Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
File: mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft (raw, json)
Hash identifier: SOxJkiFA6Mq6DmHlhkVGUgJAzPpPLJFDHYN/HLj7T7A=
Subject key identifier: C7:5F:F8:F7:8A:A9:C5:B0:41:8D:73:46:D2:57:23:19:64:34:4B:32
Authority key identifier: 99:28:B8:12:E2:E9:F4:72:EE:C7:D2:33:F6:04:AF:26:3E:85:0F:31
Certificate issuer: /CN=9928b812e2e9f472eec7d233f604af263e850f31
Certificate serial: 0198D660BB1BB9BF7D1EFA967E6A4ED5EA8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
Manifest number: 0B82
Signing time: Sat 23 Aug 2025 10:02:00 +0000
Manifest this update: Sat 23 Aug 2025 10:02:00 +0000
Manifest next update: Sun 24 Aug 2025 10:02:00 +0000
Files and hashes: 1: mSi4EuLp9HLux9Iz9gSvJj6FDzE.crl (hash: 1KwvgIPW9nxHUuJDYipiW62BEEGYZLLbtwsU1QsvTwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:bb:1b:b9:bf:7d:1e:fa:96:7e:6a:4e:d5:ea:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9928b812e2e9f472eec7d233f604af263e850f31
Validity
Not Before: Aug 23 10:02:00 2025 GMT
Not After : Aug 24 10:02:00 2025 GMT
Subject: CN=c75ff8f78aa9c5b0418d7346d257231964344b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:67:21:6b:87:c6:d5:52:69:e1:94:26:4a:01:
62:19:1a:94:f4:5e:db:0a:2b:bf:38:d5:17:10:8e:
a8:fa:cf:1f:03:47:27:08:ee:f8:1d:f7:8c:c8:f6:
c8:04:72:58:80:90:29:19:d8:09:02:64:24:f1:71:
7f:95:74:80:d0:b2:37:85:5f:12:27:6d:37:84:ab:
bf:b8:30:5f:cf:1f:ad:99:6c:2b:f0:98:40:64:92:
03:de:c7:e4:e5:e1:39:58:61:39:7f:a8:d8:d3:59:
63:e6:3c:56:5b:62:6f:d8:9f:02:af:d1:68:83:a1:
de:3c:6b:69:3b:31:a7:3c:ab:1c:05:72:f3:5b:24:
d5:23:9f:28:fa:f7:66:fa:c8:09:c9:32:4d:45:be:
8b:27:53:c6:70:17:95:de:90:f6:a7:38:dc:8b:2f:
56:10:4c:21:df:85:a8:33:ed:ec:49:d8:7f:9f:60:
1a:87:9d:90:0b:48:d2:80:c4:0a:94:58:70:6e:2a:
48:5f:21:3e:84:14:61:a0:da:b0:88:63:13:b2:6d:
cc:1a:11:7c:e9:64:3a:b0:aa:3e:65:76:6a:36:6d:
72:3b:9f:5c:27:3b:fc:d6:f2:04:ce:a6:39:38:83:
df:36:59:72:b9:8a:10:f6:98:21:1a:66:78:be:ec:
81:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5F:F8:F7:8A:A9:C5:B0:41:8D:73:46:D2:57:23:19:64:34:4B:32
X509v3 Authority Key Identifier:
keyid:99:28:B8:12:E2:E9:F4:72:EE:C7:D2:33:F6:04:AF:26:3E:85:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:77:4d:c4:7f:86:61:6d:f2:2f:06:a6:26:e0:b0:eb:01:77:
ef:b8:59:20:7b:d5:7b:85:0c:14:68:df:55:c8:b9:b0:79:46:
