Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
File: MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft (raw, json)
Hash identifier: pC3pp0JfaiU28Lo2fXLuqQ2eNs/1iN+T9+sHrNxk/E8=
Subject key identifier: 56:2C:36:DA:B4:22:61:2F:CC:04:27:BD:02:ED:55:DC:68:F2:95:10
Authority key identifier: 30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
Certificate issuer: /CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Certificate serial: 01976F2C23A11608F9F08000163729D4AFCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
Manifest number: 1594
Signing time: Sat 14 Jun 2025 16:00:52 +0000
Manifest this update: Sat 14 Jun 2025 16:00:52 +0000
Manifest next update: Sun 15 Jun 2025 16:00:52 +0000
Files and hashes: 1: HlO9ZQi1YEqVxRv4xtahO5YLBGA.roa (hash: aJ2b3cCx1ndyavIj0cgELjQKu/oO/oTwQkl8MyIO1oI=)
2: MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl (hash: PpCepN1sCVRwb60ZaLBl4SRx2nh0nMoKNl6+zliF/hY=)
3: Sz-2_xwv8_Pr62CPMcJKGCNIl0Q.roa (hash: KGCimG6dQ21lOqL0fLNubpwWVkOlwHw1k0SNCSE2QP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:23:a1:16:08:f9:f0:80:00:16:37:29:d4:af:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Validity
Not Before: Jun 14 16:00:52 2025 GMT
Not After : Jun 15 16:00:52 2025 GMT
Subject: CN=562c36dab422612fcc0427bd02ed55dc68f29510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:52:ef:72:72:d2:f5:35:d7:f9:36:e8:1a:e3:
8e:d4:b1:6f:51:92:de:6e:ba:af:16:49:30:4d:7a:
8f:cb:99:89:de:fc:5a:38:08:b9:13:4f:70:40:3e:
43:2c:01:e5:35:e6:ec:12:2a:52:df:a5:06:b7:02:
60:01:ca:d9:bb:28:5d:01:ef:c7:eb:bd:fc:9b:b5:
8d:f2:3c:35:88:5a:0b:86:04:4a:56:bc:04:e2:99:
29:98:32:e8:ea:a3:d4:79:c4:db:97:99:1b:26:1f:
15:bc:30:7c:9e:62:35:52:55:c0:5e:b3:b8:ca:44:
21:00:b5:05:a7:ed:7b:e2:9d:4f:da:be:c6:f5:b2:
47:47:13:f8:e6:eb:6f:2a:e0:e3:b0:3b:7a:40:8e:
e3:bb:99:a9:75:5c:9b:0e:47:95:14:a6:3f:ce:ab:
2d:5c:51:b9:3f:8f:42:db:ce:d5:8a:6c:00:16:2c:
ee:e5:26:b4:aa:cc:b6:7d:8d:14:71:21:0d:e0:ea:
af:e6:3b:e6:42:5f:c7:23:58:71:df:42:c9:de:60:
a9:de:f0:43:ed:2b:42:9f:c2:d8:29:09:ba:8e:93:
4c:f1:70:9b:b3:db:6a:14:7c:e4:9b:84:1b:a4:ea:
2a:91:c9:4a:3b:0b:76:14:7b:97:51:5c:a9:72:e5:
42:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2C:36:DA:B4:22:61:2F:CC:04:27:BD:02:ED:55:DC:68:F2:95:10
X509v3 Authority Key Identifier:
keyid:30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:14:7a:d6:af:3b:68:2d:6d:e8:90:e7:53:f2:e9:b1:2a:ca:
4c:a5:17:88:45:84:a0:db:84:59:24:2a:a9:af:c4:9f:7d:4f:
f1:52:df:83:ba:43:07:da:df:f0:63:ab:a4:5d:00:10:62:7c:
bd:45:02:65:8f:9a:2d:8d:ba:46:83:0d:aa:b9:6c:6d:45:20:
2f:db:64:90:ba:2a:a5:75:5c:ad:e7:c8:62:08:09:94:b3:da:
d2:a9:cb:68:68:b7:43:37:64:78:d0:cd:4a:58:97:cc:85:29:
3c:4c:42:b5:3e:6f:6e:d6:9e:d2:cd:d5:40:f0:74:2a:a2:1f:
b0:5e:80:cb:51:ae:69:01:8c:a1:86:61:f1:21:71:a7:5c:87:
ab:05:02:36:27:2a:5b:c4:67:b1:4b:64:ba:4f:82:f4:02:70:
21:f8:ad:fd:18:c0:da:75:b4:be:c7:32:9f:7a:44:c7:d7:be:
72:25:da:ba:55:1e:6e:3b:92:a9:98:e6:15:cb:cb:ed:ba:52:
20:18:7b:38:10:e6:30:01:38:79:f4:02:4f:71:db:40:4f:b6:
84:cf:1b:a9:9f:72:4a:af:e3:26:db:34:f9:05:fd:3c:7c:f6:
b8:80:0e:3c:4a:f7:47:34:ad:8c:e2:29:70:0b:b9:50:5f:d7:
df:ea:7a:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvLCOhFgj58IAAFjcp1K/NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMTZiMTBkMGFjMjE4MDE3Yzc0OTM5NGU0ZjI1MTljZjJj
MDUxNGUwHhcNMjUwNjE0MTYwMDUyWhcNMjUwNjE1MTYwMDUyWjAzMTEwLwYDVQQD
Eyg1NjJjMzZkYWI0MjI2MTJmY2MwNDI3YmQwMmVkNTVkYzY4ZjI5NTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lLvcnLS9TXX+TboGuOO1LFvUZLe
brqvFkkwTXqPy5mJ3vxaOAi5E09wQD5DLAHlNebsEipS36UGtwJgAcrZuyhdAe/H
6738m7WN8jw1iFoLhgRKVrwE4pkpmDLo6qPUecTbl5kbJh8VvDB8nmI1UlXAXrO4
ykQhALUFp+174p1P2r7G9bJHRxP45utvKuDjsDt6QI7ju5mpdVybDkeVFKY/zqst
XFG5P49C287VimwAFizu5Sa0qsy2fY0UcSEN4Oqv5jvmQl/HI1hx30LJ3mCp3vBD
7StCn8LYKQm6jpNM8XCbs9tqFHzkm4QbpOoqkclKOwt2FHuXUVypcuVCeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYsNtq0ImEvzAQnvQLtVdxo8pUQMB8GA1UdIwQY
MBaAFDAWsQ0KwhgBfHSTlOTyUZzywFFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUJheERRckNHQUY4ZEpPVTVQSlJuUExBVVU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zZWI2NGEtZTZkZS00NWY1LWI2OGMt
NjkzNjc2MmQyZmNlLzEvTUJheERRckNHQUY4ZEpPVTVQSlJuUExBVVU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8zZWI2NGEtZTZkZS00NWY1LWI2OGMtNjkzNjc2MmQyZmNl
LzEvTUJheERRckNHQUY4ZEpPVTVQSlJuUExBVVU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwRR61q87
aC1t6JDnU/LpsSrKTKUXiEWEoNuEWSQqqa/En31P8VLfg7pDB9rf8GOrpF0AEGJ8
vUUCZY+aLY26RoMNqrlsbUUgL9tkkLoqpXVcrefIYggJlLPa0qnLaGi3QzdkeNDN
SliXzIUpPExCtT5vbtae0s3VQPB0KqIfsF6Ay1GuaQGMoYZh8SFxp1yHqwUCNicq
W8RnsUtkuk+C9AJwIfit/RjA2nW0vscyn3pEx9e+ciXaulUebjuSqZjmFcvL7bpS
IBh7OBDmMAE4efQCT3HbQE+2hM8bqZ9ySq/jJts0+QX9PHz2uIAOPEr3RzStjOIp
cAu5UF/X3+p6QQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:57:03 2025 by rpki-client