Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
File: MSbg1dN79m8-nYh-rq2cpjwYlIk.mft (raw, json)
Hash identifier: gqJ9v/Z+ali9cFMANU2ZARkBoNkm9/vdzunXHXCHFa4=
Subject key identifier: CA:BA:F2:1B:FB:1D:2C:40:CE:60:F0:16:51:13:9A:A3:08:59:E3:47
Authority key identifier: 31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
Certificate issuer: /CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Certificate serial: 019A00A36645167C64C8705396512C60D0EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 08:01:39 +0000
Manifest this update: Mon 20 Oct 2025 08:01:39 +0000
Manifest next update: Tue 21 Oct 2025 08:01:39 +0000
Files and hashes: 1: MSbg1dN79m8-nYh-rq2cpjwYlIk.crl (hash: juF787NJUki5ugRXIXoBR/WnMANRRBzGfYKqjRfxq8g=)
2: UmPwqKyARZqa-K92MHrGqC9QyYg.roa (hash: j/qBkJJtXcMUmDoWtmsXwP9m2yfPn26NNyaQXDeqLdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:66:45:16:7c:64:c8:70:53:96:51:2c:60:d0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Validity
Not Before: Oct 20 08:01:39 2025 GMT
Not After : Oct 21 08:01:39 2025 GMT
Subject: CN=cabaf21bfb1d2c40ce60f01651139aa30859e347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:45:dc:4f:ca:a4:d7:b3:f8:43:9b:9c:4b:cf:
30:24:4b:ff:06:dc:1c:6a:5f:f7:71:26:86:d8:7a:
7d:30:4c:b4:24:16:6b:c4:fd:20:df:b8:d7:0e:08:
38:23:1b:e7:da:f4:3a:dd:ad:d3:e1:20:16:15:d6:
f3:3a:77:94:e2:67:01:a7:c4:b3:72:ca:cb:97:33:
3d:ab:5c:9e:95:c0:ad:24:ad:72:22:52:ae:7e:f3:
f6:0c:26:da:97:54:a7:07:9a:3b:d3:f6:d1:de:0d:
bf:16:ae:31:4a:c7:c8:9a:2a:c2:10:ac:eb:e1:7f:
cf:e1:d8:b6:d3:bd:3d:89:c7:94:5e:e5:68:09:ef:
4a:7f:e0:af:62:cb:66:d1:e8:11:38:88:fa:1d:c2:
b2:15:cd:f6:0b:cb:d2:81:68:b7:48:b4:c7:c1:03:
7e:28:21:b8:62:52:42:de:53:54:76:f8:0c:2e:82:
84:fa:3e:4a:05:75:ab:0f:b9:64:53:cd:1b:e9:de:
6e:d4:67:0f:7c:82:73:c2:a9:2c:b6:ce:31:be:f6:
3c:1b:7a:df:e2:fd:c5:67:7e:2c:92:47:2c:bc:66:
ef:9d:43:e2:92:ad:ea:22:30:61:36:eb:ba:5d:f9:
89:48:02:b4:fb:98:d3:46:04:f9:c5:ef:d7:6a:fd:
c6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BA:F2:1B:FB:1D:2C:40:CE:60:F0:16:51:13:9A:A3:08:59:E3:47
X509v3 Authority Key Identifier:
keyid:31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:9d:f6:9f:be:ad:62:07:e3:17:b3:96:ba:f7:49:7f:bf:7b:
76:54:5d:94:86:67:5c:8e:37:21:d5:b3:f2:fb:da:37:9f:3a:
b7:f4:47:40:04:4d:21:c8:b2:f0:c4:af:aa:b0:20:e6:6d:d6:
