Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
File: MBc-_VmPqpjUtSWOUfs6txbXrHE.mft (raw, json)
Hash identifier: zfp8CQ3/27oqRh+zvKDslTnpAzgfJRtkwa7Bw7A+2L0=
Subject key identifier: BC:72:FE:EB:FF:4E:98:10:6E:9F:86:3E:35:30:BE:65:C7:03:9E:4E
Authority key identifier: 30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71
Certificate issuer: /CN=30173efd598faa98d4b5258e51fb3ab716d7ac71
Certificate serial: 019A4F98E0E5D3EF1494FD0196FFD220A795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
Manifest number: 15B8
Signing time: Tue 04 Nov 2025 16:00:10 +0000
Manifest this update: Tue 04 Nov 2025 16:00:10 +0000
Manifest next update: Wed 05 Nov 2025 16:00:10 +0000
Files and hashes: 1: MBc-_VmPqpjUtSWOUfs6txbXrHE.crl (hash: zPIekwo8QmvkuZW684HKfdjZcTuS/FY1ra30P4Hdxzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:e0:e5:d3:ef:14:94:fd:01:96:ff:d2:20:a7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30173efd598faa98d4b5258e51fb3ab716d7ac71
Validity
Not Before: Nov 4 16:00:10 2025 GMT
Not After : Nov 5 16:00:10 2025 GMT
Subject: CN=bc72feebff4e98106e9f863e3530be65c7039e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cd:96:be:58:f9:e7:dd:e7:2c:ed:a4:01:45:
7b:92:99:44:b4:b2:34:ff:e8:14:8a:e0:fc:27:78:
94:64:e8:c0:68:07:34:73:1d:77:4e:8d:95:39:7d:
05:54:d3:6d:bf:c6:0a:32:8e:14:c3:0a:ad:9d:54:
08:5f:4e:6d:b3:e6:7f:fb:4c:4f:1e:59:57:9f:78:
76:fe:3f:bc:8c:47:0c:b1:99:aa:e0:35:97:87:41:
f0:0f:bb:43:fe:6d:e3:e3:3f:e0:6a:30:ed:6e:ad:
b6:92:93:0d:51:81:fc:33:ca:bc:6c:6e:a9:e3:d4:
c2:62:6a:09:cd:e3:26:9f:a9:50:96:30:18:8f:ce:
a8:36:35:40:37:40:81:34:a3:ec:5e:57:7e:98:aa:
f8:63:78:e0:61:ba:27:15:07:a4:94:b9:26:c5:32:
6d:a3:da:67:58:15:c3:23:4b:13:2f:21:e4:d9:94:
d8:73:87:d2:7e:bb:46:84:0d:52:d2:99:93:f3:62:
1d:84:99:4f:13:5e:d1:f9:93:ab:42:87:63:87:16:
db:ee:5d:5b:2a:76:e5:d4:1b:0a:e7:da:9b:de:c5:
79:f8:61:4f:f6:8b:93:07:6d:db:4f:3d:d9:fc:3d:
1f:5b:8e:d3:14:c1:6a:4c:1f:e7:3c:59:27:fd:38:
9e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:72:FE:EB:FF:4E:98:10:6E:9F:86:3E:35:30:BE:65:C7:03:9E:4E
X509v3 Authority Key Identifier:
keyid:30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ad:65:d7:74:4c:59:7a:f4:b6:d5:ad:6e:72:22:57:92:be:
01:fb:0f:fc:c6:24:c3:f9:56:d4:04:b9:5c:29:b3:99:27:85:
ae:ae:a7:2b:44:b8:e0:2f:e2:f2:27:ba:17:6e:e7:dc:65:be:
