Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft
File: MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft (raw, json)
Hash identifier: QDUQfy8Vsf80DGP5FvSVkblqSROoHfGCxytUU8Noxuw=
Subject key identifier: 59:0A:5D:3D:DE:2E:45:0D:C3:5B:95:48:B8:60:0B:B4:3B:2D:4C:3F
Authority key identifier: 31:BB:73:0B:1B:3F:53:E7:3A:25:74:22:E5:BB:EC:E4:3B:67:7F:E3
Certificate issuer: /CN=31bb730b1b3f53e73a257422e5bbece43b677fe3
Certificate serial: 019A2D43EAC0ED557FD8063A6E5FC50C31CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft
Manifest number: 0116
Signing time: Wed 29 Oct 2025 00:00:16 +0000
Manifest this update: Wed 29 Oct 2025 00:00:16 +0000
Manifest next update: Thu 30 Oct 2025 00:00:16 +0000
Files and hashes: 1: MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl (hash: yFku6yCttC2S6JFmSyYsl4o2tWvfb+1VPaPyRTIkfmE=)
2: R-6gZG6Qkp3ae09ud4PH3JpfB80.roa (hash: BAAGIDlz41luoFtKlUFhcgsonLyEAYtSldgK/GTu16Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 00:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:43:ea:c0:ed:55:7f:d8:06:3a:6e:5f:c5:0c:31:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31bb730b1b3f53e73a257422e5bbece43b677fe3
Validity
Not Before: Oct 29 00:00:16 2025 GMT
Not After : Oct 30 00:00:16 2025 GMT
Subject: CN=590a5d3dde2e450dc35b9548b8600bb43b2d4c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:04:7e:df:9d:79:5f:ed:1e:22:fd:b7:e1:3b:
06:f4:88:72:29:bd:04:0d:d2:9b:3e:33:60:9a:71:
d7:a2:72:73:01:8d:d8:f1:e7:fc:ab:f6:6f:ff:68:
07:b9:9e:80:99:66:b9:34:a9:24:9b:2f:4c:1c:cc:
27:ce:b6:72:5e:91:7a:8e:f5:50:3e:17:b1:66:c1:
fb:b6:f7:db:0a:9b:08:56:08:d7:52:2f:14:20:c6:
f9:10:60:4d:b8:ad:4f:e5:77:70:a2:63:e8:c3:85:
4d:41:a5:fb:f1:dd:ab:3e:ea:2c:58:f9:df:6c:de:
b5:c9:aa:35:9b:84:e5:f5:bd:a2:e6:2c:c0:fb:38:
d9:e3:48:01:58:54:8c:84:62:c0:c0:0e:d8:df:34:
65:24:ce:c6:cb:30:e8:7a:69:e9:69:64:c2:29:58:
e6:5f:6c:fd:d3:5a:46:84:1e:6e:2f:40:d7:57:92:
65:08:90:66:0e:1e:28:b9:4b:a0:0f:6c:ce:2f:0b:
cb:11:5d:cb:13:b0:3d:a7:a0:e0:84:b2:7c:bc:ba:
ff:8c:66:7f:7c:73:c4:ce:48:5c:e9:cc:90:51:3a:
cf:bf:08:c0:b9:d5:30:3d:9b:cd:4e:6e:f0:9b:76:
ae:a8:df:4f:84:73:ed:73:ad:91:c0:ad:8d:9c:55:
14:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0A:5D:3D:DE:2E:45:0D:C3:5B:95:48:B8:60:0B:B4:3B:2D:4C:3F
X509v3 Authority Key Identifier:
keyid:31:BB:73:0B:1B:3F:53:E7:3A:25:74:22:E5:BB:EC:E4:3B:67:7F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:99:ad:18:17:77:1a:ea:59:a3:9d:1e:4c:82:dd:b7:e3:2b:
