Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
File: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft (raw, json)
Hash identifier: XsiknloxbpqWyEBXmI8fVLIPprlbZOhgGpUo533vW9k=
Subject key identifier: 08:92:F4:CA:67:2B:BC:00:86:CD:F2:62:75:EB:C2:BC:19:55:E5:CB
Authority key identifier: 30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
Certificate issuer: /CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Certificate serial: 0196586F90BC975DF8D5FACE838486DB5B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
Manifest number: 1203
Signing time: Mon 21 Apr 2025 13:00:28 +0000
Manifest this update: Mon 21 Apr 2025 13:00:28 +0000
Manifest next update: Tue 22 Apr 2025 13:00:28 +0000
Files and hashes: 1: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl (hash: cXwyAlUIJb7Oco1zbO4yGL0Aa9xmhoOkJ6iOKgO+95M=)
2: Xd6umzoHHdEiQVdMV3BPecnkdkk.roa (hash: lBwKPo2uZQdPejEMFQzj+SxghwJ68Haky7eMmtLDiQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:90:bc:97:5d:f8:d5:fa:ce:83:84:86:db:5b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Validity
Not Before: Apr 21 13:00:28 2025 GMT
Not After : Apr 22 13:00:28 2025 GMT
Subject: CN=0892f4ca672bbc0086cdf26275ebc2bc1955e5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:60:c1:0d:94:11:6e:22:ca:63:0a:d3:b9:
05:9e:cd:99:1e:c0:33:46:aa:76:5a:43:29:c1:a3:
f1:38:05:9b:8d:54:61:73:f6:7d:60:d4:04:39:24:
e5:9e:f5:73:49:bd:7c:2f:35:94:af:48:81:55:a1:
ca:50:18:07:f2:4d:dc:93:9f:69:54:24:e4:f6:58:
91:90:1c:e7:fd:9e:4e:2d:7d:94:4d:fe:5b:bc:75:
1a:42:be:26:c2:65:3f:60:9b:fa:79:85:bb:d2:ba:
03:71:c4:13:5b:05:e1:c3:d8:cd:e0:cc:21:42:a1:
ec:0b:ee:01:8a:66:1b:4b:7e:e8:bc:d0:91:95:f5:
ce:1a:06:67:dc:c1:96:27:38:d2:10:08:ec:37:8d:
2c:45:87:7c:52:e7:06:a8:92:5c:9a:84:55:f9:9d:
d2:76:8a:01:9b:ff:d9:f6:10:a2:00:d8:49:a0:ef:
97:54:50:4b:46:54:73:d3:f5:86:80:81:90:78:3d:
e2:77:5b:4b:de:0f:c5:a4:43:7b:1e:20:06:5b:d0:
21:82:b7:7c:e5:29:f5:54:14:ec:46:31:4a:85:81:
52:ef:1a:90:18:f4:e2:07:11:f6:68:e8:bf:16:25:
77:31:d9:49:75:8f:8a:a5:53:c2:fc:41:cd:42:f9:
43:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:92:F4:CA:67:2B:BC:00:86:CD:F2:62:75:EB:C2:BC:19:55:E5:CB
X509v3 Authority Key Identifier:
keyid:30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:81:f0:fc:64:24:1a:bc:ff:d4:f3:a7:7d:ce:09:91:50:5d:
48:3e:31:69:34:f5:19:16:b7:26:a6:28:ca:3a:0c:52:20:02:
2a:cc:41:da:ac:e5:82:8d:bc:6b:c7:68:a3:15:53:06:a0:5c:
55:9b:29:5b:99:5b:6a:bc:07:43:ae:21:f5:e4:33:91:bf:63:
1a:d0:41:c3:ba:65:a9:bf:f9:ba:98:0e:4d:f0:f6:e8:cd:bb:
04:90:eb:de:63:88:b8:fe:e5:3a:44:b1:e8:84:7e:c0:25:55:
d2:48:0f:47:75:5b:c9:b0:7a:4b:25:b3:88:03:03:dc:a5:55:
76:5a:bf:63:9e:d1:8b:05:44:3d:c1:f9:d8:da:39:fc:4c:f0:
12:64:a7:11:84:59:2f:04:f8:37:f7:5d:a5:04:53:3f:a8:18:
90:04:ba:53:df:e4:27:45:27:ca:b0:6a:96:dd:dc:f3:a4:16:
59:e9:50:ce:0f:ba:74:8b:72:71:30:ae:c7:68:6c:b4:04:39:
bd:bc:5c:44:40:4a:8d:b6:3d:7e:02:03:7a:7d:bb:2d:a3:c9:
bf:08:36:be:9e:b5:55:36:62:d8:40:0b:dd:af:fc:1e:1d:02:
be:c8:76:bf:25:0e:ff:04:e1:cb:6c:64:8e:58:cc:fc:eb:ac:
a8:7e:a9:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYb5C8l1341frOg4SG21sqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMTRiOGM3ZjUwOWUxMDA1MWIwY2QyOWZkOGQ2OWYyODU1
MDhkODcwHhcNMjUwNDIxMTMwMDI4WhcNMjUwNDIyMTMwMDI4WjAzMTEwLwYDVQQD
EygwODkyZjRjYTY3MmJiYzAwODZjZGYyNjI3NWViYzJiYzE5NTVlNWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCZgwQ2UEW4iymMK07kFns2ZHsAz
Rqp2WkMpwaPxOAWbjVRhc/Z9YNQEOSTlnvVzSb18LzWUr0iBVaHKUBgH8k3ck59p
VCTk9liRkBzn/Z5OLX2UTf5bvHUaQr4mwmU/YJv6eYW70roDccQTWwXhw9jN4Mwh
QqHsC+4BimYbS37ovNCRlfXOGgZn3MGWJzjSEAjsN40sRYd8UucGqJJcmoRV+Z3S
dooBm//Z9hCiANhJoO+XVFBLRlRz0/WGgIGQeD3id1tL3g/FpEN7HiAGW9Ahgrd8
5Sn1VBTsRjFKhYFS7xqQGPTiBxH2aOi/FiV3MdlJdY+KpVPC/EHNQvlDLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAiS9MpnK7wAhs3yYnXrwrwZVeXLMB8GA1UdIwQY
MBaAFDAUuMf1CeEAUbDNKf2NafKFUI2HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUJTNHhfVUo0UUJSc00wcF9ZMXA4b1ZRalljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84Yzc5MzUtMmVkYS00M2FjLThkMGYt
Nzk5NTI1YmU3MjE1LzEvTUJTNHhfVUo0UUJSc00wcF9ZMXA4b1ZRalljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84Yzc5MzUtMmVkYS00M2FjLThkMGYtNzk5NTI1YmU3MjE1
LzEvTUJTNHhfVUo0UUJSc00wcF9ZMXA4b1ZRalljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp4Hw/GQk
Grz/1POnfc4JkVBdSD4xaTT1GRa3JqYoyjoMUiACKsxB2qzlgo28a8dooxVTBqBc
VZspW5lbarwHQ64h9eQzkb9jGtBBw7plqb/5upgOTfD26M27BJDr3mOIuP7lOkSx
6IR+wCVV0kgPR3VbybB6SyWziAMD3KVVdlq/Y57RiwVEPcH52No5/EzwEmSnEYRZ
LwT4N/ddpQRTP6gYkAS6U9/kJ0UnyrBqlt3c86QWWelQzg+6dItycTCux2hstAQ5
vbxcREBKjbY9fgIDen27LaPJvwg2vp61VTZi2EAL3a/8Hh0Cvsh2vyUO/wThy2xk
jljM/OusqH6pnA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:50 2025 by rpki-client