1d:88:b9:75:67:02:9d:3a:89:55:86:46:ce:05:36:76:6b:ef:
bf:d4:3b:47:4f:be:fb:d1:7c:0e:5d:8e:bb:96:97:0c:ab:64:
4c:ba:df:a9:3e:04:f6:ef:87:0f:46:69:ef:19:7a:1a:dc:1c:
80:8c:17:77:a1:48:ed:29:16:19:a6:51:b2:c8:6c:89:cb:d0:
ef:77:dd:f4:64:5c:69:b5:7a:89:d3:07:3a:2c:13:42:52:9f:
74:de:89:0c:e4:bb:30:46:fa:bb:a9:05:c7:31:f6:03:04:47:
06:f1:e8:36:48:a3:48:92:85:fa:23:62:8d:08:ca:b1:8f:e7:
0e:cb:82:18:cf:79:4a:02:90:44:f3:7a:fa:08:57:97:0c:ee:
92:7f:24:5d:82:0f:f8:90:63:15:77:13:09:03:b8:f5:e4:d6:
80:07:72:b4:42:29:85:26:2d:f8:10:2e:82:97:d9:c7:2a:53:
a3:60:ef:50:87:7d:3f:62:cd:19:0a:99:ee:bc:bc:75:75:dc:
61:e6:1a:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAo2ZFFnxkyHBTllEsYNDqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMjZlMGQ1ZDM3YmY2NmYzZTlkODg3ZWFlYWQ5Y2E2M2Mx
ODk0ODkwHhcNMjUxMDIwMDgwMTM5WhcNMjUxMDIxMDgwMTM5WjAzMTEwLwYDVQQD
EyhjYWJhZjIxYmZiMWQyYzQwY2U2MGYwMTY1MTEzOWFhMzA4NTllMzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUXcT8qk17P4Q5ucS88wJEv/Btwc
al/3cSaG2Hp9MEy0JBZrxP0g37jXDgg4Ixvn2vQ63a3T4SAWFdbzOneU4mcBp8Sz
csrLlzM9q1yelcCtJK1yIlKufvP2DCbal1SnB5o70/bR3g2/Fq4xSsfImirCEKzr
4X/P4di20709iceUXuVoCe9Kf+CvYstm0egROIj6HcKyFc32C8vSgWi3SLTHwQN+
KCG4YlJC3lNUdvgMLoKE+j5KBXWrD7lkU80b6d5u1GcPfIJzwqksts4xvvY8G3rf
4v3FZ34skkcsvGbvnUPikq3qIjBhNuu6XfmJSAK0+5jTRgT5xe/Xav3GZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMq68hv7HSxAzmDwFlETmqMIWeNHMB8GA1UdIwQY
MBaAFDEm4NXTe/ZvPp2Ifq6tnKY8GJSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVNiZzFkTjc5bTgtblloLXJxMmNwandZbElrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMmVmNWEtZTJiOS00OTk5LWJmYjIt
NmU4ZWQzYzczMDdlLzEvTVNiZzFkTjc5bTgtblloLXJxMmNwandZbElrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zMmVmNWEtZTJiOS00OTk5LWJmYjItNmU4ZWQzYzczMDdl
LzEvTVNiZzFkTjc5bTgtblloLXJxMmNwandZbElrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE532n76t
YgfjF7OWuvdJf797dlRdlIZnXI43IdWz8vvaN586t/RHQARNIciy8MSvqrAg5m3W
HYi5dWcCnTqJVYZGzgU2dmvvv9Q7R0+++9F8Dl2Ou5aXDKtkTLrfqT4E9u+HD0Zp
7xl6GtwcgIwXd6FI7SkWGaZRsshsicvQ73fd9GRcabV6idMHOiwTQlKfdN6JDOS7
MEb6u6kFxzH2AwRHBvHoNkijSJKF+iNijQjKsY/nDsuCGM95SgKQRPN6+ghXlwzu
kn8kXYIP+JBjFXcTCQO49eTWgAdytEIphSYt+BAugpfZxypTo2DvUId9P2LNGQqZ
7ry8dXXcYeYa/g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:17:51 2025 by rpki-client