3f:b7:d6:95:6b:3a:3d:c8:7b:a2:d2:b7:30:43:59:03:15:2e:
79:97:cc:b3:9c:ef:08:d2:8c:80:db:02:29:ad:a2:40:c6:18:
94:df:5b:b4:73:bc:98:57:68:f3:13:17:e5:b4:86:21:46:cd:
cc:01:0c:3a:4e:eb:b9:f4:7d:36:09:58:f5:79:c9:35:56:9c:
c4:60:e8:22:f3:16:1a:e1:a0:27:5f:fd:98:ca:66:f0:a2:1a:
ee:da:d0:13:c7:0f:a0:32:92:a4:91:9b:b0:9f:28:1a:e9:67:
ee:d7:95:bd:17:e7:0a:10:84:ee:76:79:d4:5c:34:ae:98:c2:
6c:49:fa:9d:1f:d6:bf:67:a9:89:c1:c6:35:cf:39:12:39:13:
3e:c6:47:85:35:a6:6d:f5:36:c5:91:55:14:79:21:f5:a9:5f:
52:19:79:d3:3c:b6:48:30:53:5d:67:19:a3:d7:7d:20:80:f8:
44:0e:e0:69:76:fa:78:3f:82:de:50:10:27:98:44:d7:16:93:
f0:12:78:29:25:ae:79:e3:b1:0e:90:be:cb:7c:fd:53:49:0c:
97:1e:bf:43:03:d6:26:d5:1f:90:e9:b5:34:bf:15:bf:0d:af:
ed:5b:ea:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZotQ+rA7VV/2AY6bl/FDDHMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxYmI3MzBiMWIzZjUzZTczYTI1NzQyMmU1YmJlY2U0M2I2
NzdmZTMwHhcNMjUxMDI5MDAwMDE2WhcNMjUxMDMwMDAwMDE2WjAzMTEwLwYDVQQD
Eyg1OTBhNWQzZGRlMmU0NTBkYzM1Yjk1NDhiODYwMGJiNDNiMmQ0YzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gR+3515X+0eIv234TsG9IhyKb0E
DdKbPjNgmnHXonJzAY3Y8ef8q/Zv/2gHuZ6AmWa5NKkkmy9MHMwnzrZyXpF6jvVQ
PhexZsH7tvfbCpsIVgjXUi8UIMb5EGBNuK1P5XdwomPow4VNQaX78d2rPuosWPnf
bN61yao1m4Tl9b2i5izA+zjZ40gBWFSMhGLAwA7Y3zRlJM7GyzDoemnpaWTCKVjm
X2z901pGhB5uL0DXV5JlCJBmDh4ouUugD2zOLwvLEV3LE7A9p6DghLJ8vLr/jGZ/
fHPEzkhc6cyQUTrPvwjAudUwPZvNTm7wm3auqN9PhHPtc62RwK2NnFUUTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkKXT3eLkUNw1uVSLhgC7Q7LUw/MB8GA1UdIwQY
MBaAFDG7cwsbP1PnOiV0IuW77OQ7Z3/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWJ0ekN4c19VLWM2SlhRaTVidnM1RHRuZi1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zZDkzYTUtNWZiZC00MDJlLWFkODct
ZTk4NjkwNGM4ZDBjLzEvTWJ0ekN4c19VLWM2SlhRaTVidnM1RHRuZi1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zZDkzYTUtNWZiZC00MDJlLWFkODctZTk4NjkwNGM4ZDBj
LzEvTWJ0ekN4c19VLWM2SlhRaTVidnM1RHRuZi1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWpmtGBd3
GupZo50eTILdt+MrP7fWlWs6Pch7otK3MENZAxUueZfMs5zvCNKMgNsCKa2iQMYY
lN9btHO8mFdo8xMX5bSGIUbNzAEMOk7rufR9NglY9XnJNVacxGDoIvMWGuGgJ1/9
mMpm8KIa7trQE8cPoDKSpJGbsJ8oGuln7teVvRfnChCE7nZ51Fw0rpjCbEn6nR/W
v2epicHGNc85EjkTPsZHhTWmbfU2xZFVFHkh9alfUhl50zy2SDBTXWcZo9d9IID4
RA7gaXb6eD+C3lAQJ5hE1xaT8BJ4KSWueeOxDpC+y3z9U0kMlx6/QwPWJtUfkOm1
NL8Vvw2v7VvqaQ==
-----END CERTIFICATE-----
Generated at Wed Oct 29 09:34:43 2025 by rpki-client