Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
File: MBc-_VmPqpjUtSWOUfs6txbXrHE.mft (raw, json)
Hash identifier: tPanUkCmuBsg8CWgYsgsnwOaNQaEoinZVJ7Y8oBzrpY=
Subject key identifier: 44:CA:E4:E1:DF:E2:5F:F5:18:80:80:26:28:78:D0:A1:E3:43:9D:B8
Authority key identifier: 30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71
Certificate issuer: /CN=30173efd598faa98d4b5258e51fb3ab716d7ac71
Certificate serial: 019773ADCEFC2AC42E97859870733F9D7454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
Manifest number: 143D
Signing time: Sun 15 Jun 2025 13:00:59 +0000
Manifest this update: Sun 15 Jun 2025 13:00:59 +0000
Manifest next update: Mon 16 Jun 2025 13:00:59 +0000
Files and hashes: 1: MBc-_VmPqpjUtSWOUfs6txbXrHE.crl (hash: DA1nFjMTqyBeEwW+PJDhDe3WV7bSXMfGT6/95pJDhoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:ad:ce:fc:2a:c4:2e:97:85:98:70:73:3f:9d:74:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30173efd598faa98d4b5258e51fb3ab716d7ac71
Validity
Not Before: Jun 15 13:00:59 2025 GMT
Not After : Jun 16 13:00:59 2025 GMT
Subject: CN=44cae4e1dfe25ff5188080262878d0a1e3439db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1c:e5:ac:82:3b:49:e7:a5:be:88:d0:be:74:
a0:ed:cb:0c:44:63:6b:87:69:6d:2d:76:8f:8e:d8:
18:88:e8:01:92:99:01:cf:74:2e:3e:eb:9d:d0:ef:
95:ab:d6:e3:70:98:91:5c:e0:7d:6d:fc:ac:a4:18:
18:73:32:c0:45:8d:03:a3:4b:35:41:16:54:54:12:
fa:8c:59:7e:c8:5f:cd:65:f7:8a:bc:5e:3c:ba:94:
c4:7a:89:96:0e:04:3b:7e:48:a4:9f:33:36:ac:60:
d1:3b:34:45:02:25:e9:3b:ff:21:af:58:01:13:5c:
0b:0d:9d:9e:ce:da:fc:cf:c9:6b:ab:c5:19:be:a9:
1c:75:7d:4c:4d:e2:c4:47:91:ca:15:9f:c4:ed:97:
9f:0c:61:44:6d:c5:c7:ff:b5:19:94:e9:d3:78:c5:
33:a8:9d:5f:a9:0b:c7:7c:69:19:ea:a5:75:f3:06:
71:6b:3c:f5:70:55:fc:13:dd:b5:bf:d7:6e:99:14:
8a:be:6a:b2:b5:19:6b:49:bd:2d:eb:26:d1:f5:0d:
4c:17:a4:9d:f4:d7:1c:ca:2f:dc:d3:41:c5:5c:39:
ee:af:6f:26:b4:16:72:0d:ee:80:a0:e9:93:cc:2a:
3b:dd:4a:d9:5a:93:d5:1e:82:10:37:d5:f0:df:dc:
76:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CA:E4:E1:DF:E2:5F:F5:18:80:80:26:28:78:D0:A1:E3:43:9D:B8
X509v3 Authority Key Identifier:
keyid:30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:07:45:19:6c:35:df:92:1e:46:6f:ea:be:85:eb:fe:4d:ac:
08:26:37:7b:14:e8:8a:39:dc:fd:e7:40:c1:3f:22:3f:37:d8:
e3:55:da:ce:b4:8b:be:93:c8:6a:58:04:0e:f7:35:fb:5c:78:
