Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft
File: mSAfYJ56iT2obPDrvKS79HJ51hc.mft (raw, json)
Hash identifier: OOgT8s76LmgALwTBwDz82DWRDX41B2ImsEtE4vDKb7w=
Subject key identifier: 21:07:83:26:0C:33:95:93:DB:8F:B2:7A:70:28:68:A0:03:0A:39:25
Authority key identifier: 99:20:1F:60:9E:7A:89:3D:A8:6C:F0:EB:BC:A4:BB:F4:72:79:D6:17
Certificate issuer: /CN=99201f609e7a893da86cf0ebbca4bbf47279d617
Certificate serial: 0198D7A94C9A57659303E30B991A7B5EC16C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft
Manifest number: 04E2
Signing time: Sat 23 Aug 2025 16:00:52 +0000
Manifest this update: Sat 23 Aug 2025 16:00:52 +0000
Manifest next update: Sun 24 Aug 2025 16:00:52 +0000
Files and hashes: 1: 1tSheZow3C5eA6jOu_MWtrfHmEY.roa (hash: KFhShtQvmMD0Mr4HPxFeWZgSKSgyixhc5C8a67+FVZE=)
2: mSAfYJ56iT2obPDrvKS79HJ51hc.crl (hash: ko7kIr8IVCAtV/H92lEHgt4DYNivJc6Bo8WRRnYdv9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:4c:9a:57:65:93:03:e3:0b:99:1a:7b:5e:c1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99201f609e7a893da86cf0ebbca4bbf47279d617
Validity
Not Before: Aug 23 16:00:52 2025 GMT
Not After : Aug 24 16:00:52 2025 GMT
Subject: CN=210783260c339593db8fb27a702868a0030a3925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:13:84:54:8d:ed:44:3a:14:44:9d:51:e0:d6:
99:34:d3:e6:b4:a9:6b:e7:c8:50:31:83:e9:09:bc:
95:f9:33:11:85:49:a9:31:c5:34:c7:e2:44:32:e4:
4e:c4:a9:34:9a:c5:53:da:73:ff:8e:ee:c7:ec:b0:
bd:60:75:e7:8e:19:d8:6a:3b:8a:9c:6b:f1:8b:7e:
2a:c1:68:bc:b4:e4:e4:8d:b2:86:d9:dc:57:eb:1f:
db:f9:1f:77:c4:11:ea:44:7f:50:ed:a6:53:60:94:
37:c6:b5:d7:9b:73:b0:b3:1f:ed:82:25:8a:41:24:
6a:8c:5a:d6:7f:d9:1d:1d:d7:ce:76:fe:23:29:45:
f2:41:40:1e:fc:24:e1:22:68:23:ce:a4:be:c7:04:
dc:be:b6:8b:74:87:9c:f8:62:1e:db:81:fc:bc:aa:
29:2e:ef:5a:0e:3f:a7:34:3e:ec:e4:99:e2:66:c7:
48:e5:c4:85:9d:98:fb:25:6f:35:2d:ef:c2:a2:b5:
93:6e:8d:71:76:9d:e9:04:d2:a4:d3:7a:ce:e4:1b:
08:c8:71:06:77:02:14:41:68:97:ce:51:7b:0c:f0:
4d:77:78:5d:44:19:5c:ef:7e:05:a5:6b:73:ef:d2:
9f:5d:f4:b7:15:2b:12:54:f6:95:87:79:ad:e4:4b:
7a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:07:83:26:0C:33:95:93:DB:8F:B2:7A:70:28:68:A0:03:0A:39:25
X509v3 Authority Key Identifier:
keyid:99:20:1F:60:9E:7A:89:3D:A8:6C:F0:EB:BC:A4:BB:F4:72:79:D6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3a:5a:6c:06:13:0f:fb:5a:36:15:80:0c:bf:06:b0:f5:84:
