Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
File: MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft (raw, json)
Hash identifier: xord4TVnbT5avYNX1fg5RXklxsXRRvKgZHF+L4q+upk=
Subject key identifier: 1E:FA:95:0F:67:45:7B:BD:62:30:5C:A2:15:39:9B:DF:C9:33:70:16
Authority key identifier: 30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
Certificate issuer: /CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Certificate serial: 019A70DC2E3CBD243A4D420AD6A487A0D7AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 03:01:09 +0000
Manifest this update: Tue 11 Nov 2025 03:01:09 +0000
Manifest next update: Wed 12 Nov 2025 03:01:09 +0000
Files and hashes: 1: HlO9ZQi1YEqVxRv4xtahO5YLBGA.roa (hash: aJ2b3cCx1ndyavIj0cgELjQKu/oO/oTwQkl8MyIO1oI=)
2: MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl (hash: qiaCiN49TIQ2ytHHC0iSx++IAuIVWvx5d5eihSh4wT4=)
3: SnB27P4aE00JP6FbecTTod9K1rk.roa (hash: 5E+ZR3tJKvaUJ0xYE7TDulpUYo4F5Unw9Ys//QosG5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:2e:3c:bd:24:3a:4d:42:0a:d6:a4:87:a0:d7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Validity
Not Before: Nov 11 03:01:09 2025 GMT
Not After : Nov 12 03:01:09 2025 GMT
Subject: CN=1efa950f67457bbd62305ca215399bdfc9337016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:04:b5:3c:10:c1:da:c5:1c:4f:3e:0e:2f:0a:
dd:51:00:a8:3c:76:d6:78:87:5b:fc:e2:be:f0:c2:
35:44:54:86:f3:57:e2:78:4e:bc:92:1f:6d:79:da:
8e:9d:96:25:8a:13:b5:c2:4a:1d:f7:2b:2b:6b:e4:
44:a1:5e:e0:3a:7f:96:b9:13:b3:20:e3:5b:ae:ea:
4f:ce:77:59:30:68:93:c4:a5:57:db:a0:ea:37:10:
cb:64:63:68:6a:f4:96:7e:ea:02:59:19:aa:1b:39:
32:de:ef:d0:f8:01:c6:cc:29:4d:f2:4f:f1:45:d4:
7e:03:24:ed:6a:3c:16:e3:88:eb:8c:3b:65:52:ab:
1d:f3:42:3f:db:ec:d8:97:94:db:2f:75:05:da:60:
f1:32:72:5f:08:20:bc:26:f2:c7:8b:01:41:77:73:
62:82:8f:81:8c:6a:6e:d5:71:5b:3b:02:e3:a1:80:
8b:02:1d:08:aa:4b:11:12:c5:38:0f:0b:b3:87:3f:
0f:c9:e3:b0:39:37:f3:19:02:3d:d1:28:2c:b3:ea:
78:4f:9c:cf:9c:01:99:a3:3a:79:e0:81:20:f5:2b:
67:65:14:63:73:07:1b:15:ea:df:a6:3f:b5:24:9d:
bd:e4:5b:96:0e:6f:09:bc:9d:f6:48:54:bb:da:81:
53:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FA:95:0F:67:45:7B:BD:62:30:5C:A2:15:39:9B:DF:C9:33:70:16
X509v3 Authority Key Identifier:
keyid:30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:7a:27:57:77:d1:1c:2e:de:81:1c:7e:9e:bf:64:b4:ff:d8:
1f:8e:cb:2b:25:df:54:e1:7a:2a:1c:b4:08:df:3c:cd:31:26:
2f:6a:34:16:6f:ef:ed:37:e7:7f:40:65:86:a3:30:31:35:54:
f4:21:bb:c2:de:24:e9:cb:24:b5:7b:8e:93:bc:47:b9:a1:0c:
80:2b:27:c6:d8:1d:77:b9:4b:89:fd:24:77:96:22:56:ee:c5:
a5:a9:92:71:70:4a:78:df:7d:73:ee:a3:cd:b1:d4:85:e8:7e:
f9:84:28:20:70:c3:31:0a:4b:dd:ce:86:b4:6d:df:ff:10:50:
06:b9:03:76:ca:99:a8:6f:68:20:f2:b4:6c:f9:4c:df:b9:90:
55:20:4a:46:1f:f5:96:f8:ed:96:c3:62:9c:b6:ab:30:c1:2a:
79:3d:8b:e4:92:db:30:32:25:f5:25:42:77:4f:2e:30:78:08:
ce:f0:33:c5:7c:a3:e2:40:70:68:77:0d:2d:88:56:9c:4c:68:
f8:b1:48:7f:19:70:fa:df:33:20:e4:2b:a4:5a:20:95:72:19:
93:c5:d0:9c:99:b4:97:29:88:37:94:90:20:3a:f3:82:98:54:
29:f8:77:dc:be:ee:e2:dd:30:23:30:aa:41:76:80:b2:c6:70:
5d:48:db:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:52 2025 by rpki-client