Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
File: MsAnS8F_nHXNP8EPi1gloZOCq08.mft (raw, json)
Hash identifier: LHZJj3prju6qbrdhj1IusoKUrreYEbp3CRhK/M+xFlA=
Subject key identifier: 1C:C1:47:E0:72:A2:01:D6:46:01:10:76:66:A0:B5:0C:53:6F:5D:7D
Authority key identifier: 32:C0:27:4B:C1:7F:9C:75:CD:3F:C1:0F:8B:58:25:A1:93:82:AB:4F
Certificate issuer: /CN=32c0274bc17f9c75cd3fc10f8b5825a19382ab4f
Certificate serial: 0198D5F1CC7995AFCEF2CA0ECAE159E7CE50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 08:00:50 +0000
Manifest this update: Sat 23 Aug 2025 08:00:50 +0000
Manifest next update: Sun 24 Aug 2025 08:00:50 +0000
Files and hashes: 1: MsAnS8F_nHXNP8EPi1gloZOCq08.crl (hash: XZM345mCdvnl8UdWIJSp6lxkWrtu+fqrOYbedRTpn6k=)
2: TOIzNWX91Fklg3hNSjJLHCHMbgY.roa (hash: vI/ydx27fqpwXcKYk7mipA2wZEP7zEBHHuwYkt7nRa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:cc:79:95:af:ce:f2:ca:0e:ca:e1:59:e7:ce:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c0274bc17f9c75cd3fc10f8b5825a19382ab4f
Validity
Not Before: Aug 23 08:00:50 2025 GMT
Not After : Aug 24 08:00:50 2025 GMT
Subject: CN=1cc147e072a201d64601107666a0b50c536f5d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f2:81:b6:fc:17:71:7a:ac:72:70:b1:fe:93:
81:6a:c0:6a:9c:5b:e3:f5:76:38:29:bd:a3:6d:34:
46:6a:c5:44:79:e6:09:5f:d5:96:c0:06:78:3d:06:
4b:b8:9e:81:10:9e:fd:e1:a5:21:08:69:75:78:46:
12:00:e1:d0:80:7f:74:a9:9e:08:2d:94:e2:cd:af:
d6:c6:1b:34:c0:cc:20:e9:bd:61:6a:81:36:d0:46:
49:ff:54:d1:9d:92:0d:22:4e:c6:90:e1:d7:25:91:
a7:14:a3:a3:57:db:0c:bb:1f:67:9f:ba:9b:a3:a1:
32:3c:a3:9d:44:7a:18:40:dc:2f:26:c2:31:a7:36:
80:18:54:ff:7e:95:ec:00:df:84:34:38:18:81:85:
32:07:f2:d1:d7:0e:8a:68:74:ca:91:08:7d:e4:ba:
a8:98:ca:eb:3a:6b:eb:89:27:44:13:57:ee:a6:fe:
62:82:95:40:39:84:a8:72:fb:29:74:8a:03:9c:b3:
73:d9:46:dd:5b:4e:db:93:43:39:1f:ef:ab:7d:7d:
ef:98:da:48:9e:2a:23:cd:fb:e7:21:c9:34:39:d8:
60:25:22:7e:b8:ce:aa:aa:60:ce:27:a0:96:37:42:
60:c6:f8:a8:b0:34:5c:53:22:b4:8c:10:7d:ca:10:
97:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C1:47:E0:72:A2:01:D6:46:01:10:76:66:A0:B5:0C:53:6F:5D:7D
X509v3 Authority Key Identifier:
keyid:32:C0:27:4B:C1:7F:9C:75:CD:3F:C1:0F:8B:58:25:A1:93:82:AB:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:fe:79:41:af:0b:b5:7a:b1:43:71:c8:77:e3:1e:2f:97:27:
f2:e4:74:29:14:39:4f:c5:2e:82:01:29:c1:03:f6:95:11:47:
ef:bd:5e:df:46:e0:ee:77:fc:e2:02:50:31:ab:72:08:4b:27:
4d:bb:a7:b5:f8:72:54:25:74:b6:c2:d0:9c:03:8d:5a:01:a2:
0d:f2:16:2e:55:25:99:a7:a1:d8:00:6a:e5:ac:c4:72:13:23:
c2:34:ad:b8:c0:12:c1:1b:6d:de:b9:83:91:33:6f:62:d6:eb:
03:23:f4:3e:42:14:cc:51:05:d8:a0:d1:11:af:24:09:cc:88:
75:26:cc:16:51:f7:87:fb:64:95:ab:7c:a1:e2:92:8f:29:13:
8a:a0:1a:5e:c1:7b:65:19:2f:ee:07:69:01:bd:9a:c4:79:22:
de:9b:83:4e:49:89:96:d8:9c:d7:fa:a2:bc:c7:63:33:5d:f0:
b1:48:4f:70:45:2d:c5:a3:5e:0f:66:25:70:b2:a3:01:07:63:
7b:7d:b0:36:ce:ac:d1:ed:e8:19:01:91:61:67:06:43:d9:3b:
ab:b2:ee:c9:f1:20:c9:a7:49:1b:f7:69:d7:4a:12:c3:5b:11:
d8:bb:18:d5:cf:3c:10:d8:eb:4f:d5:16:eb:4b:37:ee:aa:ea:
4e:25:a6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:46 2025 by rpki-client