b0:20:78:9d:92:37:87:27:30:5d:b5:cb:99:3a:e8:78:d1:3e:
0b:fd:ad:24:59:87:bc:87:51:3c:72:a8:fa:7b:9e:9a:5c:5e:
6f:a7:31:05:50:1d:8d:13:e9:9d:93:1e:26:5a:81:f5:43:73:
ae:6e:7a:7d:65:b2:8c:bf:0d:25:81:41:82:e7:ee:43:6a:6f:
01:19:88:30:56:e5:d0:c5:1b:0b:49:eb:78:07:de:4b:31:71:
71:fa:10:6c:2f:49:5f:1f:4d:ab:7b:8c:a6:d9:3e:a2:96:43:
ba:c8:71:26:1d:54:9c:f7:ed:d6:29:00:6d:7b:27:93:88:9d:
00:5f:0a:b9:ae:4a:1c:11:78:10:60:f2:a7:fb:6b:1b:6d:fe:
d3:8b:4d:1e:ce:ba:6f:50:99:98:76:4d:a8:a7:3a:1f:66:76:
64:83:55:10:3f:bd:ec:34:b8:8a:4a:2a:46:a2:2f:fd:da:2a:
4c:fb:b7:fa:fb:4a:e3:69:9b:5c:9c:54:ac:0b:ff:fb:e4:32:
21:3a:3a:21:b3:b7:a5:f9:47:7a:b0:d9:eb:54:5b:cb:38:79:
18:a2:db:8b:a4:2c:f9:34:2e:4e:75:41:c9:27:50:7e:69:ec:
0a:74:89:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqUyaV2WTA+MLmRp7XsFsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MjAxZjYwOWU3YTg5M2RhODZjZjBlYmJjYTRiYmY0NzI3
OWQ2MTcwHhcNMjUwODIzMTYwMDUyWhcNMjUwODI0MTYwMDUyWjAzMTEwLwYDVQQD
EygyMTA3ODMyNjBjMzM5NTkzZGI4ZmIyN2E3MDI4NjhhMDAzMGEzOTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjROEVI3tRDoURJ1R4NaZNNPmtKlr
58hQMYPpCbyV+TMRhUmpMcU0x+JEMuROxKk0msVT2nP/ju7H7LC9YHXnjhnYajuK
nGvxi34qwWi8tOTkjbKG2dxX6x/b+R93xBHqRH9Q7aZTYJQ3xrXXm3Owsx/tgiWK
QSRqjFrWf9kdHdfOdv4jKUXyQUAe/CThImgjzqS+xwTcvraLdIec+GIe24H8vKop
Lu9aDj+nND7s5JniZsdI5cSFnZj7JW81Le/CorWTbo1xdp3pBNKk03rO5BsIyHEG
dwIUQWiXzlF7DPBNd3hdRBlc734FpWtz79KfXfS3FSsSVPaVh3mt5Et6BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEHgyYMM5WT24+yenAoaKADCjklMB8GA1UdIwQY
MBaAFJkgH2Ceeok9qGzw67yku/RyedYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVNBZllKNTZpVDJvYlBEcnZLUzc5SEo1MWhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82NTM2ZjktODdkZC00ZWRkLWIwMWMt
YjIzMTcyZWI4MWZiLzEvbVNBZllKNTZpVDJvYlBEcnZLUzc5SEo1MWhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni82NTM2ZjktODdkZC00ZWRkLWIwMWMtYjIzMTcyZWI4MWZi
LzEvbVNBZllKNTZpVDJvYlBEcnZLUzc5SEo1MWhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWzpabAYT
D/taNhWADL8GsPWEsCB4nZI3hycwXbXLmTroeNE+C/2tJFmHvIdRPHKo+nuemlxe
b6cxBVAdjRPpnZMeJlqB9UNzrm56fWWyjL8NJYFBgufuQ2pvARmIMFbl0MUbC0nr
eAfeSzFxcfoQbC9JXx9Nq3uMptk+opZDushxJh1UnPft1ikAbXsnk4idAF8Kua5K
HBF4EGDyp/trG23+04tNHs66b1CZmHZNqKc6H2Z2ZINVED+97DS4ikoqRqIv/doq
TPu3+vtK42mbXJxUrAv/++QyITo6IbO3pflHerDZ61Rbyzh5GKLbi6Qs+TQuTnVB
ySdQfmnsCnSJDg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:32:27 2025 by rpki-client