Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
File: MBc-_VmPqpjUtSWOUfs6txbXrHE.mft (raw, json)
Hash identifier: RpuC/zOFZsvmM7g5YjY18HXbBPnqq7ZnWZRL+zN9IVM=
Subject key identifier: 80:03:56:7E:5D:65:63:15:AD:F4:78:97:9D:74:27:29:75:05:43:48
Authority key identifier: 30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71
Certificate issuer: /CN=30173efd598faa98d4b5258e51fb3ab716d7ac71
Certificate serial: 0197474256C34E10DF1E8A99317B77BEA3EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
Manifest number: 1426
Signing time: Fri 06 Jun 2025 22:00:19 +0000
Manifest this update: Fri 06 Jun 2025 22:00:19 +0000
Manifest next update: Sat 07 Jun 2025 22:00:19 +0000
Files and hashes: 1: MBc-_VmPqpjUtSWOUfs6txbXrHE.crl (hash: QZzU7TA0XaFWTvuAMdYZ2E2+LOa6QtZo8RT8AHduydU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:56:c3:4e:10:df:1e:8a:99:31:7b:77:be:a3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30173efd598faa98d4b5258e51fb3ab716d7ac71
Validity
Not Before: Jun 6 22:00:19 2025 GMT
Not After : Jun 7 22:00:19 2025 GMT
Subject: CN=8003567e5d656315adf478979d74272975054348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:64:4b:4e:c1:9e:05:63:63:b9:d1:cd:ba:84:
11:9b:eb:44:4d:87:e4:03:33:d7:9c:5f:77:aa:f8:
63:6c:47:79:28:c0:fd:c0:e0:cf:99:dc:0b:74:f8:
79:15:49:02:cc:08:ea:68:76:55:4f:c6:ab:c5:95:
2c:48:f2:9a:88:4e:e8:6b:30:34:3b:61:b8:b3:72:
ac:74:df:b6:f5:39:9a:9c:6a:01:63:7f:a1:22:f5:
7f:84:86:bc:4c:7b:b2:22:c8:76:60:de:85:ea:4d:
92:42:25:82:fb:b3:ce:fa:12:62:b8:8e:76:91:6d:
07:5d:84:64:2d:48:e7:e6:fc:25:d9:99:fc:d3:fe:
97:3d:23:49:de:06:64:5c:a9:08:65:5a:ad:08:5a:
4d:96:c2:c4:43:b5:5b:2f:c7:af:3d:4e:bf:3e:a1:
bf:ee:8a:8f:56:58:c6:42:82:a9:15:e9:0a:3f:fb:
52:d6:7f:08:b8:16:8c:8e:1a:b3:ea:a6:43:2b:f0:
00:57:04:df:a8:d3:9b:ee:29:64:fc:e5:64:3e:b9:
c9:80:71:f8:1f:be:f4:2a:86:f1:93:81:d3:59:01:
43:11:4e:99:b7:90:fe:aa:e4:92:dc:5b:25:b9:49:
ca:c0:fb:e9:ec:3a:5e:43:0a:28:b9:80:49:07:11:
5e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:03:56:7E:5D:65:63:15:AD:F4:78:97:9D:74:27:29:75:05:43:48
X509v3 Authority Key Identifier:
keyid:30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:83:c9:dd:ea:10:a2:3c:b9:b1:de:48:5e:72:67:44:a6:9a:
31:dc:79:14:ac:0a:ad:10:a5:17:64:2d:93:38:b4:ee:05:82:
a2:6d:26:59:60:6f:3c:3b:d8:e9:6e:9c:f4:be:70:53:ed:3e:
fc:75:50:d1:7c:50:67:a2:cb:9e:83:01:7f:f4:01:c0:80:20:
1b:44:6e:8d:6b:a0:bb:6b:33:60:a3:f7:da:e5:67:bd:05:3b:
1b:5a:77:df:0b:ec:0e:ac:89:aa:0e:33:cc:02:ef:7d:93:f9:
03:9e:4b:b2:ce:22:c8:72:3c:b7:14:71:82:1a:1c:02:68:0c:
32:f0:15:d6:e1:ed:e1:33:c8:da:04:cf:59:7d:e1:99:45:0b:
86:56:d3:74:86:7e:f6:5a:c7:2b:33:e5:ef:a3:1a:b1:8c:72:
00:b2:12:f9:79:c7:a5:64:6c:a1:f4:7a:45:e1:d1:37:45:c2:
da:13:9e:c0:45:91:fb:fa:a3:49:96:3a:40:de:24:fe:2a:1e:
d1:13:c4:33:a3:86:c6:3b:aa:b4:09:2d:40:09:ee:17:02:b6:
c3:f4:4f:62:02:62:63:4c:76:af:ff:d6:71:f7:39:78:fe:da:
98:14:dd:cf:92:8f:5e:dc:a9:f6:57:b5:80:63:ac:aa:c1:26:
62:f1:fd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:12:02 2025 by rpki-client