Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
File: MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft (raw, json)
Hash identifier: BmhSyRpK1aZxk4hSx5q7AuhIeY5hBK7esQwWb5+2/OU=
Subject key identifier: 91:BA:42:DC:47:D2:78:E4:F1:C0:D5:B0:ED:08:D6:DD:0C:4C:BC:FB
Authority key identifier: 30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
Certificate issuer: /CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Certificate serial: 0199288E3AD64A326393488FB97AADAE5FA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
Manifest number: 1679
Signing time: Mon 08 Sep 2025 09:00:33 +0000
Manifest this update: Mon 08 Sep 2025 09:00:33 +0000
Manifest next update: Tue 09 Sep 2025 09:00:33 +0000
Files and hashes: 1: HlO9ZQi1YEqVxRv4xtahO5YLBGA.roa (hash: aJ2b3cCx1ndyavIj0cgELjQKu/oO/oTwQkl8MyIO1oI=)
2: MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl (hash: iSNn+1anSMEEhk9B4+hfo5wu4TsJfTQVHxn3BMb23Is=)
3: SnB27P4aE00JP6FbecTTod9K1rk.roa (hash: 5E+ZR3tJKvaUJ0xYE7TDulpUYo4F5Unw9Ys//QosG5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:8e:3a:d6:4a:32:63:93:48:8f:b9:7a:ad:ae:5f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Validity
Not Before: Sep 8 09:00:33 2025 GMT
Not After : Sep 9 09:00:33 2025 GMT
Subject: CN=91ba42dc47d278e4f1c0d5b0ed08d6dd0c4cbcfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:8c:84:18:b9:4e:56:63:bd:5f:a5:dd:82:
32:7c:cb:b2:53:23:9d:bb:96:1d:f5:13:f9:e0:0b:
79:98:5b:96:61:77:72:63:7e:57:c1:3b:18:b9:d3:
74:1e:c6:22:19:5a:af:35:01:7e:52:06:e5:d7:64:
e7:8c:b3:f6:37:c2:2f:2b:04:b0:3d:6e:79:df:fb:
25:da:b8:55:96:61:be:11:d4:97:c8:23:86:40:b7:
0c:27:b4:8a:b0:b6:ea:74:82:3f:5c:b7:d7:e9:99:
46:6f:a4:57:c6:8b:00:cc:86:92:53:53:e3:db:e9:
b9:7c:fd:be:40:f6:2f:59:97:c1:8a:d6:30:db:2f:
d9:ec:63:12:da:e8:6b:d4:27:5d:04:bc:5f:77:fa:
64:87:df:cf:89:3e:e4:15:c7:c9:f0:2d:56:4a:e3:
c7:52:30:dd:a3:46:33:f0:b9:d6:e9:0b:ec:95:19:
60:67:91:9e:18:82:2c:82:2b:45:1e:b7:0d:ca:43:
53:dc:5c:41:e9:65:5c:14:01:e6:cf:47:5a:72:64:
2d:c9:63:e4:19:64:1e:7a:56:d1:77:89:a9:e4:1f:
ad:36:fc:8d:2d:ca:1a:6b:5e:b5:09:9d:b0:19:c7:
01:7a:04:6a:d8:63:6a:db:0b:41:a6:db:59:75:8a:
1b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BA:42:DC:47:D2:78:E4:F1:C0:D5:B0:ED:08:D6:DD:0C:4C:BC:FB
X509v3 Authority Key Identifier:
keyid:30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:2a:5e:a4:70:79:a7:4b:bc:31:2f:68:aa:ac:13:d7:e8:50:
35:60:49:70:1a:66:c2:84:3c:89:54:78:f6:5c:0d:73:fb:38:
6e:85:59:d8:f7:8c:f3:c3:73:86:82:a7:a0:94:bd:0a:8b:61:
d2:51:be:c2:5a:e6:5c:3b:e6:10:f5:17:ff:f9:9c:1d:8e:30:
e3:3f:9b:fa:d2:01:39:a8:ba:a0:bb:9d:83:4e:4f:2a:06:81:
a9:8f:cd:a9:96:ab:19:b0:08:89:6c:e6:8a:01:b5:f3:a7:c1:
d2:24:aa:c8:9c:7c:0b:b0:1a:70:40:3e:d6:f6:e2:0e:c4:e4:
ec:c0:59:b2:09:a6:be:d9:d8:a7:77:dc:4e:41:f3:6a:85:75:
53:f7:a5:8b:67:e0:bb:63:b4:7c:7b:a5:b8:ca:b9:f2:dd:89:
2f:c7:b1:6c:3a:33:58:39:3b:c8:eb:83:a2:a6:67:9f:99:84:
0b:64:cd:6e:09:27:90:c8:89:89:3f:d2:8f:2e:84:b1:df:68:
b5:dc:43:40:67:95:5f:19:eb:04:26:5a:ca:32:3e:e6:d4:a0:
4d:91:f0:77:15:cd:18:8d:59:c8:23:cb:0d:a5:9a:cb:d5:88:
16:7b:30:5e:82:c3:cb:8f:7a:27:e9:52:18:56:6c:0d:b9:1b:
94:bc:79:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:11:13 2025 by rpki-client