Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
File: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft (raw, json)
Hash identifier: /CKE4tZALETF+Po62aStNBKkAcCd69gbJWVOq1oL9Hg=
Subject key identifier: 33:B6:A7:07:D1:F1:7D:A3:3E:23:B5:F2:82:E1:86:35:05:E2:98:FA
Authority key identifier: 30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
Certificate issuer: /CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Certificate serial: 019A71133F4A3FC6DA17E68FB62B139B83D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
Manifest number: 1422
Signing time: Tue 11 Nov 2025 04:01:18 +0000
Manifest this update: Tue 11 Nov 2025 04:01:18 +0000
Manifest next update: Wed 12 Nov 2025 04:01:18 +0000
Files and hashes: 1: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl (hash: lsxWZwtkELSEAe4aNHFQSj0/g4jO/8GB4ej2vvqosVw=)
2: Xd6umzoHHdEiQVdMV3BPecnkdkk.roa (hash: lBwKPo2uZQdPejEMFQzj+SxghwJ68Haky7eMmtLDiQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:3f:4a:3f:c6:da:17:e6:8f:b6:2b:13:9b:83:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Validity
Not Before: Nov 11 04:01:18 2025 GMT
Not After : Nov 12 04:01:18 2025 GMT
Subject: CN=33b6a707d1f17da33e23b5f282e1863505e298fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:80:8d:b1:5b:9b:c0:77:e1:7f:d2:4d:66:2d:
e9:fe:83:61:70:78:35:40:09:5e:bf:7e:ee:f2:9d:
57:92:77:ae:ea:e7:84:53:f1:bb:e4:ea:c5:c5:f5:
fa:82:bd:f3:ff:08:07:85:c1:e4:98:1d:13:63:fe:
7f:96:ed:dc:df:65:07:00:e6:c2:6f:3e:89:95:dd:
26:75:24:65:35:64:82:f4:4c:35:9a:dd:1c:42:cf:
99:e6:26:8e:54:e2:99:f7:b8:39:24:d6:32:3f:db:
80:95:df:12:7c:18:c6:a3:b3:4f:41:7e:7a:28:9c:
21:df:28:28:9f:66:48:01:71:9b:5c:be:51:c2:42:
3e:b8:e3:01:6b:bf:25:16:b6:83:14:52:3f:d0:eb:
ea:e1:88:c7:a3:22:bd:cb:9a:1d:ef:e2:50:c3:0a:
12:19:c8:cf:6a:3c:16:61:0a:ca:51:86:49:f6:94:
09:f0:31:6f:67:09:0b:cc:c4:25:6b:3b:cc:fa:5e:
79:74:47:6e:47:bd:0b:58:db:92:d4:05:9e:52:78:
70:f9:fd:01:0f:be:37:c4:ba:14:55:7e:79:8e:25:
3b:eb:85:e8:fa:ff:10:75:19:2a:7e:d2:7d:c5:a7:
70:6d:2c:93:83:e8:5c:68:eb:c6:5e:20:7f:76:ec:
5e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B6:A7:07:D1:F1:7D:A3:3E:23:B5:F2:82:E1:86:35:05:E2:98:FA
X509v3 Authority Key Identifier:
keyid:30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:45:aa:49:06:d0:16:15:b0:73:01:8a:fd:b1:65:7c:74:8e:
09:ed:d0:e5:0a:64:c0:63:8b:5c:9c:94:17:38:63:88:6d:a5:
a0:79:6b:7e:88:15:e2:ce:13:e9:21:00:77:d2:9c:58:29:90:
a2:0e:21:69:ef:d4:26:51:25:17:f0:7a:90:a8:4c:54:18:08:
cd:12:50:44:56:0d:e4:6a:9b:76:a7:47:58:38:01:45:e4:58:
fe:05:df:c1:39:15:1d:3a:9b:e6:51:27:7b:54:19:6e:f7:f1:
f3:d6:69:50:37:b4:73:4e:dc:b5:4f:8e:d8:d8:65:2a:4c:a9:
86:31:fa:8f:3a:91:1d:f1:3e:7f:84:f6:87:7c:6f:33:8f:57:
bd:70:f4:6b:d3:26:c8:37:b3:85:1b:a5:73:3b:99:66:98:96:
5f:66:eb:4f:0b:9f:f1:ae:d3:4c:de:0a:3d:96:3a:15:c0:05:
89:3c:ac:1c:a1:ad:ea:d6:0b:4f:41:9a:22:1e:84:58:09:66:
24:45:ea:37:1c:1a:3d:31:89:00:d5:a0:04:c5:5d:14:84:55:
33:dc:8a:64:6f:08:ea:94:af:6d:f2:15:ed:41:e1:0c:cc:ad:
17:28:40:51:a5:79:09:04:49:7c:9a:ef:59:ca:14:a7:69:b6:
b0:17:c1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:57 2025 by rpki-client