Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
File: msLwFwWoWaHX3lAwr4LfmlLI7C8.mft (raw, json)
Hash identifier: S9Yp4hHlwcmvErVWcYGpnqYtTsAcTcCNVN9OcuI3J7g=
Subject key identifier: 92:0F:C2:0E:E8:EA:52:55:54:0B:07:3F:49:2E:9E:59:2E:51:08:2B
Authority key identifier: 9A:C2:F0:17:05:A8:59:A1:D7:DE:50:30:AF:82:DF:9A:52:C8:EC:2F
Certificate issuer: /CN=9ac2f01705a859a1d7de5030af82df9a52c8ec2f
Certificate serial: 0199FDD92E5758D33FE8C51E414CC221F9A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 19:01:32 +0000
Manifest this update: Sun 19 Oct 2025 19:01:32 +0000
Manifest next update: Mon 20 Oct 2025 19:01:32 +0000
Files and hashes: 1: msLwFwWoWaHX3lAwr4LfmlLI7C8.crl (hash: cukmwO06ttIpA5NxqmnFGUPVRpgkVEvwu4T2/Glj65c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:2e:57:58:d3:3f:e8:c5:1e:41:4c:c2:21:f9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ac2f01705a859a1d7de5030af82df9a52c8ec2f
Validity
Not Before: Oct 19 19:01:32 2025 GMT
Not After : Oct 20 19:01:32 2025 GMT
Subject: CN=920fc20ee8ea5255540b073f492e9e592e51082b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:92:22:b3:3e:0c:9f:53:69:0a:6a:bc:55:e7:
15:6b:90:e5:ec:19:84:0d:20:a3:db:3f:c8:62:f8:
39:34:37:66:cf:27:d1:e3:6e:22:1c:bc:19:1e:7e:
52:1f:5b:84:f5:00:84:fc:e2:eb:10:11:1a:6b:49:
29:11:a6:d6:3c:37:d3:bf:7d:a8:c0:da:21:0e:9d:
ca:97:69:f7:90:e5:df:78:d9:e7:cc:e0:7f:7f:d3:
3e:f4:b3:54:03:27:a5:64:14:86:9a:f3:82:01:6e:
88:6b:07:df:b9:d6:03:bb:d9:d2:db:85:e6:67:c0:
ad:5b:3a:8b:fd:6a:1a:05:be:17:c5:81:77:87:5d:
45:24:60:77:e5:85:d0:7b:f5:3b:c2:35:45:44:94:
3d:67:c2:6a:78:f1:a7:ef:6d:ba:72:ab:71:d9:36:
14:23:1c:3e:23:99:33:e0:1b:11:10:d9:43:22:d4:
ec:66:91:bf:f9:cd:f8:2b:db:e6:33:e6:0d:b6:53:
5c:6f:b9:25:ff:e2:1c:00:29:48:46:dd:6e:b9:f9:
df:c5:c3:64:71:6d:d0:31:54:eb:d4:8a:78:05:eb:
34:1a:f2:1a:59:b4:24:7c:80:97:8d:df:9e:d3:b1:
81:6d:1d:a9:19:39:d5:45:d8:05:e9:3a:bb:51:09:
ad:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0F:C2:0E:E8:EA:52:55:54:0B:07:3F:49:2E:9E:59:2E:51:08:2B
X509v3 Authority Key Identifier:
keyid:9A:C2:F0:17:05:A8:59:A1:D7:DE:50:30:AF:82:DF:9A:52:C8:EC:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:af:75:d9:23:b1:ab:59:e4:eb:b9:0d:1d:1c:e7:df:b7:34:
6d:f5:99:e1:60:32:91:0b:3f:4b:73:d9:c2:25:0f:63:61:26:
20:40:1f:50:81:fd:46:c4:45:cb:c2:f7:10:32:08:30:01:51:
