Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft
File: MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft (raw, json)
Hash identifier: kwU1goXny96NfZfnSoilt2EwRXd0I40l8vCwDj/+/dY=
Subject key identifier: 62:AA:CD:3A:E8:01:24:53:CF:2C:40:E3:14:A7:4D:2F:4D:65:79:1B
Authority key identifier: 31:BB:73:0B:1B:3F:53:E7:3A:25:74:22:E5:BB:EC:E4:3B:67:7F:E3
Certificate issuer: /CN=31bb730b1b3f53e73a257422e5bbece43b677fe3
Certificate serial: 0199172D47C5BD1DAE1E25F74B9B1A405ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft
Manifest number: 86
Signing time: Fri 05 Sep 2025 00:01:07 +0000
Manifest this update: Fri 05 Sep 2025 00:01:07 +0000
Manifest next update: Sat 06 Sep 2025 00:01:07 +0000
Files and hashes: 1: MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl (hash: 5eKM+9mzWUge7zJ3Fr0bfYShUCTbg8vDe5qUUtB0JMI=)
2: R-6gZG6Qkp3ae09ud4PH3JpfB80.roa (hash: BAAGIDlz41luoFtKlUFhcgsonLyEAYtSldgK/GTu16Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:2d:47:c5:bd:1d:ae:1e:25:f7:4b:9b:1a:40:5a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31bb730b1b3f53e73a257422e5bbece43b677fe3
Validity
Not Before: Sep 5 00:01:07 2025 GMT
Not After : Sep 6 00:01:07 2025 GMT
Subject: CN=62aacd3ae8012453cf2c40e314a74d2f4d65791b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fa:aa:25:41:26:6a:3f:bf:fe:1b:d9:27:c9:
a5:cb:e9:22:bc:b4:ab:b3:81:e5:d2:7f:d8:f1:fb:
a4:f9:dd:95:98:52:a4:6a:f9:81:d8:f8:e3:e9:31:
f2:1c:01:6c:bf:f4:2f:47:5f:af:14:45:76:b6:f5:
01:d3:06:f6:19:52:d4:4a:2f:6a:04:b3:fe:a3:ee:
c8:62:19:6a:e6:5b:34:0e:70:09:a7:b0:9c:a3:fd:
a5:e0:1d:78:e6:cb:65:74:11:4b:80:d0:bb:f2:b6:
07:ac:78:68:1e:ca:0d:a3:44:de:5d:da:3f:28:03:
70:46:b8:a4:e2:7e:91:b2:36:39:78:a0:3f:42:32:
41:c6:4c:65:85:2f:94:ae:8a:6e:02:d0:cd:b6:f6:
5b:15:55:a0:d8:68:b6:f3:59:bf:38:db:64:c2:c7:
a3:81:39:ad:b7:56:0a:d0:c0:a1:c4:6d:e7:a0:b5:
67:84:b9:31:5e:bc:fb:0d:69:93:ff:c3:3e:85:1a:
24:ad:7a:57:14:c4:d3:2e:ef:5c:f3:03:16:ca:18:
f7:54:46:44:c9:0a:cd:a1:bb:83:94:49:d2:69:5d:
64:07:87:92:06:6b:85:b5:31:54:70:ed:33:32:f3:
1f:22:ff:f7:a9:e2:49:a1:07:18:e3:49:ba:f7:6b:
ce:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AA:CD:3A:E8:01:24:53:CF:2C:40:E3:14:A7:4D:2F:4D:65:79:1B
X509v3 Authority Key Identifier:
keyid:31:BB:73:0B:1B:3F:53:E7:3A:25:74:22:E5:BB:EC:E4:3B:67:7F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4d:9c:33:82:41:68:54:e0:c9:73:f6:68:50:c2:b4:b0:c6:
43:f1:7a:0d:e2:96:84:31:34:4f:c1:85:1c:cd:90:66:8f:21:
d5:1a:a5:b7:64:60:f4:43:4b:c6:18:cb:db:dd:9b:fc:74:cf:
f0:0b:02:b9:fe:b8:f7:41:43:0b:16:6c:d1:aa:f7:61:db:c6:
1b:3e:58:fd:f7:1f:33:a8:75:cb:78:44:f4:49:f2:bf:49:14:
b2:8f:fb:61:34:10:65:64:cc:0e:1f:36:a1:43:a7:89:4f:3f:
c2:05:37:7d:b6:b0:91:f4:63:09:0d:81:88:67:29:18:82:ee:
53:1f:56:1e:6d:3b:40:26:e1:fd:9f:dd:82:2f:33:02:71:9b:
a2:1a:be:cd:3a:b1:56:a7:43:97:4c:0b:a7:de:70:c3:87:50:
dc:d6:58:2f:ee:6e:ba:47:92:87:ac:ed:33:f0:ff:b0:6b:52:
32:c1:c1:21:b2:4f:76:13:78:89:36:ab:4b:bd:ae:f4:e3:d1:
78:47:11:69:9e:05:5c:a1:95:cf:78:c9:8d:2f:b8:26:d7:a4:
a3:f8:43:02:43:cd:4b:4e:15:fd:a8:e9:50:31:45:23:c8:31:
73:5d:18:43:20:b5:94:db:a4:51:c9:42:30:cc:1b:0b:ea:e1:
d1:a7:41:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkXLUfFvR2uHiX3S5saQFrcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxYmI3MzBiMWIzZjUzZTczYTI1NzQyMmU1YmJlY2U0M2I2
NzdmZTMwHhcNMjUwOTA1MDAwMTA3WhcNMjUwOTA2MDAwMTA3WjAzMTEwLwYDVQQD
Eyg2MmFhY2QzYWU4MDEyNDUzY2YyYzQwZTMxNGE3NGQyZjRkNjU3OTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPqqJUEmaj+//hvZJ8mly+kivLSr
s4Hl0n/Y8fuk+d2VmFKkavmB2Pjj6THyHAFsv/QvR1+vFEV2tvUB0wb2GVLUSi9q
BLP+o+7IYhlq5ls0DnAJp7Cco/2l4B145stldBFLgNC78rYHrHhoHsoNo0TeXdo/
KANwRrik4n6RsjY5eKA/QjJBxkxlhS+UropuAtDNtvZbFVWg2Gi281m/ONtkwsej
gTmtt1YK0MChxG3noLVnhLkxXrz7DWmT/8M+hRokrXpXFMTTLu9c8wMWyhj3VEZE
yQrNobuDlEnSaV1kB4eSBmuFtTFUcO0zMvMfIv/3qeJJoQcY40m692vOiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKqzTroASRTzyxA4xSnTS9NZXkbMB8GA1UdIwQY
MBaAFDG7cwsbP1PnOiV0IuW77OQ7Z3/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWJ0ekN4c19VLWM2SlhRaTVidnM1RHRuZi1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zZDkzYTUtNWZiZC00MDJlLWFkODct
ZTk4NjkwNGM4ZDBjLzEvTWJ0ekN4c19VLWM2SlhRaTVidnM1RHRuZi1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zZDkzYTUtNWZiZC00MDJlLWFkODctZTk4NjkwNGM4ZDBj
LzEvTWJ0ekN4c19VLWM2SlhRaTVidnM1RHRuZi1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM02cM4JB
aFTgyXP2aFDCtLDGQ/F6DeKWhDE0T8GFHM2QZo8h1Rqlt2Rg9ENLxhjL292b/HTP
8AsCuf6490FDCxZs0ar3YdvGGz5Y/fcfM6h1y3hE9Enyv0kUso/7YTQQZWTMDh82
oUOniU8/wgU3fbawkfRjCQ2BiGcpGILuUx9WHm07QCbh/Z/dgi8zAnGbohq+zTqx
VqdDl0wLp95ww4dQ3NZYL+5uukeSh6ztM/D/sGtSMsHBIbJPdhN4iTarS72u9OPR
eEcRaZ4FXKGVz3jJjS+4Jteko/hDAkPNS04V/ajpUDFFI8gxc10YQyC1lNukUclC
MMwbC+rh0adB9w==
-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:23 2025 by rpki-client