Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
File: MBc-_VmPqpjUtSWOUfs6txbXrHE.mft (raw, json)
Hash identifier: sLuMt7Yh3ogcF2tgbxOi5jXC7N8KxKg1D4WBYpucI2M=
Subject key identifier: 73:19:D8:85:01:96:38:B4:4F:39:EB:07:32:07:32:7E:8C:12:DF:48
Authority key identifier: 30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71
Certificate issuer: /CN=30173efd598faa98d4b5258e51fb3ab716d7ac71
Certificate serial: 019A725C57BC5BF5D111EC8DA9D9BC556664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
Manifest number: 15CA
Signing time: Tue 11 Nov 2025 10:00:45 +0000
Manifest this update: Tue 11 Nov 2025 10:00:45 +0000
Manifest next update: Wed 12 Nov 2025 10:00:45 +0000
Files and hashes: 1: MBc-_VmPqpjUtSWOUfs6txbXrHE.crl (hash: tlx4hemVcLv2lBnPJ+TRybADvRXU+patv8EdiZm0nuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:57:bc:5b:f5:d1:11:ec:8d:a9:d9:bc:55:66:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30173efd598faa98d4b5258e51fb3ab716d7ac71
Validity
Not Before: Nov 11 10:00:45 2025 GMT
Not After : Nov 12 10:00:45 2025 GMT
Subject: CN=7319d885019638b44f39eb073207327e8c12df48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:84:b3:71:f8:8f:46:43:98:c3:cd:ed:8c:5f:
51:da:45:e3:b3:7d:e1:9f:24:79:13:02:f0:50:29:
04:f3:04:3b:65:d4:2a:25:7f:e0:2e:4f:44:a3:9e:
c3:c4:a7:d1:c9:6c:89:8f:a9:04:cf:7a:7e:c0:ef:
b0:ed:78:de:b6:7d:6a:bf:c5:c1:b2:c2:01:0d:d8:
50:1a:3f:ef:81:12:99:25:b0:cd:a2:33:37:b4:59:
8f:67:ab:44:b2:6f:0c:16:31:d5:a2:31:d4:65:8b:
89:5c:19:f7:95:45:6c:88:d5:53:6d:d2:93:bc:51:
2f:1f:be:97:93:0d:c1:0c:ae:e8:60:21:f0:78:65:
2b:f6:3e:28:eb:77:25:b9:a9:14:b3:c0:64:84:a0:
10:35:49:24:78:da:3f:37:17:c3:d5:d8:2e:38:ac:
dd:44:d5:bf:0f:c9:35:a2:43:ea:96:52:a1:4d:83:
1a:dd:6e:6f:15:7a:05:ae:9b:76:63:04:e2:7d:d5:
65:2d:d0:ce:da:3e:ba:7d:9e:f0:c5:01:46:d9:ad:
a5:c5:19:13:10:90:e4:e2:8a:ca:3b:34:8e:be:ed:
6d:c5:14:ef:ad:84:4d:b7:0c:29:86:e2:c4:9f:11:
6d:88:7d:dd:25:e5:7b:a0:c8:18:21:66:44:70:22:
8d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:19:D8:85:01:96:38:B4:4F:39:EB:07:32:07:32:7E:8C:12:DF:48
X509v3 Authority Key Identifier:
keyid:30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c3:02:24:5b:d3:48:f1:91:a2:21:36:f6:af:b7:f8:9f:48:
5d:73:f7:63:c6:9b:18:49:9e:a3:7a:19:71:a4:8b:53:05:48:
73:64:4d:f2:ef:e2:3e:2c:18:a6:fe:f5:40:c5:95:24:90:e8:
d6:a6:ef:bb:ab:bf:5f:de:2e:33:c3:e9:b1:7d:bc:c0:82:54:
eb:a9:79:7b:63:03:1a:8b:3b:7a:64:93:fb:25:69:70:48:45:
e7:61:35:7c:b8:c8:8f:08:75:49:4d:62:62:40:5a:77:5c:25:
99:ab:5d:69:d5:24:27:4c:c3:53:3d:74:65:f4:42:65:47:a9:
12:81:d6:98:47:56:61:e0:5c:d7:57:fc:f0:99:ed:ff:55:40:
a3:5f:f9:9f:3c:bd:72:a8:fb:c9:b3:86:52:a8:9a:9c:55:ae:
c0:b0:1f:05:a0:45:7f:de:64:15:85:3d:6a:6a:e0:a0:b1:29:
af:bf:36:45:1c:b6:35:8f:b7:70:60:cc:d5:19:e2:84:c7:5a:
2e:50:af:75:d5:6b:c8:aa:c1:47:ae:6b:3d:62:bc:31:b5:fc:
a6:05:04:31:42:65:96:40:7f:d0:03:9c:74:47:eb:89:ab:c4:
c4:5d:ac:60:a6:02:00:2b:d0:d6:69:e6:4b:cd:eb:88:cf:a5:
d8:70:9e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:00 2025 by rpki-client