Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
File: MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft (raw, json)
Hash identifier: z/YfXnlyMuN8CiJZ1Jn8DC7nZk5AnojCiJTqSHa5o5I=
Subject key identifier: DD:6B:49:4A:92:DB:74:50:94:CC:03:3D:42:AA:F0:2B:66:A1:DC:10
Authority key identifier: 30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
Certificate issuer: /CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Certificate serial: 0197469DD1F7509DC216F0A78EC747C85280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
Manifest number: 157F
Signing time: Fri 06 Jun 2025 19:00:37 +0000
Manifest this update: Fri 06 Jun 2025 19:00:37 +0000
Manifest next update: Sat 07 Jun 2025 19:00:37 +0000
Files and hashes: 1: HlO9ZQi1YEqVxRv4xtahO5YLBGA.roa (hash: aJ2b3cCx1ndyavIj0cgELjQKu/oO/oTwQkl8MyIO1oI=)
2: MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl (hash: va0I/CVFpZJzWBh+nT2ehQt0dbAnzHUT5gZwStYwTbQ=)
3: Sz-2_xwv8_Pr62CPMcJKGCNIl0Q.roa (hash: KGCimG6dQ21lOqL0fLNubpwWVkOlwHw1k0SNCSE2QP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:d1:f7:50:9d:c2:16:f0:a7:8e:c7:47:c8:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Validity
Not Before: Jun 6 19:00:37 2025 GMT
Not After : Jun 7 19:00:37 2025 GMT
Subject: CN=dd6b494a92db745094cc033d42aaf02b66a1dc10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bf:a6:99:a5:6d:7d:b8:6b:61:f9:f9:15:b6:
8d:80:42:f4:d5:83:e5:99:df:94:0e:d8:d8:98:b3:
c4:71:40:41:55:dc:89:ac:a1:18:5a:c2:19:bb:36:
1d:8c:59:4e:84:8c:47:af:fa:41:7e:86:b9:2b:b1:
80:d3:47:28:1a:7e:96:24:6c:12:e1:41:b1:c2:7f:
29:32:c1:4b:20:4c:66:56:7c:22:5d:ea:f9:7c:b2:
1e:ec:e8:49:7b:95:ce:34:9b:7c:3f:b8:26:37:28:
e3:84:ae:1f:9f:5c:7d:7e:25:d4:a2:7b:5a:31:d1:
35:80:a2:dc:07:52:82:d2:04:19:54:be:54:4b:ba:
13:af:cf:c8:14:bf:65:2e:e9:b1:64:2f:eb:b7:0f:
37:88:2f:b1:72:30:77:b3:81:61:88:2a:1a:4a:b5:
b8:bd:5a:36:fb:11:f7:10:0c:8e:d7:a6:f1:de:42:
78:41:bd:e5:c7:d7:2d:d1:25:88:2f:b4:21:31:73:
f6:bc:06:dd:66:41:dc:1b:88:01:89:0d:a4:3c:f6:
29:71:49:ed:51:24:a3:9f:2c:8e:ba:62:f7:4b:6f:
2e:ae:03:8a:da:db:82:81:da:ba:a4:13:88:e7:d8:
69:96:fb:63:df:8e:ef:f9:c5:28:3a:59:ba:f6:1d:
21:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6B:49:4A:92:DB:74:50:94:CC:03:3D:42:AA:F0:2B:66:A1:DC:10
X509v3 Authority Key Identifier:
keyid:30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:16:e1:9c:ce:aa:d1:7f:c8:c1:32:a5:8d:76:6c:37:7a:38:
c6:1d:d8:af:b7:f4:aa:0b:40:d2:2d:a1:fc:65:b6:bc:c3:5c:
fd:a9:2c:34:55:57:9c:f6:ce:b0:0c:68:08:04:1a:c1:f8:d6:
af:16:5b:13:f9:8e:99:07:05:94:a3:74:e4:8b:71:b2:d4:90:
10:ea:a4:62:cf:f2:89:79:3b:2a:23:96:b5:45:30:d2:e0:37:
db:e8:13:85:2c:35:b0:e3:59:a2:3a:0b:69:5e:39:3c:3a:22:
29:85:f2:64:60:68:76:a6:2d:bf:24:da:b8:e9:e0:a9:23:0b:
1e:1d:f3:ba:6d:a4:72:ef:46:d6:5d:d0:0d:f0:d3:72:34:e7:
c4:bf:f8:aa:d9:e4:d8:f3:32:f8:e6:7f:c1:67:28:1d:c2:6a:
a1:92:b9:db:e8:f6:39:8f:87:f0:dc:ff:88:21:2a:79:5d:3d:
69:b4:93:fd:8e:33:a7:d5:bc:77:98:45:e0:28:2b:a0:2a:ab:
68:d9:96:d3:15:51:4b:51:f9:eb:3f:f7:70:46:ba:c9:09:3e:
4b:d6:9a:b4:d4:69:04:12:55:ab:88:01:82:b4:b6:b1:6b:92:
1e:c4:92:97:d5:36:56:76:4f:2a:02:e7:91:73:30:a6:1c:50:
46:d0:2e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:00:36 2025 by rpki-client