Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
File: MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft (raw, json)
Hash identifier: kqsERcfEEnqxQJwOxzarqfbOZ98HxrqwXCttTECQSHE=
Subject key identifier: B0:01:4E:4F:80:E1:25:D6:2E:22:27:AF:54:DB:22:96:38:71:16:FD
Authority key identifier: 32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
Certificate issuer: /CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Certificate serial: 0198D6CDDE8C0874B9BE3FEF42708E8FC296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
Manifest number: 0FED
Signing time: Sat 23 Aug 2025 12:01:12 +0000
Manifest this update: Sat 23 Aug 2025 12:01:12 +0000
Manifest next update: Sun 24 Aug 2025 12:01:12 +0000
Files and hashes: 1: MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl (hash: Ro8VsbMPvGRKC2Y+ckavBL5RMyIdukNE8o7WJLP15rc=)
2: TBM-WxKs_JnUU_yCd07gs-SEpTM.roa (hash: ITKz1rUEY27fZS9fRQNAXZm00rkbdJk7GbuSl5tqJwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:de:8c:08:74:b9:be:3f:ef:42:70:8e:8f:c2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Validity
Not Before: Aug 23 12:01:12 2025 GMT
Not After : Aug 24 12:01:12 2025 GMT
Subject: CN=b0014e4f80e125d62e2227af54db2296387116fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:01:27:17:91:14:aa:59:fa:76:53:05:88:fd:
06:79:10:6e:95:a2:3d:a5:f8:d9:bf:ea:57:f4:9a:
6c:66:a7:53:55:27:cc:42:89:99:74:7d:23:1d:b3:
f0:2c:9b:68:e5:f6:76:cf:f8:f7:7e:b1:ec:ce:58:
d3:27:c3:bb:ac:ab:98:95:38:94:32:00:73:e2:79:
44:7f:02:49:45:f5:e4:49:10:52:92:0d:93:34:06:
d3:19:f9:8e:9f:17:70:b5:a8:4b:b4:11:a6:7a:ef:
3e:9a:9f:ff:a5:2b:08:68:24:f6:bb:03:db:19:74:
3b:3c:af:78:19:54:e6:4b:73:c7:4c:bf:2b:c2:eb:
34:74:34:6b:4c:08:df:99:39:db:27:74:0f:45:01:
c0:12:2a:80:71:cd:9b:2e:5f:f2:fb:f8:3a:4c:ae:
a1:4c:13:48:95:97:50:e7:18:fd:64:c7:91:a2:77:
5a:7d:31:6a:4e:81:cb:f7:18:a2:d2:2f:68:6c:bb:
e3:67:e7:44:73:11:07:72:c9:47:2e:20:82:3a:02:
19:79:cf:1a:b1:6d:f5:6d:88:fb:40:30:18:35:ab:
a8:0d:de:3b:69:16:31:2d:26:3e:c9:e7:78:a5:ab:
08:be:34:36:d8:da:94:00:a2:d7:5f:63:08:de:ad:
54:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:01:4E:4F:80:E1:25:D6:2E:22:27:AF:54:DB:22:96:38:71:16:FD
X509v3 Authority Key Identifier:
keyid:32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e8:09:8a:1b:b6:94:b7:4a:42:b1:54:86:14:7d:ea:6c:ac:
dd:2f:fe:39:61:8f:92:d7:2d:67:c8:2a:1c:32:4b:81:7d:93:
b5:3f:ae:8f:ec:c5:86:1b:dd:a1:a2:db:24:ab:ab:78:80:06:
53:50:0c:c8:45:26:40:0b:52:c0:22:4f:b6:fd:5a:e3:52:8f:
7c:bb:38:c1:ad:c4:86:20:29:e0:fe:58:04:f5:c9:74:9a:76:
b3:c3:2c:9b:82:6e:d5:72:f3:ec:1b:34:4c:fc:f9:3c:91:4e:
45:3f:0a:07:35:8f:4e:2c:cc:0c:7c:68:83:d5:50:a2:4f:2d:
a0:a3:05:b3:79:2c:c5:9b:10:92:fa:da:76:aa:bc:78:a5:0e:
9f:ea:29:cc:a0:d6:9c:de:b0:95:9d:6d:c7:5c:75:35:4e:ae:
aa:1b:97:ab:be:eb:be:bf:9d:2f:03:53:70:2b:fe:59:b7:59:
33:55:10:4a:06:8b:f8:21:be:b7:23:db:e4:3b:aa:1b:37:50:
f6:2f:f1:d3:e4:a6:c0:3f:38:36:1c:9d:2e:aa:ae:51:2a:5f:
49:02:61:f9:62:94:89:0b:ed:d7:84:3f:0e:6f:8d:d0:fc:34:
2c:84:a3:30:5b:9c:aa:e9:3a:04:ef:a2:8a:b1:57:7e:92:ac:
26:e4:db:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzd6MCHS5vj/vQnCOj8KWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYzg0NmYxOTE0MzMyMzBkOTczY2JjOGZkYTA2YjYwMmVi
ZmNiNWIwHhcNMjUwODIzMTIwMTEyWhcNMjUwODI0MTIwMTEyWjAzMTEwLwYDVQQD
EyhiMDAxNGU0ZjgwZTEyNWQ2MmUyMjI3YWY1NGRiMjI5NjM4NzExNmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QEnF5EUqln6dlMFiP0GeRBulaI9
pfjZv+pX9JpsZqdTVSfMQomZdH0jHbPwLJto5fZ2z/j3frHszljTJ8O7rKuYlTiU
MgBz4nlEfwJJRfXkSRBSkg2TNAbTGfmOnxdwtahLtBGmeu8+mp//pSsIaCT2uwPb
GXQ7PK94GVTmS3PHTL8rwus0dDRrTAjfmTnbJ3QPRQHAEiqAcc2bLl/y+/g6TK6h
TBNIlZdQ5xj9ZMeRondafTFqToHL9xii0i9obLvjZ+dEcxEHcslHLiCCOgIZec8a
sW31bYj7QDAYNauoDd47aRYxLSY+yed4pasIvjQ22NqUAKLXX2MI3q1UlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLABTk+A4SXWLiInr1TbIpY4cRb9MB8GA1UdIwQY
MBaAFDLIRvGRQzIw2XPLyP2ga2Auv8tbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lNTc1NmUtMTMxNy00NDcyLTgzMDIt
YTIzNDFkM2JiMDUzLzEvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9lNTc1NmUtMTMxNy00NDcyLTgzMDItYTIzNDFkM2JiMDUz
LzEvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+gJihu2
lLdKQrFUhhR96mys3S/+OWGPktctZ8gqHDJLgX2TtT+uj+zFhhvdoaLbJKureIAG
U1AMyEUmQAtSwCJPtv1a41KPfLs4wa3EhiAp4P5YBPXJdJp2s8Msm4Ju1XLz7Bs0
TPz5PJFORT8KBzWPTizMDHxog9VQok8toKMFs3ksxZsQkvradqq8eKUOn+opzKDW
nN6wlZ1tx1x1NU6uqhuXq77rvr+dLwNTcCv+WbdZM1UQSgaL+CG+tyPb5DuqGzdQ
9i/x0+SmwD84NhydLqquUSpfSQJh+WKUiQvt14Q/Dm+N0Pw0LISjMFucquk6BO+i
irFXfpKsJuTbdg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:07:44 2025 by rpki-client