e2:84:95:d1:23:17:be:70:83:df:aa:8e:c9:c2:d6:f6:92:21:
e8:83:86:6d:2b:e3:21:af:11:ae:32:08:89:2d:ee:e9:91:4b:
a0:24:2d:26:7a:36:4a:b0:6e:0c:a8:60:7b:4d:1a:6d:26:39:
bd:d5:c5:51:8c:1e:c7:ff:00:b4:24:88:b1:c1:a9:2d:81:f7:
0c:b8:7d:ab:a0:c8:5c:ce:79:dc:29:d5:fa:af:5c:88:a6:c8:
84:47:6e:b7:38:3f:f0:e2:5a:06:b6:b2:e2:7d:ce:35:b0:fa:
a0:40:16:bb:08:bb:f9:d6:63:bb:e0:cd:3b:d6:5a:a2:8c:bf:
8c:89:ab:d1:c9:d6:55:a7:56:6e:9e:8c:0f:38:cc:9d:40:91:
6a:b8:95:0f:c9:96:58:fb:20:c4:20:f1:9b:45:8b:8a:a8:5d:
77:11:7b:dd:bd:83:52:23:25:da:40:ef:2f:9a:79:3a:7a:df:
57:fa:f8:fa:4e:dc:af:32:24:6b:a1:96:c3:b8:02:75:44:13:
64:20:14:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmODl0+8UlP0Blv/SIKeVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMTczZWZkNTk4ZmFhOThkNGI1MjU4ZTUxZmIzYWI3MTZk
N2FjNzEwHhcNMjUxMTA0MTYwMDEwWhcNMjUxMTA1MTYwMDEwWjAzMTEwLwYDVQQD
EyhiYzcyZmVlYmZmNGU5ODEwNmU5Zjg2M2UzNTMwYmU2NWM3MDM5ZTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc2Wvlj5593nLO2kAUV7kplEtLI0
/+gUiuD8J3iUZOjAaAc0cx13To2VOX0FVNNtv8YKMo4UwwqtnVQIX05ts+Z/+0xP
HllXn3h2/j+8jEcMsZmq4DWXh0HwD7tD/m3j4z/gajDtbq22kpMNUYH8M8q8bG6p
49TCYmoJzeMmn6lQljAYj86oNjVAN0CBNKPsXld+mKr4Y3jgYbonFQeklLkmxTJt
o9pnWBXDI0sTLyHk2ZTYc4fSfrtGhA1S0pmT82IdhJlPE17R+ZOrQodjhxbb7l1b
Knbl1BsK59qb3sV5+GFP9ouTB23bTz3Z/D0fW47TFMFqTB/nPFkn/TiePwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxy/uv/TpgQbp+GPjUwvmXHA55OMB8GA1UdIwQY
MBaAFDAXPv1Zj6qY1LUljlH7OrcW16xxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUJjLV9WbVBxcGpVdFNXT1VmczZ0eGJYckhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC83YTA2N2MtZWExOS00MDVhLThlNzQt
YjRhM2ZjM2EwMWYxLzEvTUJjLV9WbVBxcGpVdFNXT1VmczZ0eGJYckhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC83YTA2N2MtZWExOS00MDVhLThlNzQtYjRhM2ZjM2EwMWYx
LzEvTUJjLV9WbVBxcGpVdFNXT1VmczZ0eGJYckhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAea1l13RM
WXr0ttWtbnIiV5K+AfsP/MYkw/lW1AS5XCmzmSeFrq6nK0S44C/i8ie6F27n3GW+
4oSV0SMXvnCD36qOycLW9pIh6IOGbSvjIa8RrjIIiS3u6ZFLoCQtJno2SrBuDKhg
e00abSY5vdXFUYwex/8AtCSIscGpLYH3DLh9q6DIXM553CnV+q9ciKbIhEdutzg/
8OJaBray4n3ONbD6oEAWuwi7+dZju+DNO9Zaooy/jImr0cnWVadWbp6MDzjMnUCR
ariVD8mWWPsgxCDxm0WLiqhddxF73b2DUiMl2kDvL5p5OnrfV/r4+k7crzIka6GW
w7gCdUQTZCAUMA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:30:06 2025 by rpki-client