Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
File: MBc-_VmPqpjUtSWOUfs6txbXrHE.mft (raw, json)
Hash identifier: OievumPPDUUqVCCeHm48UBUYlh5AGLsOHTUmqksyt9E=
Subject key identifier: 1B:AA:59:76:6F:19:19:58:A9:24:62:74:51:48:44:3E:17:24:C0:2A
Authority key identifier: 30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71
Certificate issuer: /CN=30173efd598faa98d4b5258e51fb3ab716d7ac71
Certificate serial: 01987298593890F38A6FDBADCA8648A576E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
Manifest number: 14C1
Signing time: Mon 04 Aug 2025 01:00:43 +0000
Manifest this update: Mon 04 Aug 2025 01:00:43 +0000
Manifest next update: Tue 05 Aug 2025 01:00:43 +0000
Files and hashes: 1: MBc-_VmPqpjUtSWOUfs6txbXrHE.crl (hash: CMA8PdaLMUB2C94Va2g/n8JeVSCZUCmO+QgMKDvBRZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:59:38:90:f3:8a:6f:db:ad:ca:86:48:a5:76:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30173efd598faa98d4b5258e51fb3ab716d7ac71
Validity
Not Before: Aug 4 01:00:43 2025 GMT
Not After : Aug 5 01:00:43 2025 GMT
Subject: CN=1baa59766f191958a92462745148443e1724c02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1d:51:14:23:5c:51:79:3a:d9:ac:fa:41:d5:
e2:81:b6:3e:44:45:63:2e:de:86:dd:31:0e:15:63:
63:82:42:5b:0d:56:d1:44:63:06:98:dd:c5:81:32:
94:2b:28:5e:3e:31:69:36:fb:07:16:7c:d7:0a:2b:
f4:4c:9e:24:cf:b9:9f:43:e3:83:a2:61:21:3f:f0:
2e:7e:a4:4b:6a:09:44:a6:ad:f6:86:2e:53:e1:39:
56:6a:c3:39:18:e7:9e:8f:08:f8:35:80:70:64:4f:
a8:37:7f:15:af:26:33:2b:20:a5:85:55:39:b6:9b:
1f:a0:14:ed:fb:dc:8e:a0:95:d7:9a:0c:1e:cb:6e:
b1:b6:96:4c:ca:bf:de:c1:27:d3:1c:20:7d:10:93:
dd:85:64:9d:c3:6d:d5:ba:3c:18:2b:38:59:86:b0:
f5:e7:a8:90:d7:b0:b9:d9:d0:ef:46:ec:c0:f0:af:
aa:e7:16:7b:53:9a:20:f5:ca:11:6d:b9:bf:19:1f:
dc:30:86:f5:c7:96:8f:4e:b2:8b:46:dc:69:b9:a9:
c6:51:d6:39:73:b6:90:0f:77:d3:6b:b1:b7:cc:bd:
d5:26:95:10:c6:68:93:35:7b:fe:d8:db:27:24:3a:
f6:b3:41:70:60:fc:0e:04:f5:5e:8c:5c:00:d9:dc:
32:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AA:59:76:6F:19:19:58:A9:24:62:74:51:48:44:3E:17:24:C0:2A
X509v3 Authority Key Identifier:
keyid:30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e9:f1:85:fa:6c:fa:61:c6:51:40:dd:ce:8b:b9:e0:54:f9:
db:0b:46:07:c0:25:87:ab:6d:1c:2b:70:6a:52:43:47:b6:65:
10:bc:6d:44:8e:78:a1:cd:34:98:6e:4f:13:06:21:75:4c:33:
34:42:21:8e:70:81:ce:56:d7:76:4e:6d:8d:ce:02:1c:7b:aa:
76:cd:b0:80:26:7b:8c:37:92:2e:2e:cb:08:3a:c5:b4:1a:f1:
2f:81:3c:0c:50:e3:57:60:cf:c2:58:9b:66:e4:93:f7:3f:0f:
bd:89:15:08:72:dd:5f:ce:af:8a:7d:28:40:a1:29:fb:62:3c:
75:1b:d1:f6:78:b6:4d:c0:1c:cd:8f:b5:28:95:6e:84:f7:4c:
93:b0:d6:f3:d3:ad:55:ad:9a:06:3e:18:13:30:33:01:cf:ca:
b1:3a:96:54:ca:9c:d8:e5:00:85:0b:59:9e:af:ab:8b:6c:a4:
07:cd:d0:b4:38:5a:29:73:0b:ae:4c:45:65:a4:a2:24:14:30:
34:35:b6:72:4e:01:9f:e0:a5:10:3b:58:f8:55:e9:fc:b8:65:
6c:f9:63:38:a3:8e:38:cb:66:20:d4:71:dd:a0:44:cd:63:b5:
b0:08:cb:26:79:71:e7:5b:3e:90:14:b3:e6:89:2a:c8:cd:12:
91:9c:bb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:21 2025 by rpki-client