Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
File: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft (raw, json)
Hash identifier: lw89BWY4X6N9yatXoQvIPb0lNP0ePyBE7OvDQ6oGwC4=
Subject key identifier: 19:B4:30:FF:D6:11:F7:A6:F1:73:0B:CB:7C:C6:CD:C6:79:56:05:E5
Authority key identifier: 30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
Certificate issuer: /CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Certificate serial: 019880C2C19520C1D52364969A45FB253505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
Manifest number: 1321
Signing time: Wed 06 Aug 2025 19:01:43 +0000
Manifest this update: Wed 06 Aug 2025 19:01:43 +0000
Manifest next update: Thu 07 Aug 2025 19:01:43 +0000
Files and hashes: 1: MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl (hash: 3UzwaW/GGi5y0I95AFpn/p2YOqhm/IgCH7XBtaY9Dl0=)
2: Xd6umzoHHdEiQVdMV3BPecnkdkk.roa (hash: lBwKPo2uZQdPejEMFQzj+SxghwJ68Haky7eMmtLDiQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:c1:95:20:c1:d5:23:64:96:9a:45:fb:25:35:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3014b8c7f509e10051b0cd29fd8d69f285508d87
Validity
Not Before: Aug 6 19:01:43 2025 GMT
Not After : Aug 7 19:01:43 2025 GMT
Subject: CN=19b430ffd611f7a6f1730bcb7cc6cdc6795605e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fb:99:b1:cd:58:f2:74:2f:35:f0:04:40:07:
ec:8c:52:a3:2f:e8:f4:b1:11:e2:25:8c:f1:12:e7:
f0:23:75:a9:14:10:ed:ff:f1:b4:07:59:1a:a1:b8:
7a:73:07:77:ce:d1:07:89:72:6b:12:bc:6a:d8:3f:
de:65:b5:48:d0:70:f7:e6:c1:98:3b:00:7a:60:7a:
50:4a:ac:82:79:14:06:65:5c:69:58:2f:16:de:ab:
65:79:d2:a6:3e:2d:37:46:2f:ae:09:c1:af:bd:79:
0d:13:18:c4:a8:cc:fe:b6:de:eb:0c:e8:6c:47:39:
dd:f2:bd:19:6c:5b:59:c9:71:15:29:9e:09:b3:86:
fd:38:df:df:85:4f:41:2c:f7:64:a5:9d:f7:78:e5:
91:a7:e4:b5:9d:e0:95:24:67:1a:8e:f2:74:1b:1c:
e1:41:5d:9c:9c:72:9c:10:60:62:7a:f7:d1:b4:a6:
25:d2:6f:bc:e0:af:be:60:62:74:f8:5a:4c:be:62:
b1:95:54:5a:44:44:e6:65:48:5a:93:e4:5d:c1:c3:
90:10:40:10:45:7a:e9:3a:2f:5b:0d:12:23:ef:d1:
45:d7:82:67:0d:f4:1c:4e:6a:95:11:67:68:42:42:
b3:31:0f:f4:71:71:40:d3:3c:82:4b:04:36:2a:c2:
dd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B4:30:FF:D6:11:F7:A6:F1:73:0B:CB:7C:C6:CD:C6:79:56:05:E5
X509v3 Authority Key Identifier:
keyid:30:14:B8:C7:F5:09:E1:00:51:B0:CD:29:FD:8D:69:F2:85:50:8D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c7935-2eda-43ac-8d0f-799525be7215/1/MBS4x_UJ4QBRsM0p_Y1p8oVQjYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:12:87:16:6c:fa:66:fc:eb:26:da:08:9c:40:ba:28:55:57:
6e:2d:77:f0:16:c1:a0:c1:d8:15:b5:44:fb:9d:40:05:bf:e5:
3a:3a:3c:23:70:3e:e3:f6:5f:42:90:7f:00:4c:8e:da:23:8a:
68:63:14:36:08:80:e5:43:be:46:ec:ee:c9:61:14:7e:dc:0b:
18:6a:2a:11:18:14:8d:35:35:c9:5d:09:af:73:70:32:77:a3:
bc:bb:e3:66:1d:a5:6c:26:6e:07:23:cb:52:bd:84:f8:cd:89:
e0:61:10:39:4c:9d:cd:7a:b8:97:66:fb:9d:fe:0e:7b:70:eb:
73:bc:25:9d:26:ef:e2:c3:89:5d:e3:ca:a9:71:1c:ca:4a:8b:
46:29:0c:b1:dd:be:eb:49:f5:b1:14:15:24:e0:22:d0:a7:a2:
e0:4c:6b:44:a9:60:04:99:43:8c:27:40:ba:56:ce:45:9a:40:
33:bc:7b:d2:c0:b8:6a:1a:f2:9e:74:33:e8:2d:29:b8:a8:e0:
93:e2:9f:be:e7:fe:d5:dc:c3:ed:28:97:89:a9:05:11:9e:a3:
82:22:8a:ba:15:44:9f:a7:12:74:69:ab:42:49:20:b2:9b:6e:
a3:77:ef:0a:99:b0:e1:75:30:87:1c:52:ea:ba:7d:2b:6c:63:
a7:13:21:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:08:06 2025 by rpki-client