Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft
File: MbXwrK42UqU8caB0ojR6tvF_0_g.mft (raw, json)
Hash identifier: KkJzL8avA4vAE8Efr4E37KR5o/mzKfKmXGH1Wa0Q7Gk=
Subject key identifier: 91:85:8C:17:B7:3B:F7:45:64:6C:3A:70:53:8B:84:43:11:AE:9A:4E
Authority key identifier: 31:B5:F0:AC:AE:36:52:A5:3C:71:A0:74:A2:34:7A:B6:F1:7F:D3:F8
Certificate issuer: /CN=31b5f0acae3652a53c71a074a2347ab6f17fd3f8
Certificate serial: 0199228C484841553A7C6313B0F7B4698BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbXwrK42UqU8caB0ojR6tvF_0_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft
Manifest number: 15FD
Signing time: Sun 07 Sep 2025 05:00:42 +0000
Manifest this update: Sun 07 Sep 2025 05:00:42 +0000
Manifest next update: Mon 08 Sep 2025 05:00:42 +0000
Files and hashes: 1: KlCag1k38E35giK2RwCL86wfRww.roa (hash: 3A8pcHf0/9mVDJ/I9xf+96E0LjYi6EEs2LRUfPZpiNc=)
2: MbXwrK42UqU8caB0ojR6tvF_0_g.crl (hash: Ayw0scmMeAuaySLMeAU9KkiurMfbnJ0T5PIz3sn8iMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbXwrK42UqU8caB0ojR6tvF_0_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:48:48:41:55:3a:7c:63:13:b0:f7:b4:69:8b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b5f0acae3652a53c71a074a2347ab6f17fd3f8
Validity
Not Before: Sep 7 05:00:42 2025 GMT
Not After : Sep 8 05:00:42 2025 GMT
Subject: CN=91858c17b73bf745646c3a70538b844311ae9a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8b:7c:37:17:eb:db:57:29:0f:cd:72:da:f0:
97:90:de:1f:78:e1:2b:a5:bf:85:f4:40:ec:4c:ec:
f1:bf:73:d7:cd:7a:65:60:54:4b:2c:90:d5:6c:e5:
85:28:39:35:de:8b:0e:b5:69:2d:31:4c:05:e2:db:
5d:06:55:50:6e:7e:74:35:97:ee:21:09:4e:55:14:
64:9d:16:e2:b8:e0:e7:f1:fd:f6:b8:27:3b:c5:4e:
cf:85:ed:0c:db:ed:03:ae:15:50:c2:a9:44:8c:c6:
f7:49:9a:0d:86:61:d0:a5:07:67:cd:68:09:e1:44:
91:f9:c5:e8:18:ac:71:82:2d:a9:26:e0:65:8f:bf:
23:53:44:3a:ee:54:da:51:dd:86:53:df:60:ec:0a:
ec:3a:b7:96:3d:52:82:90:1e:c2:d4:33:18:1d:32:
3d:21:74:09:a8:84:ea:eb:4a:8f:90:c7:43:68:ee:
84:4e:50:e1:2f:b1:ef:ee:6e:0c:50:ba:1e:41:ec:
fd:08:9a:ce:6e:a7:bc:ca:97:72:31:be:17:2c:ab:
fc:91:b3:b2:7e:f5:67:2f:8d:7a:97:68:ae:ed:f4:
f1:0b:ac:57:e3:b4:55:21:7b:26:8e:96:4c:79:0c:
84:01:20:db:0d:3d:df:95:6a:4b:66:87:7e:0e:f7:
85:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:85:8C:17:B7:3B:F7:45:64:6C:3A:70:53:8B:84:43:11:AE:9A:4E
X509v3 Authority Key Identifier:
keyid:31:B5:F0:AC:AE:36:52:A5:3C:71:A0:74:A2:34:7A:B6:F1:7F:D3:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbXwrK42UqU8caB0ojR6tvF_0_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ecbe01-18ab-4fbd-9dc3-bcd52da15644/1/MbXwrK42UqU8caB0ojR6tvF_0_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:3f:72:73:4e:63:3d:3a:a8:85:fa:9c:7f:db:48:48:99:44:
