Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
File: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft (raw, json)
Hash identifier: r2hiOs7BOwuiEmXd93UMv50gd4DnBv4syUePNEHTxv8=
Subject key identifier: 1F:DB:65:18:16:AC:0B:7A:F1:34:F9:35:39:29:C0:15:26:85:BF:65
Authority key identifier: 30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
Certificate issuer: /CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Certificate serial: 01974DB2AFABA7B75FD1716BB98880865AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
Manifest number: 1282
Signing time: Sun 08 Jun 2025 04:00:45 +0000
Manifest this update: Sun 08 Jun 2025 04:00:45 +0000
Manifest next update: Mon 09 Jun 2025 04:00:45 +0000
Files and hashes: 1: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl (hash: aDCG56LryrxfT+KjJ7mdWoKzLnR0KZMEe+7Gj0UXrDw=)
2: Xd6umzoHHdEiQVdMV3BPecnkdkk.roa (hash: lBwKPo2uZQdPejEMFQzj+SxghwJ68Haky7eMmtLDiQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:af:ab:a7:b7:5f:d1:71:6b:b9:88:80:86:5a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Validity
Not Before: Jun 8 04:00:45 2025 GMT
Not After : Jun 9 04:00:45 2025 GMT
Subject: CN=1fdb651816ac0b7af134f9353929c0152685bf65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ed:43:ba:db:8e:29:d1:8b:e5:04:c9:e5:1e:
35:c7:6d:dc:2b:29:33:9d:9c:7a:7d:d3:ca:4a:2e:
ed:08:68:84:f3:0e:5a:f2:74:9b:02:cd:90:93:7f:
f5:cb:e4:02:63:ef:3b:c1:1b:46:6a:71:09:3b:0f:
66:2c:0e:2c:06:e7:41:25:2a:87:25:f1:85:c7:7d:
f5:e4:e2:46:78:22:59:74:c1:83:f0:80:03:31:a0:
80:da:56:b2:7a:40:70:ff:4f:15:24:60:86:bc:37:
6b:8b:fd:6a:f6:79:af:b2:96:02:ae:df:70:8c:86:
ae:dd:3e:8a:07:fc:35:3c:63:34:2e:3f:fa:b0:ef:
9d:cd:6f:31:30:ca:43:e0:35:b2:2a:e3:b0:77:ff:
c2:31:1b:4c:e5:15:48:f5:ad:8b:60:8f:9e:26:f6:
35:3f:bb:78:ce:46:60:2d:1a:74:27:71:dd:e4:40:
f0:a8:64:5b:55:c6:63:f6:3d:07:e8:97:3b:6f:10:
ee:24:f0:76:83:cc:50:3f:26:e3:60:97:50:d2:86:
42:8b:e8:43:76:fe:cf:30:cc:34:3d:de:e6:e4:c9:
ba:8e:ee:73:66:20:b8:c1:0e:8a:e9:36:3b:74:b2:
80:4f:44:f3:3e:2a:39:82:48:05:d3:22:48:7e:fc:
ae:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DB:65:18:16:AC:0B:7A:F1:34:F9:35:39:29:C0:15:26:85:BF:65
X509v3 Authority Key Identifier:
keyid:30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b5:6f:29:77:aa:5e:c2:7a:87:23:fb:d7:88:49:95:3e:c7:
43:ba:33:d7:81:b7:ea:ca:bf:37:4c:bc:1b:96:44:38:c1:51:
0c:b2:7b:f2:93:08:46:ba:d5:b1:a0:c2:2b:f7:a3:1f:4d:78:
df:e0:af:d1:bc:87:c3:3d:c1:79:ee:ce:c9:6f:c3:51:c3:0a:
78:ae:d5:93:4a:45:a1:d4:d3:e9:ef:cc:5f:1e:b2:14:8e:63:
9f:21:78:4a:c3:bd:32:f7:63:b6:fc:2b:3c:7e:ba:2c:ea:5c:
65:df:d8:84:83:b0:3a:ba:a3:5b:51:d4:02:66:ec:b9:ad:21:
f0:a2:16:af:41:da:b9:79:02:78:93:ec:28:b1:08:5d:79:a3:
ef:36:fe:c7:91:bd:a5:1f:4a:31:94:49:bf:65:17:5b:e4:2b:
fc:05:01:0c:4b:f7:aa:3e:f7:3b:a2:c7:7a:27:7a:cc:d1:ad:
d2:e3:d9:5c:65:eb:5b:06:05:0d:f8:d7:3e:d6:46:08:16:0e:
84:12:e5:ef:69:b3:38:2c:d5:62:3e:10:48:85:7a:9c:2b:c2:
c1:e0:90:ed:df:79:8e:02:e2:31:3a:af:a3:56:31:e9:e7:98:
03:88:39:1f:7f:0b:81:15:e8:ff:96:e6:4d:45:77:0f:0f:22:
44:b2:c8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:42:42 2025 by rpki-client