Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
File: MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft (raw, json)
Hash identifier: lfMJi1ruAUZ+rwHCJj8igAVmD7VpoxUD+tpZKyq7FnQ=
Subject key identifier: 18:0C:B1:5F:5F:F0:2E:35:AF:3D:08:37:26:8E:D0:02:F9:0C:50:CE
Authority key identifier: 32:C2:BE:48:3F:F2:7B:B8:F0:DC:09:CE:0F:71:F2:A8:8E:AF:7E:07
Certificate issuer: /CN=32c2be483ff27bb8f0dc09ce0f71f2a88eaf7e07
Certificate serial: 0197B7B3857EE3291EDFA1FA11F904CB06D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 18:01:24 +0000
Manifest this update: Sat 28 Jun 2025 18:01:24 +0000
Manifest next update: Sun 29 Jun 2025 18:01:24 +0000
Files and hashes: 1: 3Ld3_xMK0PlfZFY-qBwXca5iVGM.roa (hash: CjU6hi/Jh6Zo5sGQ2UDjZfEn9Czpv8lCLYgvh/6NOKs=)
2: MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl (hash: 88uDGPfyDbobn99dYgrXkYM7Z8bOSWg87NXZffUimbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:85:7e:e3:29:1e:df:a1:fa:11:f9:04:cb:06:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c2be483ff27bb8f0dc09ce0f71f2a88eaf7e07
Validity
Not Before: Jun 28 18:01:24 2025 GMT
Not After : Jun 29 18:01:24 2025 GMT
Subject: CN=180cb15f5ff02e35af3d0837268ed002f90c50ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1c:a4:b6:e9:0c:1a:2d:10:57:db:fe:2c:1d:
88:5e:e3:0e:3f:de:ff:1b:cd:e2:64:16:6d:c5:a5:
73:77:b1:82:98:fb:a3:89:b1:92:f3:7d:f3:cc:c7:
08:67:c7:fa:3b:a7:e1:8c:9d:72:b8:df:92:85:a8:
a1:5b:69:27:e8:d5:e5:73:4b:6a:cb:d7:b1:f9:04:
39:9c:15:ab:f9:71:78:a4:65:2b:66:25:d4:db:c6:
13:f3:fd:44:24:68:e7:8b:85:41:12:a7:a4:40:5b:
46:96:17:29:c6:3e:5a:58:4e:2f:62:da:1c:4f:40:
72:66:a5:05:ac:6a:dc:af:49:29:0f:1d:9e:78:da:
e8:2d:9e:81:34:e5:43:bd:21:bb:d7:fa:b9:e6:b3:
97:4a:b4:62:b9:2e:7e:8f:01:f0:44:59:ac:ec:d3:
d7:24:ee:55:a1:ee:48:73:17:4e:ce:d3:13:54:5f:
f4:9d:5c:d9:c1:40:ad:23:9e:5c:88:c9:4d:40:94:
cc:30:36:98:97:2f:73:b1:43:3c:c9:ed:e8:ca:79:
b6:54:21:c0:9c:10:b9:04:9e:da:70:91:e6:dd:7a:
a6:d5:8a:d4:f2:26:36:a5:71:e1:f1:9d:0e:c0:44:
cb:ec:80:0a:de:e9:e2:6f:ca:f5:0d:f4:5f:cf:b5:
0c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0C:B1:5F:5F:F0:2E:35:AF:3D:08:37:26:8E:D0:02:F9:0C:50:CE
X509v3 Authority Key Identifier:
keyid:32:C2:BE:48:3F:F2:7B:B8:F0:DC:09:CE:0F:71:F2:A8:8E:AF:7E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9b:ea:c1:fb:b3:30:02:39:ec:72:28:de:90:d0:15:71:b6:
31:40:da:9e:af:96:5d:53:5e:a2:74:dc:d4:e6:43:51:b8:b4:
4d:b1:2b:1e:92:ed:f1:28:78:1d:69:31:2e:3b:23:0b:28:04:
9b:ea:b3:95:3a:48:d7:8e:f1:c1:23:b1:30:b9:ec:31:64:f8:
fd:1b:9a:79:e0:16:6b:64:4f:9f:60:c0:a2:16:72:94:fd:19:
81:33:ec:53:36:7d:a4:1d:f9:be:d5:fa:ba:b9:c6:13:a8:2b:
e0:f8:df:da:79:f0:fc:3d:b6:38:dd:52:e8:0e:55:d3:b5:c9:
e1:d1:61:80:92:88:0e:9a:08:67:1d:bb:04:7b:a5:b6:d6:02:
d5:9d:e4:01:0e:31:68:9e:00:05:60:33:0a:11:7c:10:ae:21:
ab:4c:70:d5:00:61:1c:af:dc:94:ca:68:16:15:62:c8:ef:b2:
69:3f:54:b7:e2:4a:37:9d:a3:12:72:14:12:de:52:c5:2a:7a:
5c:71:5c:31:29:00:d4:95:1c:a8:af:18:41:eb:da:52:2f:64:
fc:02:48:da:8e:22:e7:f7:0e:f0:b7:77:40:58:b6:92:71:5e:
7a:53:9e:2e:07:a8:05:eb:23:d2:aa:82:26:f2:5e:ab:29:eb:
e9:20:a1:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s4V+4yke36H6EfkEywbTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYzJiZTQ4M2ZmMjdiYjhmMGRjMDljZTBmNzFmMmE4OGVh
ZjdlMDcwHhcNMjUwNjI4MTgwMTI0WhcNMjUwNjI5MTgwMTI0WjAzMTEwLwYDVQQD
EygxODBjYjE1ZjVmZjAyZTM1YWYzZDA4MzcyNjhlZDAwMmY5MGM1MGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhyktukMGi0QV9v+LB2IXuMOP97/
G83iZBZtxaVzd7GCmPujibGS833zzMcIZ8f6O6fhjJ1yuN+ShaihW2kn6NXlc0tq
y9ex+QQ5nBWr+XF4pGUrZiXU28YT8/1EJGjni4VBEqekQFtGlhcpxj5aWE4vYtoc
T0ByZqUFrGrcr0kpDx2eeNroLZ6BNOVDvSG71/q55rOXSrRiuS5+jwHwRFms7NPX
JO5Voe5IcxdOztMTVF/0nVzZwUCtI55ciMlNQJTMMDaYly9zsUM8ye3oynm2VCHA
nBC5BJ7acJHm3Xqm1YrU8iY2pXHh8Z0OwETL7IAK3unib8r1DfRfz7UMfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgMsV9f8C41rz0INyaO0AL5DFDOMB8GA1UdIwQY
MBaAFDLCvkg/8nu48NwJzg9x8qiOr34HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXNLLVNEX3llN2p3M0FuT0QzSHlxSTZ2ZmdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mZjAwYzQtYjcyOC00NGEwLTk2MmQt
OTczZGI5Y2U2OGI1LzEvTXNLLVNEX3llN2p3M0FuT0QzSHlxSTZ2ZmdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9mZjAwYzQtYjcyOC00NGEwLTk2MmQtOTczZGI5Y2U2OGI1
LzEvTXNLLVNEX3llN2p3M0FuT0QzSHlxSTZ2ZmdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN5vqwfuz
MAI57HIo3pDQFXG2MUDanq+WXVNeonTc1OZDUbi0TbErHpLt8Sh4HWkxLjsjCygE
m+qzlTpI147xwSOxMLnsMWT4/RuaeeAWa2RPn2DAohZylP0ZgTPsUzZ9pB35vtX6
urnGE6gr4Pjf2nnw/D22ON1S6A5V07XJ4dFhgJKIDpoIZx27BHulttYC1Z3kAQ4x
aJ4ABWAzChF8EK4hq0xw1QBhHK/clMpoFhViyO+yaT9Ut+JKN52jEnIUEt5SxSp6
XHFcMSkA1JUcqK8YQevaUi9k/AJI2o4i5/cO8Ld3QFi2knFeelOeLgeoBesj0qqC
JvJeqynr6SChEA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:38 2025 by rpki-client