Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
File: MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft (raw, json)
Hash identifier: 3mhID94fIngCeOs1zIr7qAceCc3x51jHtaK6efJdWX0=
Subject key identifier: 0D:6D:28:4A:B4:56:92:C8:72:D7:1A:0F:15:EE:70:00:34:1D:36:4A
Authority key identifier: 32:C2:BE:48:3F:F2:7B:B8:F0:DC:09:CE:0F:71:F2:A8:8E:AF:7E:07
Certificate issuer: /CN=32c2be483ff27bb8f0dc09ce0f71f2a88eaf7e07
Certificate serial: 0198D583A163B3B94F4F64E7E46ECAE0F1F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 06:00:30 +0000
Manifest this update: Sat 23 Aug 2025 06:00:30 +0000
Manifest next update: Sun 24 Aug 2025 06:00:30 +0000
Files and hashes: 1: 3Ld3_xMK0PlfZFY-qBwXca5iVGM.roa (hash: CjU6hi/Jh6Zo5sGQ2UDjZfEn9Czpv8lCLYgvh/6NOKs=)
2: MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl (hash: Rrj7mnq7wMu3BseZTpX3GvWyCr91IZUNWcLnE8WFdpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:a1:63:b3:b9:4f:4f:64:e7:e4:6e:ca:e0:f1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c2be483ff27bb8f0dc09ce0f71f2a88eaf7e07
Validity
Not Before: Aug 23 06:00:30 2025 GMT
Not After : Aug 24 06:00:30 2025 GMT
Subject: CN=0d6d284ab45692c872d71a0f15ee7000341d364a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a8:c0:70:41:96:d0:9f:ac:f9:b7:4b:dd:7e:
04:a4:17:1e:ff:25:ba:c4:52:cc:4e:56:c3:e3:da:
6d:83:8c:27:76:77:48:ec:c6:85:b2:fe:2f:d6:7f:
50:45:83:ef:ef:7f:92:3b:14:27:ee:df:c4:69:d2:
c0:60:d4:a6:ad:3f:a8:be:7d:c7:b7:e9:42:68:ec:
38:24:31:76:ac:8c:88:1d:1c:87:36:ad:f3:dd:0f:
3c:b7:0e:5c:6f:82:dc:81:08:32:b1:8e:32:b9:43:
97:47:4a:a0:22:4a:94:95:ea:6e:9c:7f:2a:44:c9:
00:fb:d1:8f:5c:3f:f3:c1:09:70:4e:77:29:19:95:
00:95:68:3b:fd:b8:18:53:60:6b:2a:be:aa:0c:57:
e5:e9:1a:8c:84:fa:56:b1:36:8e:05:90:0c:bf:28:
13:62:d1:e0:bd:e5:1d:0f:1c:10:46:44:29:3f:b0:
19:91:86:63:09:19:db:35:4b:ad:bb:c9:3a:a3:60:
e2:1b:bb:70:6c:54:7c:d8:c0:49:28:70:c3:32:9f:
89:55:bb:7a:86:0d:06:c0:b0:af:fa:02:25:6b:d3:
d3:de:df:ef:06:f8:66:13:46:9a:3b:02:06:9d:98:
cc:a1:67:b2:b3:0c:7f:55:ac:64:17:f4:26:0b:92:
8c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6D:28:4A:B4:56:92:C8:72:D7:1A:0F:15:EE:70:00:34:1D:36:4A
X509v3 Authority Key Identifier:
keyid:32:C2:BE:48:3F:F2:7B:B8:F0:DC:09:CE:0F:71:F2:A8:8E:AF:7E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:88:9e:52:e6:f8:38:c0:7a:0d:83:6c:af:b5:3f:84:0c:0f:
ad:66:92:cf:32:0d:23:c8:32:92:25:ed:d7:09:0a:1a:e5:6a:
24:85:bd:18:54:19:7d:2a:e1:1e:d3:a8:66:4f:68:98:35:00:
93:b5:ed:8f:4f:17:74:cc:aa:8c:65:ac:4e:cd:47:1d:fb:07:
a0:26:68:19:64:2e:e7:2d:54:d2:b4:c2:e9:1c:e1:23:ac:c9:
d1:b7:49:3e:4f:09:b7:5b:cf:72:39:76:02:c1:3b:ec:aa:5c:
58:7e:c7:65:c6:cc:47:8e:17:fe:17:cb:e5:4e:7b:f0:29:b8:
ab:fa:1b:6a:e3:77:28:92:06:05:f6:d8:9d:70:39:f6:ec:f7:
ea:b2:f5:02:67:75:26:57:82:94:fd:54:72:39:18:72:9c:e9:
e6:9b:82:21:0d:21:3f:99:18:75:b1:27:02:93:0d:1c:9c:6a:
e8:a6:bf:99:9b:ee:86:b0:3c:b2:f5:b6:39:d1:3d:35:e4:a5:
b8:29:bb:30:11:52:cc:23:a7:59:29:95:ca:e4:fa:13:e9:a6:
51:93:bf:f5:9e:66:a3:16:c9:d9:2e:11:44:9a:2e:71:e4:5f:
fd:93:16:52:83:1d:af:e1:11:ff:90:47:21:f9:cf:88:b8:c3:
50:99:c6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:21 2025 by rpki-client