dc:09:3b:1c:
f0:74:46:e3:26:ed:9c:4d:58:c8:70:4f:9b:f5:ed:68:9d:ab:
da:3e:fa:2d:98:13:68:32:3d:b1:13:b4:bf:a2:36:6c:46:51:
69:f7:c1:67:d2:23:35:15:13:59:af:88:4c:00:b6:26:18:1b:
e8:94:ec:2e:e3:d5:15:32:17:3b:df:8d:8a:84:93:21:a0:98:
d9:8b:a1:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg1Oc6Ec4ioghEhB6/mrbetMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMTZiMTBkMGFjMjE4MDE3Yzc0OTM5NGU0ZjI1MTljZjJj
MDUxNGUwHhcNMjUwNzIzMDMwMDM3WhcNMjUwNzI0MDMwMDM3WjAzMTEwLwYDVQQD
EygzMTBkYTkyMmM2M2I5N2EyY2ExM2I5NGFmOWJjNDk5YzI0Y2FmOWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/naw3odr4TrDAmBrhGQHAOi34W4
GSMUH9vMyXAw7BqRvMqhKQrnX0yFjRlH2vcX2LFN8r/FOIaUXuYNiJbrmnCr8yAq
40aszzrLy/sl4Tuw56YV4SY9XEpc2zuX3QXfeijPNkKdKXiyUqSydpB3vB3XMWE3
Eb13WNeaHSJeiubJCuwfaWAq+j7plIhtxoXenonLAWFX7K6bu3nl3+w+8brdLptD
mb4vcqqfTToehNM5EpgAvee+fquVkOq+qxWYrgwxlhaAB1dkxL4qQ5uyEGDMxaMB
NFNOq3eyPO+piPj5u5VpDyVwLc4ezpEkMTD3RBqMDF8tAXJsP2/j18R39QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDENqSLGO5eiyhO5Svm8SZwkyvnrMB8GA1UdIwQY
MBaAFDAWsQ0KwhgBfHSTlOTyUZzywFFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUJheERRckNHQUY4ZEpPVTVQSlJuUExBVVU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zZWI2NGEtZTZkZS00NWY1LWI2OGMt
NjkzNjc2MmQyZmNlLzEvTUJheERRckNHQUY4ZEpPVTVQSlJuUExBVVU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8zZWI2NGEtZTZkZS00NWY1LWI2OGMtNjkzNjc2MmQyZmNl
LzEvTUJheERRckNHQUY4ZEpPVTVQSlJuUExBVVU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqsWyO6Ae
BVoeenIfH12pyAys6ucmU20r7JFV3z6Gdk1zS8PZjRi2DQue2tcsOkj2/EL3DH7k
tBqF6+lAZiQGe1x8h7VG1xd80ZUUPbzfpRp3+HHeD2RcVFBItEo2+V4U//yJTEfV
ilEkK8bXrWviYSiW/jWdG6ZMjTKCdgMjsxU2tRU8l5SgVQZ7Ma6aQfhj2gXY/h4I
xr76bV86wC5m5opZqEoy6EocJ00O5GR3DAbcCTsc8HRG4ybtnE1YyHBPm/XtaJ2r
2j76LZgTaDI9sRO0v6I2bEZRaffBZ9IjNRUTWa+ITAC2Jhgb6JTsLuPVFTIXO9+N
ioSTIaCY2YuhrA==
-----END CERTIFICATE-----
Generated at Wed Jul 23 12:27:00 2025 by rpki-client