Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
File: MBc-_VmPqpjUtSWOUfs6txbXrHE.mft (raw, json)
Hash identifier: 7AQnMDwbUXK09HGeMZQ8BgEij28k5mvGloR+aHn0MCs=
Subject key identifier: 66:B4:68:6A:BB:9A:55:86:DF:E3:78:30:C9:88:6B:8A:76:34:EE:EC
Authority key identifier: 30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71
Certificate issuer: /CN=30173efd598faa98d4b5258e51fb3ab716d7ac71
Certificate serial: 01992255275F8FEEDD1B7A91BC94BE579C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
Manifest number: 151C
Signing time: Sun 07 Sep 2025 04:00:29 +0000
Manifest this update: Sun 07 Sep 2025 04:00:29 +0000
Manifest next update: Mon 08 Sep 2025 04:00:29 +0000
Files and hashes: 1: MBc-_VmPqpjUtSWOUfs6txbXrHE.crl (hash: 2BlkWe9sQqSEUrvORofijl9QUltVveGfJwRqH5i9ftE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:27:5f:8f:ee:dd:1b:7a:91:bc:94:be:57:9c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30173efd598faa98d4b5258e51fb3ab716d7ac71
Validity
Not Before: Sep 7 04:00:29 2025 GMT
Not After : Sep 8 04:00:29 2025 GMT
Subject: CN=66b4686abb9a5586dfe37830c9886b8a7634eeec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0b:fd:ff:04:15:a6:d7:9e:16:b7:86:b3:1b:
c4:05:c0:4b:1f:e0:bd:36:fa:80:14:69:a1:2e:4c:
33:ef:b7:7a:3b:19:db:e6:8e:d9:56:a9:45:4c:53:
bd:ea:e3:e4:b2:3b:2a:68:d2:27:de:7e:87:b4:a5:
d6:6c:2b:48:26:ca:36:c3:ff:bc:a5:3d:5e:42:2e:
cd:fd:08:97:77:21:a4:f9:ba:e8:71:3c:85:ef:17:
4b:2c:a3:fa:be:10:cb:99:32:30:72:3b:7a:06:9c:
af:66:12:52:6f:17:f6:55:df:42:45:3e:98:3d:dc:
a8:c5:6b:15:f9:d6:64:f4:d1:b5:be:5e:aa:dd:6e:
fd:e1:03:7a:88:37:1c:f4:80:b5:da:84:55:f8:23:
7a:e2:09:f2:b8:a0:49:ca:d0:bb:be:1f:04:d8:57:
d0:75:05:62:a9:cb:a6:26:d7:7a:a1:d7:0b:e7:2f:
92:84:cc:51:5d:e3:f8:57:62:da:c1:67:8d:ca:ae:
94:5b:09:ca:35:68:1b:0f:82:7b:ca:4c:5d:48:76:
ef:d6:b8:20:5a:2d:7d:50:df:2a:7c:94:eb:28:84:
17:be:b3:e7:38:c4:d5:7c:2a:87:e8:73:4b:d6:bb:
4f:b4:32:71:be:09:10:e4:49:49:1e:48:3a:78:42:
11:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B4:68:6A:BB:9A:55:86:DF:E3:78:30:C9:88:6B:8A:76:34:EE:EC
X509v3 Authority Key Identifier:
keyid:30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a4:0b:67:7c:ad:ac:36:06:d1:e8:39:ec:bb:96:81:4d:dc:
bd:46:39:df:34:44:05:3b:b6:40:ba:34:45:a9:33:64:b3:0a:
44:cb:20:ed:cb:22:fa:50:00:4b:18:9f:6e:6a:c5:ad:76:a5:
