Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
File: MseO7vestFH8N1df65EU38zBzfs.mft (raw, json)
Hash identifier: 70RYf6xJ/bNy2OYLqdkHG756Ft+j1t1MClvXua248+Q=
Subject key identifier: F5:DD:B3:BB:3A:ED:A4:13:74:10:C7:20:E0:65:12:57:06:D2:36:A8
Authority key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
Certificate issuer: /CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Certificate serial: 0198D6298DDBD50785DE164CACF00EB0FA0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
Manifest number: 118B
Signing time: Sat 23 Aug 2025 09:01:44 +0000
Manifest this update: Sat 23 Aug 2025 09:01:44 +0000
Manifest next update: Sun 24 Aug 2025 09:01:44 +0000
Files and hashes: 1: 9i8DjH71Ep8U9n2vVSWdpKwB5UA.roa (hash: fm2wqDwUiAhqNuk8l7rNQtkTwCk4cyJ8IN2iwk3dti0=)
2: GbEyk8ZWl0vqgj_sPWLMTAGno6s.roa (hash: JzRbeYoWUwlRVaKgJmm7hD8H9CYTCwAivI+PSmgKwME=)
3: M6U6dkH9DSHzE2ElXf3ZUgv-gao.roa (hash: gyUWfn2VEKn6DTTZDCrSAEanNDrzsmaWPFOYycLgJ88=)
4: MseO7vestFH8N1df65EU38zBzfs.crl (hash: YO1QHHsPyjcZuBp9rrpPv70lI5/XWpbNYRBJmsjPL+Q=)
5: qcE5lMt-ta8yQgK_A4TOf_qcnKk.roa (hash: mHbw87Bhgg5orJBSCEF9YhID6w2GXs/pHd+LaovXweg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:8d:db:d5:07:85:de:16:4c:ac:f0:0e:b0:fa:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Validity
Not Before: Aug 23 09:01:44 2025 GMT
Not After : Aug 24 09:01:44 2025 GMT
Subject: CN=f5ddb3bb3aeda4137410c720e065125706d236a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0d:80:38:ab:0c:20:0a:f6:c9:08:67:29:1e:
da:bd:aa:95:d3:fe:94:dc:c7:93:1a:10:4e:51:db:
30:83:c8:34:41:38:db:cb:ec:76:42:2b:71:9c:7f:
df:1b:61:58:b6:39:85:e3:72:fc:50:9d:16:9e:0d:
03:2c:d2:af:ef:3d:72:8f:48:92:44:fc:6f:dd:1c:
04:8b:62:f2:44:5a:a8:8d:52:e4:c0:05:78:5f:2d:
e4:33:32:79:ab:08:57:52:de:cb:5b:ae:7f:6e:65:
ae:af:e2:4c:ac:dc:42:c5:58:5e:ab:9a:55:a1:6c:
5a:25:d2:b0:82:8d:6e:4a:1b:01:bc:25:1b:11:84:
ba:a5:f5:26:f1:76:6c:f0:b8:45:5d:18:78:19:92:
84:bf:24:05:5b:68:12:bf:76:f1:0c:fe:ec:93:ea:
d0:ad:5e:68:ba:c6:b4:b6:83:69:dd:60:36:af:90:
0e:fd:8c:5c:3e:00:00:77:ab:0a:1d:33:27:c9:6b:
46:33:9f:84:e1:bb:a0:3e:09:72:30:60:97:91:4b:
fb:4d:19:6f:f2:97:56:01:a3:68:c5:fc:41:d8:41:
68:04:dc:ce:1a:42:31:59:38:a6:45:01:b5:f3:87:
ef:54:56:ef:1b:8f:f8:2e:33:b9:f6:a9:d7:15:11:
2b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DD:B3:BB:3A:ED:A4:13:74:10:C7:20:E0:65:12:57:06:D2:36:A8
X509v3 Authority Key Identifier:
keyid:32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:60:35:8e:6b:12:d8:c1:9f:6a:e7:4c:ab:cc:72:90:98:b4:
d6:4d:49:a6:3a:a3:2d:67:3b:9e:10:58:61:96:01:f9:4f:60:
d2:e6:75:45:7e:fa:61:55:a7:be:07:ad:c3:00:b3:7e:bd:34:
fa:0e:76:a6:ab:18:f8:3f:7e:bd:08:4e:c1:45:87:61:d7:66:
4c:40:88:b4:1b:59:ef:b5:d0:2a:9a:28:b3:00:73:e8:32:1a:
84:17:15:3c:c9:36:a8:89:00:d6:c6:5a:e9:11:fe:5b:f1:01:
ae:04:4f:40:fb:9e:48:48:d0:c0:77:d7:1d:34:17:6a:9d:c0:
79:35:c4:c4:93:52:71:41:c6:bd:b6:8d:a7:07:3b:a4:fe:92:
b4:f7:2f:0c:d1:62:3f:40:10:ba:9c:5b:56:5e:2f:87:83:7b:
d1:a3:16:d0:6d:2e:2e:cf:47:63:9e:41:6b:77:2e:8a:59:bc:
d2:af:ae:21:f6:62:0c:7b:58:79:ee:bd:25:0a:4a:42:d9:d2:
72:cf:cf:1a:8f:c8:5a:05:bf:9f:8b:92:d1:83:80:e7:47:b1:
58:fa:bf:72:fe:8b:53:5b:d9:77:d5:4b:a7:cc:d1:25:73:31:
e1:34:da:f0:53:74:66:91:44:1a:87:52:87:95:13:8c:c3:8c:
40:58:c5:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWKY3b1QeF3hZMrPAOsPoNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYzc4ZWVlZjdhY2I0NTFmYzM3NTc1ZmViOTExNGRmY2Nj
MWNkZmIwHhcNMjUwODIzMDkwMTQ0WhcNMjUwODI0MDkwMTQ0WjAzMTEwLwYDVQQD
EyhmNWRkYjNiYjNhZWRhNDEzNzQxMGM3MjBlMDY1MTI1NzA2ZDIzNmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg2AOKsMIAr2yQhnKR7avaqV0/6U
3MeTGhBOUdswg8g0QTjby+x2QitxnH/fG2FYtjmF43L8UJ0Wng0DLNKv7z1yj0iS
RPxv3RwEi2LyRFqojVLkwAV4Xy3kMzJ5qwhXUt7LW65/bmWur+JMrNxCxVheq5pV
oWxaJdKwgo1uShsBvCUbEYS6pfUm8XZs8LhFXRh4GZKEvyQFW2gSv3bxDP7sk+rQ
rV5ousa0toNp3WA2r5AO/YxcPgAAd6sKHTMnyWtGM5+E4bugPglyMGCXkUv7TRlv
8pdWAaNoxfxB2EFoBNzOGkIxWTimRQG184fvVFbvG4/4LjO59qnXFRErDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXds7s67aQTdBDHIOBlElcG0jaoMB8GA1UdIwQY
MBaAFDLHju73rLRR/DdXX+uRFN/Mwc37MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXNlTzd2ZXN0Rkg4TjFkZjY1RVUzOHpCemZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yMjViY2ItNmQzZC00YzBlLTgyNGYt
MmYxYzhlNDA4YjY0LzEvTXNlTzd2ZXN0Rkg4TjFkZjY1RVUzOHpCemZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8yMjViY2ItNmQzZC00YzBlLTgyNGYtMmYxYzhlNDA4YjY0
LzEvTXNlTzd2ZXN0Rkg4TjFkZjY1RVUzOHpCemZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWA1jmsS
2MGfaudMq8xykJi01k1JpjqjLWc7nhBYYZYB+U9g0uZ1RX76YVWnvgetwwCzfr00
+g52pqsY+D9+vQhOwUWHYddmTECItBtZ77XQKpooswBz6DIahBcVPMk2qIkA1sZa
6RH+W/EBrgRPQPueSEjQwHfXHTQXap3AeTXExJNScUHGvbaNpwc7pP6StPcvDNFi
P0AQupxbVl4vh4N70aMW0G0uLs9HY55Ba3cuilm80q+uIfZiDHtYee69JQpKQtnS
cs/PGo/IWgW/n4uS0YOA50exWPq/cv6LU1vZd9VLp8zRJXMx4TTa8FN0ZpFEGodS
h5UTjMOMQFjF0A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:55 2025 by rpki-client