aa:39:1e:85:10:20:9b:26:cf:8c:c2:c1:25:63:22:10:5c:ab:
12:c5:4d:0e:0a:8f:f6:76:51:6a:d1:c0:fc:4a:f5:98:62:b4:
25:e7:f5:37:64:f3:37:a1:a1:35:70:97:a2:40:b8:db:af:e5:
52:4a:99:14:5d:df:bc:88:ff:c9:11:51:95:4c:21:9d:42:31:
7e:fb:52:7c:82:58:d2:45:d4:56:58:9e:10:fe:9f:cc:a5:59:
cd:32:6a:75:52:1a:0b:5c:c6:59:ea:67:d0:aa:3d:14:ee:6a:
b3:7a:16:45:6c:35:45:7f:ee:55:0f:0d:ee:11:e5:b2:53:17:
7e:67:dc:46:32:22:71:57:55:e1:e0:b6:82:52:3e:22:ea:b4:
b2:05:d0:53:cf:cc:40:c2:7a:37:eb:7d:6a:de:f1:69:7a:47:
7b:5d:41:d2:64:e1:57:08:ad:1b:bc:22:e0:c2:ff:d0:59:56:
80:bc:b9:3e:f4:53:39:7c:80:97:12:d2:30:24:e9:d9:ae:bb:
26:ec:1c:57:a0:ff:3a:db:de:fb:1b:3d:c7:23:12:94:e6:d1:
4f:d3:9d:15:82:e5:19:1a:dc:8e:40:e9:b2:97:ef:5d:0a:2a:
69:87:44:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijEhIQVU6fGMTsPe0aYvJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxYjVmMGFjYWUzNjUyYTUzYzcxYTA3NGEyMzQ3YWI2ZjE3
ZmQzZjgwHhcNMjUwOTA3MDUwMDQyWhcNMjUwOTA4MDUwMDQyWjAzMTEwLwYDVQQD
Eyg5MTg1OGMxN2I3M2JmNzQ1NjQ2YzNhNzA1MzhiODQ0MzExYWU5YTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4t8Nxfr21cpD81y2vCXkN4feOEr
pb+F9EDsTOzxv3PXzXplYFRLLJDVbOWFKDk13osOtWktMUwF4ttdBlVQbn50NZfu
IQlOVRRknRbiuODn8f32uCc7xU7Phe0M2+0DrhVQwqlEjMb3SZoNhmHQpQdnzWgJ
4USR+cXoGKxxgi2pJuBlj78jU0Q67lTaUd2GU99g7ArsOreWPVKCkB7C1DMYHTI9
IXQJqITq60qPkMdDaO6ETlDhL7Hv7m4MULoeQez9CJrObqe8ypdyMb4XLKv8kbOy
fvVnL416l2iu7fTxC6xX47RVIXsmjpZMeQyEASDbDT3flWpLZod+DveFpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGFjBe3O/dFZGw6cFOLhEMRrppOMB8GA1UdIwQY
MBaAFDG18KyuNlKlPHGgdKI0erbxf9P4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWJYd3JLNDJVcVU4Y2FCMG9qUjZ0dkZfMF9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9lY2JlMDEtMThhYi00ZmJkLTlkYzMt
YmNkNTJkYTE1NjQ0LzEvTWJYd3JLNDJVcVU4Y2FCMG9qUjZ0dkZfMF9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9lY2JlMDEtMThhYi00ZmJkLTlkYzMtYmNkNTJkYTE1NjQ0
LzEvTWJYd3JLNDJVcVU4Y2FCMG9qUjZ0dkZfMF9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFz9yc05j
PTqohfqcf9tISJlEqjkehRAgmybPjMLBJWMiEFyrEsVNDgqP9nZRatHA/Er1mGK0
Jef1N2TzN6GhNXCXokC426/lUkqZFF3fvIj/yRFRlUwhnUIxfvtSfIJY0kXUVlie
EP6fzKVZzTJqdVIaC1zGWepn0Ko9FO5qs3oWRWw1RX/uVQ8N7hHlslMXfmfcRjIi
cVdV4eC2glI+Iuq0sgXQU8/MQMJ6N+t9at7xaXpHe11B0mThVwitG7wi4ML/0FlW
gLy5PvRTOXyAlxLSMCTp2a67JuwcV6D/Otve+xs9xyMSlObRT9OdFYLlGRrcjkDp
spfvXQoqaYdEjg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:08 2025 by rpki-client