59:c6:2e:09:c5:6d:54:01:03:4c:d2:1d:f4:90:19:a4:87:23:
d1:10:2a:d7:4b:ab:8b:d7:48:e4:9f:04:cf:d5:de:2b:cb:55:
df:2a:d6:58:57:7a:36:cf:64:5f:68:c9:86:10:c3:05:92:39:
6b:f2:f6:19:33:69:f7:58:3c:22:f8:62:38:a6:a9:0e:2e:36:
dc:bf:d6:22:7f:54:cc:53:da:cf:8e:73:76:8e:e0:18:b1:38:
95:64:a0:11:35:db:b5:f6:cf:91:d1:62:72:a8:c5:d4:22:2d:
df:9c:7a:6c:ac:12:f0:dd:2b:ae:43:ba:2c:d3:27:eb:4e:3e:
16:f3:79:1d:03:81:dc:9d:03:51:6a:9a:8e:9b:63:50:b7:ec:
b8:e8:cb:76:42:44:2d:b8:0e:d0:6b:fb:1e:d5:98:fd:c0:74:
8e:cd:9f:bf:d9:a2:47:e7:81:3d:08:5f:51:97:cd:96:2f:28:
96:18:ac:4b:42:68:14:0b:c1:90:1e:2a:c5:1c:e3:fa:46:d8:
11:2e:d2:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92S5XWNM/6MUeQUzCIfmmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhYzJmMDE3MDVhODU5YTFkN2RlNTAzMGFmODJkZjlhNTJj
OGVjMmYwHhcNMjUxMDE5MTkwMTMyWhcNMjUxMDIwMTkwMTMyWjAzMTEwLwYDVQQD
Eyg5MjBmYzIwZWU4ZWE1MjU1NTQwYjA3M2Y0OTJlOWU1OTJlNTEwODJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJIisz4Mn1NpCmq8VecVa5Dl7BmE
DSCj2z/IYvg5NDdmzyfR424iHLwZHn5SH1uE9QCE/OLrEBEaa0kpEabWPDfTv32o
wNohDp3Kl2n3kOXfeNnnzOB/f9M+9LNUAyelZBSGmvOCAW6IawffudYDu9nS24Xm
Z8CtWzqL/WoaBb4XxYF3h11FJGB35YXQe/U7wjVFRJQ9Z8JqePGn7226cqtx2TYU
Ixw+I5kz4BsRENlDItTsZpG/+c34K9vmM+YNtlNcb7kl/+IcAClIRt1uufnfxcNk
cW3QMVTr1Ip4Bes0GvIaWbQkfICXjd+e07GBbR2pGTnVRdgF6Tq7UQmtZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIPwg7o6lJVVAsHP0kunlkuUQgrMB8GA1UdIwQY
MBaAFJrC8BcFqFmh195QMK+C35pSyOwvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXNMd0Z3V29XYUhYM2xBd3I0TGZtbExJN0M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy81ZjZiYTAtOWNhNS00YTY3LTlmM2Et
MTg3YTU3YTRkNjc3LzEvbXNMd0Z3V29XYUhYM2xBd3I0TGZtbExJN0M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy81ZjZiYTAtOWNhNS00YTY3LTlmM2EtMTg3YTU3YTRkNjc3
LzEvbXNMd0Z3V29XYUhYM2xBd3I0TGZtbExJN0M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAba912SOx
q1nk67kNHRzn37c0bfWZ4WAykQs/S3PZwiUPY2EmIEAfUIH9RsRFy8L3EDIIMAFR
WcYuCcVtVAEDTNId9JAZpIcj0RAq10uri9dI5J8Ez9XeK8tV3yrWWFd6Ns9kX2jJ
hhDDBZI5a/L2GTNp91g8IvhiOKapDi423L/WIn9UzFPaz45zdo7gGLE4lWSgETXb
tfbPkdFicqjF1CIt35x6bKwS8N0rrkO6LNMn604+FvN5HQOB3J0DUWqajptjULfs
uOjLdkJELbgO0Gv7HtWY/cB0js2fv9miR+eBPQhfUZfNli8olhisS0JoFAvBkB4q
xRzj+kbYES7SYQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:16:13 2025 by rpki-client