
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
File: MsAnS8F_nHXNP8EPi1gloZOCq08.mft (raw, json)
Hash identifier: 5f/cnU7u2YaVNb8P9P59j/O6ghYRyZXpFOCOI8MorFE=
Subject key identifier: 76:C0:9D:6A:9D:22:A6:BF:09:FF:D1:EE:67:BF:43:3D:6D:5A:2C:6F
Authority key identifier: 32:C0:27:4B:C1:7F:9C:75:CD:3F:C1:0F:8B:58:25:A1:93:82:AB:4F
Certificate issuer: /CN=32c0274bc17f9c75cd3fc10f8b5825a19382ab4f
Certificate serial: 019A0148118D85136565CDB1BAB93A3F7D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 11:01:31 +0000
Manifest this update: Mon 20 Oct 2025 11:01:31 +0000
Manifest next update: Tue 21 Oct 2025 11:01:31 +0000
Files and hashes: 1: MsAnS8F_nHXNP8EPi1gloZOCq08.crl (hash: ktD9OEwlvAMoI5ulI1Q15zK7GUNXLvgc4dol5pmzA5Q=)
2: TOIzNWX91Fklg3hNSjJLHCHMbgY.roa (hash: vI/ydx27fqpwXcKYk7mipA2wZEP7zEBHHuwYkt7nRa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:48:11:8d:85:13:65:65:cd:b1:ba:b9:3a:3f:7d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c0274bc17f9c75cd3fc10f8b5825a19382ab4f
Validity
Not Before: Oct 20 11:01:31 2025 GMT
Not After : Oct 21 11:01:31 2025 GMT
Subject: CN=76c09d6a9d22a6bf09ffd1ee67bf433d6d5a2c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:06:66:34:7c:77:90:75:3b:8d:cb:3d:23:09:
85:05:25:59:1f:bb:07:e6:0e:7b:d7:5f:24:67:fe:
47:bb:2c:67:da:0a:ca:01:83:a1:62:85:4c:35:07:
33:ef:f7:22:2c:ea:33:47:ed:03:12:d4:c7:ab:b4:
6a:06:40:c8:b6:dd:e0:78:06:4b:9b:a0:88:bc:53:
83:d4:36:75:ea:af:cf:38:4a:91:68:b3:a6:3e:ef:
c0:fb:2a:bb:17:69:10:46:55:ee:14:41:95:26:6c:
63:8b:ba:3b:65:50:89:1d:28:27:d4:3f:28:99:ec:
ad:a9:ba:75:1d:cb:a4:a8:21:25:a9:31:86:4d:46:
1a:a5:a7:a6:c0:a2:53:2a:aa:5e:25:10:fd:14:4a:
4d:16:99:98:85:f0:43:7d:ad:96:cd:b1:c7:f5:98:
a3:8b:03:72:ab:19:e8:45:83:dc:79:12:94:c8:cc:
98:13:ab:27:dc:0a:15:e4:8d:a2:60:79:87:19:94:
de:8b:76:bc:99:eb:54:64:b1:1e:27:28:eb:ad:13:
19:5a:45:60:0f:51:43:90:90:c3:8b:01:c9:1e:a4:
79:17:ea:f6:f0:e5:7d:21:99:1f:72:39:a4:dd:ea:
49:7e:35:29:96:fb:80:59:67:3b:3d:96:c2:13:3a:
3f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C0:9D:6A:9D:22:A6:BF:09:FF:D1:EE:67:BF:43:3D:6D:5A:2C:6F
X509v3 Authority Key Identifier:
keyid:32:C0:27:4B:C1:7F:9C:75:CD:3F:C1:0F:8B:58:25:A1:93:82:AB:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:80:67:a2:91:ff:3d:6e:db:94:ba:8e:c7:b6:75:3e:2f:4e:
ca:89:6d:df:f2:c0:8d:97:15:bc:eb:56:6a:e6:00:86:17:d5:
4c:3a:23:f6:ad:e5:14:b2:eb:84:01:c8:5c:50:f1:0d:35:5c:
0d:65:4f:26:5b:55:e4:c7:3f:95:ab:dd:c9:9c:55:d8:45:0f:
23:4a:16:61:3d:75:eb:4f:a6:81:ea:d6:6c:51:8e:08:24:aa:
19:75:87:c1:6c:38:a2:26:21:87:28:58:bb:5d:1d:c0:8a:28:
15:1c:bf:7e:77:25:d4:1a:ac:d0:86:db:f7:07:f0:96:9f:96:
53:8b:bd:66:76:90:88:e5:97:77:dd:db:b2:f9:a0:77:9a:bc:
2c:5c:98:91:e0:0b:65:7f:ca:9b:cc:70:68:ba:96:45:ac:43:
54:75:a6:e6:0f:a3:b2:7b:aa:53:49:95:76:6b:db:71:eb:3e:
52:99:4d:5c:1b:64:b5:ff:e9:d5:96:0a:47:72:d2:24:aa:5d:
6e:ee:8b:e6:92:61:d2:00:07:97:fd:3b:f6:73:ed:f3:cd:cb:
29:f6:03:95:3c:8e:62:df:94:a4:85:8f:83:88:68:62:a9:cc:
2d:44:a7:23:59:31:2e:df:c9:2f:dc:f3:df:28:ea:b3:3c:d0:
4f:4b:95:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:43:56 2025 by rpki-client