Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
File: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft (raw, json)
Hash identifier: kBLrIyNkbwbQ6ljHzXJMQnkryT27lINOzJ+D/tfMFUw=
Subject key identifier: A2:8D:99:13:6D:D9:35:53:B5:84:04:53:B0:23:22:C6:F5:97:C9:42
Authority key identifier: 30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
Certificate issuer: /CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Certificate serial: 019922FA5BFDE78F5A8C26C16B6E71DFCEBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
Manifest number: 1375
Signing time: Sun 07 Sep 2025 07:00:56 +0000
Manifest this update: Sun 07 Sep 2025 07:00:56 +0000
Manifest next update: Mon 08 Sep 2025 07:00:56 +0000
Files and hashes: 1: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl (hash: pjrw6SXpIDueVQJ6lq9HmX1SSMN8k5INz52S/ILhZZY=)
2: Xd6umzoHHdEiQVdMV3BPecnkdkk.roa (hash: lBwKPo2uZQdPejEMFQzj+SxghwJ68Haky7eMmtLDiQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:5b:fd:e7:8f:5a:8c:26:c1:6b:6e:71:df:ce:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Validity
Not Before: Sep 7 07:00:56 2025 GMT
Not After : Sep 8 07:00:56 2025 GMT
Subject: CN=a28d99136dd93553b5840453b02322c6f597c942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a1:b7:1d:b0:5d:ab:7e:cd:ac:d9:95:c0:b4:
a8:af:da:1f:81:7a:be:1e:ec:fe:55:d4:2c:17:6f:
34:82:b4:fe:74:8a:52:6d:d8:b8:43:12:5d:03:87:
6c:75:06:f8:8f:74:61:c5:f5:ba:7f:ea:44:cf:d1:
c8:39:b2:01:08:ac:d7:e6:24:89:3b:02:46:a1:ae:
4f:0b:6c:b6:9b:db:3e:2e:25:2a:ae:49:4b:b9:cf:
33:52:a0:f9:32:83:a8:67:b8:f5:d7:4b:03:ef:da:
dd:41:ed:ad:88:28:c3:6a:31:84:f6:b8:96:de:37:
52:9e:44:8c:e2:4b:ab:8d:86:83:53:a8:25:ba:c0:
fe:47:58:dc:81:69:6b:8e:c1:bc:63:46:70:78:e2:
62:be:43:7c:44:d5:7b:57:87:ca:a9:ae:f1:d2:b2:
47:0c:ac:94:55:36:d7:36:62:2d:83:d4:ef:83:92:
81:cf:88:97:41:04:cf:6a:b7:2d:f4:03:03:65:57:
f4:7a:44:cc:4e:35:35:52:70:64:4b:c3:12:6d:0d:
23:48:25:77:a1:22:b3:12:aa:03:c6:6c:ad:0c:07:
25:34:30:7d:da:ca:74:f4:aa:1e:ae:e5:a1:6d:e6:
58:c4:2d:a2:8b:8e:55:9f:c7:fc:55:69:94:fc:9a:
44:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8D:99:13:6D:D9:35:53:B5:84:04:53:B0:23:22:C6:F5:97:C9:42
X509v3 Authority Key Identifier:
keyid:30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:5b:37:17:d8:e0:f7:3c:9a:9f:ed:11:33:b7:e2:b7:10:17:
8b:fe:1d:83:f0:1b:25:fb:57:db:90:7c:73:1d:28:1e:b1:65:
ac:6a:c3:2e:02:7f:42:62:b9:c0:7a:8d:2a:c7:59:a1:f8:58:
8d:08:28:a1:15:3c:ba:45:66:a8:e6:3b:b6:16:43:98:a7:bd:
79:a0:22:b6:c3:c9:d3:6d:56:62:00:f6:f9:63:a6:6a:34:39:
ac:8c:95:60:39:27:dd:1f:aa:29:07:b1:8e:df:bf:88:37:ea:
8b:ea:9f:5e:b3:04:90:a7:d0:44:50:de:28:5f:d9:44:d3:49:
db:76:72:35:c8:12:8c:a2:78:90:f8:a5:eb:a9:92:a7:cc:00:
ae:cc:27:da:b3:22:69:2c:43:03:0f:dc:16:8f:46:3b:2c:c7:
50:6e:6a:a7:b6:73:37:85:bb:1f:20:fb:fb:b9:4f:bc:95:ab:
98:66:90:62:be:13:a6:fc:e6:af:a5:a6:bf:e5:0f:ef:14:90:
bb:2b:c5:06:78:97:32:77:9a:d5:65:ea:d6:38:b3:9d:38:f9:
2b:ed:a7:ea:b2:d4:c6:db:5d:5e:7c:c4:22:c8:28:8d:2a:ee:
cf:0e:73:fe:de:e8:3a:73:b9:4c:64:92:57:25:f9:88:cb:74:
1f:87:49:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:13 2025 by rpki-client