Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
File: MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft (raw, json)
Hash identifier: 4wm1E6nl566CySou9RZRyNYB6bcIZdXrLysNsZcBPMU=
Subject key identifier: 81:30:DE:BD:BF:C2:D7:73:B4:9D:0D:FA:DD:27:AE:2B:15:CC:C2:28
Authority key identifier: 32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
Certificate issuer: /CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Certificate serial: 0199FC58544FFE12C7C8AF4BAE805822DB6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
Manifest number: 1085
Signing time: Sun 19 Oct 2025 12:01:11 +0000
Manifest this update: Sun 19 Oct 2025 12:01:11 +0000
Manifest next update: Mon 20 Oct 2025 12:01:11 +0000
Files and hashes: 1: MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl (hash: fh8/MPcnVQWi1nwn3nmRdNG70/TA012jHnEvgbR7k08=)
2: TBM-WxKs_JnUU_yCd07gs-SEpTM.roa (hash: ITKz1rUEY27fZS9fRQNAXZm00rkbdJk7GbuSl5tqJwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:54:4f:fe:12:c7:c8:af:4b:ae:80:58:22:db:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Validity
Not Before: Oct 19 12:01:11 2025 GMT
Not After : Oct 20 12:01:11 2025 GMT
Subject: CN=8130debdbfc2d773b49d0dfadd27ae2b15ccc228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:37:a5:fd:7d:43:e0:90:dd:d0:2f:e9:ed:83:
e4:cb:0a:bd:d1:eb:40:e8:d9:83:16:d7:70:11:8c:
fa:6a:93:07:9e:78:c7:23:3c:7d:1c:08:f3:e1:0d:
0f:9b:41:8e:82:3d:da:03:28:fd:fb:c5:e3:fa:24:
01:ac:b2:d0:2f:14:2b:ef:be:1e:56:94:1b:c9:82:
26:b1:36:81:94:7e:8f:c4:7b:3a:83:fc:54:e3:3d:
a2:8d:77:17:5e:19:c2:e5:13:22:c7:1b:72:6e:23:
6f:6d:06:97:08:6a:a2:15:cb:88:40:fe:70:1c:7f:
d5:ed:70:7e:3b:4b:b3:6e:ae:84:3a:65:21:53:8e:
d4:93:b8:c5:f1:8c:74:d3:30:50:40:1f:f8:36:f8:
58:fb:e0:01:d9:d4:43:87:9b:4e:cc:9f:f0:b6:3d:
6c:94:2e:08:15:8a:0c:89:ea:a9:dd:87:92:18:b7:
f5:43:71:6c:4a:84:8c:b4:7b:10:88:9b:6b:f1:d9:
f9:0f:e2:cb:50:e8:12:9a:70:b0:33:48:1c:6b:0d:
e0:13:d7:d1:a5:b8:e2:e0:17:2e:3f:83:ba:9f:15:
07:a8:49:d6:d6:ff:e1:80:4e:1c:0b:f8:2a:b4:77:
48:ed:1f:82:84:be:c7:b2:0a:43:e8:22:0a:83:c4:
79:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:30:DE:BD:BF:C2:D7:73:B4:9D:0D:FA:DD:27:AE:2B:15:CC:C2:28
X509v3 Authority Key Identifier:
keyid:32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:04:a1:8c:5c:5c:98:0b:42:cd:e0:39:04:67:d6:5f:42:68:
57:76:65:90:c9:b9:a0:c2:42:6d:cd:5f:90:90:3c:73:09:a3:
22:bb:3a:3d:f7:e2:cd:48:ac:34:41:81:a5:b8:f3:65:48:14:
99:55:d1:a0:52:ec:b9:14:91:6a:27:d4:2d:59:c6:26:d8:2c:
6a:31:e1:7a:6a:50:88:c4:96:a7:32:bb:33:e1:fe:0e:45:4e:
f7:9f:cd:c1:d2:3a:f3:40:de:29:02:b0:6e:02:8f:f4:3b:db:
5a:6e:69:7c:70:cb:56:87:3d:26:ac:b2:d3:98:29:c2:9d:d7:
e4:65:75:75:f7:2e:27:6a:5a:b8:33:e0:52:77:03:b3:a9:0e:
c0:2a:db:80:f9:b5:8f:d3:28:5f:6e:e7:c3:cf:14:7d:ed:f3:
1b:0e:cc:17:12:86:e6:db:2f:64:3b:39:9f:97:fe:9b:fd:6f:
54:0d:9b:d6:2d:28:82:5a:1d:f7:16:4a:48:f1:35:40:63:ef:
ec:f8:57:cb:8a:e6:1f:74:d8:86:06:1e:82:a8:26:05:49:8a:
f6:58:3c:a4:83:40:9a:9c:de:20:c9:ec:d5:eb:2d:05:c3:a2:
dd:7a:65:a4:98:47:b7:92:5b:d1:c4:ca:63:b2:f4:cc:93:7b:
1b:36:14:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:28 2025 by rpki-client