Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
File: MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft (raw, json)
Hash identifier: ohXHILnUZ+Sq/XA+r+dfdrByhQaBiF1nuFnOdEpw0Sk=
Subject key identifier: 79:EC:54:26:1B:2C:1B:84:EE:80:DE:3E:C7:39:FA:7A:36:90:E7:35
Authority key identifier: 32:C2:BE:48:3F:F2:7B:B8:F0:DC:09:CE:0F:71:F2:A8:8E:AF:7E:07
Certificate issuer: /CN=32c2be483ff27bb8f0dc09ce0f71f2a88eaf7e07
Certificate serial: 0199FB0F48F97F258C521CACB73003453B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 06:01:46 +0000
Manifest this update: Sun 19 Oct 2025 06:01:46 +0000
Manifest next update: Mon 20 Oct 2025 06:01:46 +0000
Files and hashes: 1: 3Ld3_xMK0PlfZFY-qBwXca5iVGM.roa (hash: CjU6hi/Jh6Zo5sGQ2UDjZfEn9Czpv8lCLYgvh/6NOKs=)
2: MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl (hash: A8aFsULeNwxWsMR0/beYCXkvFibnrN0sZLLlpxk5jhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:48:f9:7f:25:8c:52:1c:ac:b7:30:03:45:3b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c2be483ff27bb8f0dc09ce0f71f2a88eaf7e07
Validity
Not Before: Oct 19 06:01:46 2025 GMT
Not After : Oct 20 06:01:46 2025 GMT
Subject: CN=79ec54261b2c1b84ee80de3ec739fa7a3690e735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c0:d3:65:31:e4:00:ab:18:dd:b1:46:68:a7:
4e:b7:d9:9a:3d:b6:81:7f:15:95:c5:65:69:2a:8a:
cd:0d:87:e4:87:bd:36:bf:e8:37:a8:2c:1d:28:8f:
84:f6:97:8a:00:2b:60:51:1f:ac:94:50:06:02:fb:
1d:57:38:99:85:44:06:d5:2c:8b:bc:73:1c:38:6a:
36:14:6e:df:21:fb:ee:e5:0a:2e:d4:41:fe:b3:64:
9c:66:dc:f9:b5:91:da:f0:ae:23:68:b3:e5:f1:e3:
15:28:cd:a1:bd:8b:78:4e:dc:e2:3e:d4:ca:5a:c1:
a3:1e:68:90:83:83:7d:c6:68:c1:8e:d5:81:fe:06:
ea:10:99:6b:f6:5e:c3:e7:f3:47:63:70:c7:55:e1:
38:3a:04:ce:e0:36:6a:4d:4e:ab:f9:b6:5d:68:1c:
89:55:e6:45:47:8b:dd:c7:e3:04:2d:1f:b4:a1:43:
d9:9f:d5:26:dd:6a:f6:39:40:95:ab:0a:fd:35:aa:
c2:27:05:2b:a7:2b:2c:da:fc:82:fe:68:39:ec:71:
84:f0:69:1f:9a:41:c5:bc:14:66:67:57:ab:b6:41:
64:49:81:27:63:bf:fb:ea:d0:13:9a:04:26:79:ac:
29:23:9b:89:c6:82:8b:c8:c3:9a:8e:51:72:90:67:
cf:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EC:54:26:1B:2C:1B:84:EE:80:DE:3E:C7:39:FA:7A:36:90:E7:35
X509v3 Authority Key Identifier:
keyid:32:C2:BE:48:3F:F2:7B:B8:F0:DC:09:CE:0F:71:F2:A8:8E:AF:7E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:fa:2d:f4:87:16:b0:d5:0a:9b:b2:f8:5b:4e:79:30:e2:14:
0a:b3:d2:b1:e2:84:a7:46:25:4f:6a:23:15:ab:ff:5d:fa:4d:
b6:14:dc:9f:db:c2:3a:33:5b:59:f5:5a:31:4a:ad:45:59:69:
b8:8e:bf:24:9d:a2:f9:f5:09:3c:ff:e2:91:91:e2:d7:12:0b:
25:3f:41:2b:4b:5d:bd:a6:b4:dc:a3:f3:14:a8:4e:00:94:a6:
04:30:2c:a1:c7:df:e1:33:31:05:04:da:c2:7d:cf:a3:d7:c2:
85:c4:96:85:d1:4b:89:aa:bf:d9:20:f4:20:a8:4f:41:bb:37:
4c:b2:9e:f3:46:83:8d:6e:41:a8:0a:d4:ad:f9:8b:d3:5b:4b:
96:c2:23:99:83:1c:e1:21:d8:67:34:ff:ba:a8:7a:c8:a5:5f:
5f:38:d7:cd:2d:c3:89:9d:53:57:d5:71:e6:51:24:9d:1d:36:
17:8b:2f:0e:f5:52:8b:f4:03:5f:f3:14:05:52:84:5a:32:fc:
29:19:ed:fa:64:e6:77:c8:79:e7:08:54:80:77:87:91:46:d3:
74:5a:10:e2:bc:16:9d:f5:8c:42:90:61:71:87:e9:80:bd:2b:
b1:01:07:b5:fe:47:bc:e1:f3:a1:e6:24:3e:98:1f:dd:d9:75:
4d:bd:bd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:53 2025 by rpki-client