d1:ae:45:e8:42:ab:c8:6d:d6:5f:83:85:55:be:83:53:43:9e:
fd:a0:14:f5:61:c7:bd:03:12:0a:5f:fb:96:5d:f9:38:3d:27:
a0:fc:a8:15:3f:2f:9a:2d:1c:bd:24:99:73:79:a2:2c:f4:16:
ca:d1:04:fe:d0:d0:81:c7:e7:e1:81:ac:f7:5a:f6:30:ca:8f:
12:10:fb:fa:25:e3:d1:e9:a1:5d:47:88:f9:11:8f:cf:19:cd:
14:dd:c0:67:3a:c3:6a:af:47:83:a8:1a:00:9d:9b:dd:56:3c:
ec:76:97:c9:05:89:3c:ce:61:1f:67:51:c5:8c:f3:cc:de:dd:
bc:27:d9:fd:ad:77:ba:37:9e:d8:73:7e:f9:60:6a:0f:5b:f9:
01:ba:5e:a8:d3:7e:b7:e0:a4:14:f7:0b:17:57:80:cb:ba:60:
ca:1a:08:0e:3b:6d:cb:38:16:38:cf:8b:5b:de:ec:f4:09:32:
e6:39:1f:cf:cb:ba:87:c7:62:4a:41:ef:3a:c7:b3:e5:b2:26:
2f:d8:9f:f6:c4:1a:33:17:c8:b9:49:28:44:53:d0:61:92:e1:
99:ef:ac:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYLsbub99HvqWfmpO1eqNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MjhiODEyZTJlOWY0NzJlZWM3ZDIzM2Y2MDRhZjI2M2U4
NTBmMzEwHhcNMjUwODIzMTAwMjAwWhcNMjUwODI0MTAwMjAwWjAzMTEwLwYDVQQD
EyhjNzVmZjhmNzhhYTljNWIwNDE4ZDczNDZkMjU3MjMxOTY0MzQ0YjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGcha4fG1VJp4ZQmSgFiGRqU9F7b
Ciu/ONUXEI6o+s8fA0cnCO74HfeMyPbIBHJYgJApGdgJAmQk8XF/lXSA0LI3hV8S
J203hKu/uDBfzx+tmWwr8JhAZJID3sfk5eE5WGE5f6jY01lj5jxWW2Jv2J8Cr9Fo
g6HePGtpOzGnPKscBXLzWyTVI58o+vdm+sgJyTJNRb6LJ1PGcBeV3pD2pzjciy9W
EEwh34WoM+3sSdh/n2Aah52QC0jSgMQKlFhwbipIXyE+hBRhoNqwiGMTsm3MGhF8
6WQ6sKo+ZXZqNm1yO59cJzv81vIEzqY5OIPfNllyuYoQ9pghGmZ4vuyBMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMdf+PeKqcWwQY1zRtJXIxlkNEsyMB8GA1UdIwQY
MBaAFJkouBLi6fRy7sfSM/YEryY+hQ8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVNpNEV1THA5SEx1eDlJejlnU3ZKajZGRHpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8yZDk5MjktNGVmZi00Nzk4LWE1Mzgt
YzAxOGJkN2VkNDgwLzEvbVNpNEV1THA5SEx1eDlJejlnU3ZKajZGRHpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8yZDk5MjktNGVmZi00Nzk4LWE1MzgtYzAxOGJkN2VkNDgw
LzEvbVNpNEV1THA5SEx1eDlJejlnU3ZKajZGRHpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARndNxH+G
YW3yLwamJuCw6wF377hZIHvVe4UMFGjfVci5sHlG0a5F6EKryG3WX4OFVb6DU0Oe
/aAU9WHHvQMSCl/7ll35OD0noPyoFT8vmi0cvSSZc3miLPQWytEE/tDQgcfn4YGs
91r2MMqPEhD7+iXj0emhXUeI+RGPzxnNFN3AZzrDaq9Hg6gaAJ2b3VY87HaXyQWJ
PM5hH2dRxYzzzN7dvCfZ/a13ujee2HN++WBqD1v5AbpeqNN+t+CkFPcLF1eAy7pg
yhoIDjttyzgWOM+LW97s9Aky5jkfz8u6h8diSkHvOsez5bImL9if9sQaMxfIuUko
RFPQYZLhme+scQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:37:43 2025 by rpki-client