27:0c:5c:99:45:1c:21:0c:cc:95:fe:42:d6:5b:68:d4:32:67:
67:36:71:8b:5f:e5:c5:1e:a1:a8:21:dd:8c:e1:cc:00:0a:a7:
3c:f4:3d:fc:5f:5e:53:1a:b6:ce:5c:73:48:ec:69:4a:f3:fd:
b0:23:a5:fd:39:6a:72:f3:59:b6:aa:cb:8d:9c:7c:89:99:48:
38:a2:21:c0:2f:b7:bb:3a:32:09:1e:8f:53:fa:6e:e5:17:38:
07:19:f8:47:a1:2d:89:17:2c:9d:c8:5e:1f:2f:80:1b:24:73:
15:46:23:76:1d:4d:96:4d:1e:4c:67:44:16:a9:00:45:7c:42:
c7:00:9a:e1:d5:21:c2:90:52:8c:4a:55:77:f2:56:71:a8:a5:
4c:43:de:e6:41:38:fa:69:05:19:03:ed:7d:01:e9:25:eb:38:
12:6b:65:45:8b:a3:b1:b1:f2:40:d5:d6:c1:e0:6b:dc:e7:fb:
76:40:bc:54:3d:74:fd:22:e7:06:41:08:eb:3d:d1:f0:ed:d1:
ea:d7:7f:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdzrc78KsQul4WYcHM/nXRUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMTczZWZkNTk4ZmFhOThkNGI1MjU4ZTUxZmIzYWI3MTZk
N2FjNzEwHhcNMjUwNjE1MTMwMDU5WhcNMjUwNjE2MTMwMDU5WjAzMTEwLwYDVQQD
Eyg0NGNhZTRlMWRmZTI1ZmY1MTg4MDgwMjYyODc4ZDBhMWUzNDM5ZGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRzlrII7SeelvojQvnSg7csMRGNr
h2ltLXaPjtgYiOgBkpkBz3QuPuud0O+Vq9bjcJiRXOB9bfyspBgYczLARY0Do0s1
QRZUVBL6jFl+yF/NZfeKvF48upTEeomWDgQ7fkiknzM2rGDROzRFAiXpO/8hr1gB
E1wLDZ2eztr8z8lrq8UZvqkcdX1MTeLER5HKFZ/E7ZefDGFEbcXH/7UZlOnTeMUz
qJ1fqQvHfGkZ6qV18wZxazz1cFX8E921v9dumRSKvmqytRlrSb0t6ybR9Q1MF6Sd
9Nccyi/c00HFXDnur28mtBZyDe6AoOmTzCo73UrZWpPVHoIQN9Xw39x2iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETK5OHf4l/1GICAJih40KHjQ524MB8GA1UdIwQY
MBaAFDAXPv1Zj6qY1LUljlH7OrcW16xxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUJjLV9WbVBxcGpVdFNXT1VmczZ0eGJYckhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC83YTA2N2MtZWExOS00MDVhLThlNzQt
YjRhM2ZjM2EwMWYxLzEvTUJjLV9WbVBxcGpVdFNXT1VmczZ0eGJYckhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC83YTA2N2MtZWExOS00MDVhLThlNzQtYjRhM2ZjM2EwMWYx
LzEvTUJjLV9WbVBxcGpVdFNXT1VmczZ0eGJYckhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApAdFGWw1
35IeRm/qvoXr/k2sCCY3exToijnc/edAwT8iPzfY41XazrSLvpPIalgEDvc1+1x4
JwxcmUUcIQzMlf5C1lto1DJnZzZxi1/lxR6hqCHdjOHMAAqnPPQ9/F9eUxq2zlxz
SOxpSvP9sCOl/TlqcvNZtqrLjZx8iZlIOKIhwC+3uzoyCR6PU/pu5Rc4Bxn4R6Et
iRcsncheHy+AGyRzFUYjdh1Nlk0eTGdEFqkARXxCxwCa4dUhwpBSjEpVd/JWcail
TEPe5kE4+mkFGQPtfQHpJes4EmtlRYujsbHyQNXWweBr3Of7dkC8VD10/SLnBkEI
6z3R8O3R6td/NA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:25:12 2025 by rpki-client