61:2a:0f:25:23:82:3b:06:0d:18:9e:11:b9:a6:15:28:a3:ef:
4e:1e:5d:a7:7f:81:ed:5b:a9:68:be:62:7c:b6:6d:35:0b:a7:
b2:92:aa:11:95:c7:1a:b5:ae:1b:e1:d6:ef:7f:f9:66:a2:2f:
ba:30:62:c2:23:99:fc:da:54:42:34:82:b3:65:bc:85:f3:e4:
3e:50:42:5c:6c:7a:aa:7d:3d:96:b7:46:6c:5e:00:0c:8e:0a:
4d:57:7c:5d:ba:d2:49:6e:bf:a2:a7:7f:2c:13:2a:cc:d3:33:
bb:2f:96:42:6f:d8:be:54:a0:65:2c:01:f5:77:51:a3:77:da:
55:6f:68:0e:63:e5:7b:8e:a5:a8:4d:6c:d4:33:31:9f:da:7a:
da:ad:08:cc:a1:fd:88:1f:03:7e:19:5c:10:d7:fd:ca:32:94:
93:f4:f4:23:6f:aa:f3:6c:25:38:8c:c8:cc:49:9d:bc:eb:89:
ea:62:6f:7c:87:b0:7f:b8:23:cc:99:6c:0b:7a:d3:ca:55:6e:
23:a7:00:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVSdfj+7dG3qRvJS+V5wfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMTczZWZkNTk4ZmFhOThkNGI1MjU4ZTUxZmIzYWI3MTZk
N2FjNzEwHhcNMjUwOTA3MDQwMDI5WhcNMjUwOTA4MDQwMDI5WjAzMTEwLwYDVQQD
Eyg2NmI0Njg2YWJiOWE1NTg2ZGZlMzc4MzBjOTg4NmI4YTc2MzRlZWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgv9/wQVpteeFreGsxvEBcBLH+C9
NvqAFGmhLkwz77d6Oxnb5o7ZVqlFTFO96uPksjsqaNIn3n6HtKXWbCtIJso2w/+8
pT1eQi7N/QiXdyGk+brocTyF7xdLLKP6vhDLmTIwcjt6BpyvZhJSbxf2Vd9CRT6Y
PdyoxWsV+dZk9NG1vl6q3W794QN6iDcc9IC12oRV+CN64gnyuKBJytC7vh8E2FfQ
dQViqcumJtd6odcL5y+ShMxRXeP4V2LawWeNyq6UWwnKNWgbD4J7ykxdSHbv1rgg
Wi19UN8qfJTrKIQXvrPnOMTVfCqH6HNL1rtPtDJxvgkQ5ElJHkg6eEIR3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGa0aGq7mlWG3+N4MMmIa4p2NO7sMB8GA1UdIwQY
MBaAFDAXPv1Zj6qY1LUljlH7OrcW16xxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUJjLV9WbVBxcGpVdFNXT1VmczZ0eGJYckhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC83YTA2N2MtZWExOS00MDVhLThlNzQt
YjRhM2ZjM2EwMWYxLzEvTUJjLV9WbVBxcGpVdFNXT1VmczZ0eGJYckhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC83YTA2N2MtZWExOS00MDVhLThlNzQtYjRhM2ZjM2EwMWYx
LzEvTUJjLV9WbVBxcGpVdFNXT1VmczZ0eGJYckhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHqQLZ3yt
rDYG0eg57LuWgU3cvUY53zREBTu2QLo0RakzZLMKRMsg7csi+lAASxifbmrFrXal
YSoPJSOCOwYNGJ4RuaYVKKPvTh5dp3+B7VupaL5ifLZtNQunspKqEZXHGrWuG+HW
73/5ZqIvujBiwiOZ/NpUQjSCs2W8hfPkPlBCXGx6qn09lrdGbF4ADI4KTVd8XbrS
SW6/oqd/LBMqzNMzuy+WQm/YvlSgZSwB9XdRo3faVW9oDmPle46lqE1s1DMxn9p6
2q0IzKH9iB8DfhlcENf9yjKUk/T0I2+q82wlOIzIzEmdvOuJ6mJvfIewf7gjzJls
C3rTylVuI6cA4w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:09:19 2025 by rpki-client