Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft
File: MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft (raw, json)
Hash identifier: AORCHsNQuMvpWTVxF4kiUI7CzcJeYB29CJxx6LgNcPs=
Subject key identifier: 15:0E:3B:56:6E:6E:D1:AC:9C:E4:F3:04:7E:85:7C:B0:9D:5F:DB:09
Authority key identifier: 31:BB:73:0B:1B:3F:53:E7:3A:25:74:22:E5:BB:EC:E4:3B:67:7F:E3
Certificate issuer: /CN=31bb730b1b3f53e73a257422e5bbece43b677fe3
Certificate serial: 019A53E4170BBFAFDD4DFCF597513045EB28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft
Manifest number: 012A
Signing time: Wed 05 Nov 2025 12:00:48 +0000
Manifest this update: Wed 05 Nov 2025 12:00:48 +0000
Manifest next update: Thu 06 Nov 2025 12:00:48 +0000
Files and hashes: 1: MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl (hash: eLmF8fH4Jj+UXmCSBrOk2dyzT/pUoNF9qqakx+uXCQ0=)
2: R-6gZG6Qkp3ae09ud4PH3JpfB80.roa (hash: BAAGIDlz41luoFtKlUFhcgsonLyEAYtSldgK/GTu16Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e4:17:0b:bf:af:dd:4d:fc:f5:97:51:30:45:eb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31bb730b1b3f53e73a257422e5bbece43b677fe3
Validity
Not Before: Nov 5 12:00:48 2025 GMT
Not After : Nov 6 12:00:48 2025 GMT
Subject: CN=150e3b566e6ed1ac9ce4f3047e857cb09d5fdb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9c:e8:79:7f:b5:67:fc:5a:fe:83:30:b9:df:
eb:1f:0d:0e:1b:83:9b:e4:97:69:05:f5:2e:2d:1e:
f4:2a:bc:27:94:e5:b4:14:5c:b2:0a:af:75:6d:57:
fc:fa:f2:36:7d:86:3e:9f:a1:ed:07:d8:ad:af:78:
50:61:aa:1b:64:ac:49:b1:49:4a:ac:1b:47:02:ea:
5d:20:85:fb:80:f5:eb:ce:13:2e:4e:d6:57:81:19:
8f:88:8a:65:da:53:64:4e:10:7d:dd:22:3f:1c:ea:
9e:48:8a:18:6a:a5:79:1e:ef:c7:0b:f2:8e:fa:79:
8a:ea:9e:03:3a:bd:2b:4b:70:1b:99:83:35:30:e7:
0e:ff:9a:58:0d:89:7a:0d:0a:59:77:b3:7e:46:1a:
38:c1:9d:99:b0:24:86:cd:d7:1d:d6:6d:39:90:99:
b3:82:a9:e0:0f:b1:7a:32:80:bf:a2:f2:7a:21:80:
dd:61:de:04:b4:00:b4:e9:b9:2d:08:99:e9:96:3f:
f1:9b:6f:42:ab:06:4d:60:76:4e:9f:35:69:b6:50:
ea:24:12:c0:b5:83:3e:d9:ef:b2:00:f1:23:ac:bb:
1f:6d:df:6f:9d:96:7d:47:e3:1a:f0:a0:db:d0:7e:
09:e7:eb:a3:56:15:c9:16:f9:8b:08:99:81:71:1e:
7c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0E:3B:56:6E:6E:D1:AC:9C:E4:F3:04:7E:85:7C:B0:9D:5F:DB:09
X509v3 Authority Key Identifier:
keyid:31:BB:73:0B:1B:3F:53:E7:3A:25:74:22:E5:BB:EC:E4:3B:67:7F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3d93a5-5fbd-402e-ad87-e986904c8d0c/1/MbtzCxs_U-c6JXQi5bvs5Dtnf-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:98:b4:64:17:94:bb:18:4f:3d:f4:dd:af:7a:3a:c6:3b:27:
48:b0:8c:f3:46:4f:6f:d5:c7:b4:83:2a:9f:1d:6f:3f:e3:71:
5c:df:6c:bb:c7:50:8a:eb:93:29:9e:df:a9:1a:f4:a4:cd:0a:
c9:a5:49:0d:6b:3c:b0:77:10:38:30:10:20:67:98:47:ec:2d:
77:97:67:3a:8a:97:06:a8:1b:c0:8b:2d:e4:49:c0:e7:29:70:
62:f0:f9:c3:97:b0:35:5d:6c:6f:55:60:1c:d3:30:b0:61:b2:
c6:1c:0c:e8:76:ba:dd:99:87:16:17:98:16:95:f0:e7:3e:a6:
f5:94:99:63:35:5b:a4:09:41:dc:69:1b:ec:67:9c:e4:c8:06:
10:99:88:35:a8:df:ad:37:f5:e6:7b:83:e2:28:65:c9:09:d0:
dc:21:a6:c0:cc:89:29:8a:10:f6:a2:2d:21:97:9f:fe:68:f9:
25:32:34:62:66:eb:92:76:70:e4:bf:80:d4:56:b9:50:c6:f4:
07:d6:ae:23:10:59:70:89:23:a2:a6:93:52:31:e8:f8:fb:3d:
98:04:38:2f:88:5e:9c:74:84:af:28:64:f5:3a:02:a0:66:c3:
d2:71:98:13:ca:8b:af:7c:30:a0:61:7a:ad:8f:09:e7:27:b5:
78:21:a6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:07:04 2025 by rpki-client