Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft
File: mSAfYJ56iT2obPDrvKS79HJ51hc.mft (raw, json)
Hash identifier: GuPuj7KbZALaKC46nmm/Oo19lpiZUBQRCYGVpOzioy8=
Subject key identifier: 22:B0:8E:D1:B0:B1:CB:8D:D2:F9:E2:86:74:31:3E:B8:22:3F:16:D8
Authority key identifier: 99:20:1F:60:9E:7A:89:3D:A8:6C:F0:EB:BC:A4:BB:F4:72:79:D6:17
Certificate issuer: /CN=99201f609e7a893da86cf0ebbca4bbf47279d617
Certificate serial: 0199FB0EDEB1B5A011FA23CD90CF5621AA35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft
Manifest number: 057C
Signing time: Sun 19 Oct 2025 06:01:19 +0000
Manifest this update: Sun 19 Oct 2025 06:01:19 +0000
Manifest next update: Mon 20 Oct 2025 06:01:19 +0000
Files and hashes: 1: cZCe7z1SuEJO9uo7pUfRsMk3zUE.roa (hash: 4ghpEp3he5IP2eaKj/sfWjxMV98wRylBMDqZHenZGeE=)
2: mSAfYJ56iT2obPDrvKS79HJ51hc.crl (hash: O1ahw0b+PxuhYjV2Amp3zbZNqZzaAaYOdMHLXehzZeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:de:b1:b5:a0:11:fa:23:cd:90:cf:56:21:aa:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99201f609e7a893da86cf0ebbca4bbf47279d617
Validity
Not Before: Oct 19 06:01:19 2025 GMT
Not After : Oct 20 06:01:19 2025 GMT
Subject: CN=22b08ed1b0b1cb8dd2f9e28674313eb8223f16d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:26:79:62:08:6d:ef:af:b9:59:47:d2:ba:54:
08:80:5b:47:e8:97:0e:65:67:a7:b6:db:82:c8:f2:
9c:93:5a:87:1a:ed:31:77:28:76:17:3a:06:96:ba:
cb:00:e4:3e:64:c1:f8:b0:12:24:ba:52:56:44:8b:
88:32:ca:e9:8e:38:ad:7e:72:bf:5c:47:f0:d8:c3:
30:65:62:45:5c:25:fc:25:9a:df:7c:0d:b0:8f:7c:
66:c9:90:60:3c:c8:bf:0c:0e:71:17:0e:4a:ba:41:
88:16:e8:4f:20:05:8f:3d:64:1e:18:aa:56:a0:b5:
ac:1e:df:a9:6c:af:54:28:fd:aa:11:65:e6:60:1d:
ad:51:ca:53:a6:e8:51:73:00:d4:c5:13:31:85:ee:
31:5d:4c:31:9c:d5:bd:f0:f3:c5:14:c0:d5:17:7f:
0e:64:da:17:0c:f6:1a:1c:4e:49:4d:4e:ff:71:45:
6c:be:75:7d:2c:24:9c:12:e2:1b:72:1c:cd:bd:a4:
18:b6:2f:7c:a2:27:9b:24:8e:ab:1b:d8:a0:7d:df:
20:e1:fd:0e:91:dc:01:58:d2:c4:12:e6:89:18:99:
fd:65:a4:8b:28:3d:ae:a9:9b:e1:a7:43:fa:d7:63:
27:59:49:5a:12:90:64:1c:06:28:23:cd:da:58:fd:
0d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B0:8E:D1:B0:B1:CB:8D:D2:F9:E2:86:74:31:3E:B8:22:3F:16:D8
X509v3 Authority Key Identifier:
keyid:99:20:1F:60:9E:7A:89:3D:A8:6C:F0:EB:BC:A4:BB:F4:72:79:D6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:23:07:15:8e:77:64:1c:ba:54:88:50:5c:e0:52:44:fe:73:
8e:e6:aa:b8:6b:72:45:3e:42:5c:c9:0a:ec:a8:00:35:9e:61:
cc:bc:5a:27:f9:fd:2c:18:e0:7a:68:13:b9:3f:61:ec:73:97:
81:43:97:fa:50:35:64:a8:7f:1d:4c:03:b6:73:6c:60:d1:db:
95:be:7e:37:9b:b1:aa:51:dc:f1:52:76:fa:47:0a:67:bd:ab:
8b:95:7a:cd:6c:0a:4a:ac:27:6d:50:b0:e5:0c:2a:79:99:a1:
76:aa:26:3d:40:9b:ba:e5:32:7c:5c:0c:2c:43:44:4e:e4:47:
6a:2d:bd:cc:9c:80:56:05:4e:60:ba:59:48:c6:bb:74:42:62:
8f:ac:9f:bd:ea:f9:65:a2:9c:5d:4d:42:98:fa:4f:4b:84:3f:
6c:a3:e4:59:12:22:f1:af:78:3e:24:11:e2:ae:74:91:9b:fa:
b6:a1:30:0b:f1:4d:9d:82:a5:69:a0:6e:8d:6e:08:4f:a1:97:
ec:b3:65:28:75:92:df:68:59:47:4d:77:f7:04:24:e3:c8:55:
72:aa:4d:03:63:9e:30:7d:fd:22:3a:23:9f:a0:67:14:80:30:
25:46:74:f4:81:2c:f6:e4:0b:78:94:81:40:e5:4e:2d:a4:12:
fe:e2:65:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Dt6xtaAR+iPNkM9WIao1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MjAxZjYwOWU3YTg5M2RhODZjZjBlYmJjYTRiYmY0NzI3
OWQ2MTcwHhcNMjUxMDE5MDYwMTE5WhcNMjUxMDIwMDYwMTE5WjAzMTEwLwYDVQQD
EygyMmIwOGVkMWIwYjFjYjhkZDJmOWUyODY3NDMxM2ViODIyM2YxNmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSZ5Yght76+5WUfSulQIgFtH6JcO
ZWenttuCyPKck1qHGu0xdyh2FzoGlrrLAOQ+ZMH4sBIkulJWRIuIMsrpjjitfnK/
XEfw2MMwZWJFXCX8JZrffA2wj3xmyZBgPMi/DA5xFw5KukGIFuhPIAWPPWQeGKpW
oLWsHt+pbK9UKP2qEWXmYB2tUcpTpuhRcwDUxRMxhe4xXUwxnNW98PPFFMDVF38O
ZNoXDPYaHE5JTU7/cUVsvnV9LCScEuIbchzNvaQYti98oiebJI6rG9igfd8g4f0O
kdwBWNLEEuaJGJn9ZaSLKD2uqZvhp0P612MnWUlaEpBkHAYoI83aWP0N9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKwjtGwscuN0vnihnQxPrgiPxbYMB8GA1UdIwQY
MBaAFJkgH2Ceeok9qGzw67yku/RyedYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVNBZllKNTZpVDJvYlBEcnZLUzc5SEo1MWhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82NTM2ZjktODdkZC00ZWRkLWIwMWMt
YjIzMTcyZWI4MWZiLzEvbVNBZllKNTZpVDJvYlBEcnZLUzc5SEo1MWhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni82NTM2ZjktODdkZC00ZWRkLWIwMWMtYjIzMTcyZWI4MWZi
LzEvbVNBZllKNTZpVDJvYlBEcnZLUzc5SEo1MWhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCMHFY53
ZBy6VIhQXOBSRP5zjuaquGtyRT5CXMkK7KgANZ5hzLxaJ/n9LBjgemgTuT9h7HOX
gUOX+lA1ZKh/HUwDtnNsYNHblb5+N5uxqlHc8VJ2+kcKZ72ri5V6zWwKSqwnbVCw
5QwqeZmhdqomPUCbuuUyfFwMLENETuRHai29zJyAVgVOYLpZSMa7dEJij6yfver5
ZaKcXU1CmPpPS4Q/bKPkWRIi8a94PiQR4q50kZv6tqEwC/FNnYKlaaBujW4IT6GX
7LNlKHWS32hZR0139wQk48hVcqpNA2OeMH39Ijojn6BnFIAwJUZ09IEs9uQLeJSB
QOVOLaQS/uJl9g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:31 2025 by rpki-client