
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
File: MSbg1dN79m8-nYh-rq2cpjwYlIk.mft (raw, json)
Hash identifier: igzvDgW2u2JeYhrgKKDOymXXsZDQfhdiVUScF0RFwEU=
Subject key identifier: D8:3E:D6:B8:5C:31:4C:69:05:09:32:7E:CF:A4:86:1E:15:BB:C4:AF
Authority key identifier: 31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
Certificate issuer: /CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Certificate serial: 01984A4188990037BA6E4C38C1E06A4080E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 05:01:05 +0000
Manifest this update: Sun 27 Jul 2025 05:01:05 +0000
Manifest next update: Mon 28 Jul 2025 05:01:05 +0000
Files and hashes: 1: MSbg1dN79m8-nYh-rq2cpjwYlIk.crl (hash: tE86Hx7ylUkHMv7I+Uh1GvK9BOG3wKjwLeJ6edtcJGo=)
2: UmPwqKyARZqa-K92MHrGqC9QyYg.roa (hash: j/qBkJJtXcMUmDoWtmsXwP9m2yfPn26NNyaQXDeqLdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:88:99:00:37:ba:6e:4c:38:c1:e0:6a:40:80:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Validity
Not Before: Jul 27 05:01:05 2025 GMT
Not After : Jul 28 05:01:05 2025 GMT
Subject: CN=d83ed6b85c314c690509327ecfa4861e15bbc4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:02:84:92:c4:80:dd:4b:a3:a9:60:10:e6:
9d:19:9f:80:87:bf:69:62:6c:40:9c:9f:c5:c2:ac:
2c:e8:cc:2e:45:95:08:69:49:cb:99:a5:2d:d1:67:
51:50:57:c2:ce:09:73:9c:b7:da:a1:a8:67:a0:f6:
c1:9e:b6:ca:8f:55:35:51:4e:55:66:8d:cf:c5:4e:
09:be:36:50:34:db:9d:23:1b:b5:dd:d2:ab:15:08:
13:bf:40:22:c0:3c:31:da:79:99:9f:5d:be:da:2f:
ec:b2:22:da:ed:75:d5:34:ee:67:d5:65:ca:a4:60:
b4:39:7d:74:88:d9:e2:e1:2b:11:46:77:93:34:ba:
44:5e:25:6c:6d:97:05:7e:46:8d:db:ae:0a:31:c0:
71:74:34:83:57:1b:98:00:eb:78:85:4c:1e:0f:c7:
be:e8:d8:f2:4f:b8:2f:79:af:fc:4b:3c:61:63:fe:
44:e5:1d:4d:17:c6:11:e2:a7:6f:86:f4:94:11:07:
0c:2f:a1:af:55:68:86:44:92:a9:9c:79:a4:a4:5e:
58:10:65:39:58:a0:48:0f:a5:b0:a6:d4:bf:21:32:
42:6e:15:a4:56:ec:b0:10:b5:c1:56:5c:6d:ff:32:
ff:ea:9e:6a:5a:07:de:78:0a:be:c9:30:2f:71:60:
eb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3E:D6:B8:5C:31:4C:69:05:09:32:7E:CF:A4:86:1E:15:BB:C4:AF
X509v3 Authority Key Identifier:
keyid:31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ca:0e:0d:f2:bb:d8:ed:70:b9:7a:d0:d8:ce:da:0d:f6:de:
75:1b:b8:39:81:f6:b3:18:a0:6f:bb:e9:70:98:dd:4b:04:4d:
a1:0e:dc:0a:57:97:e9:4d:44:05:19:32:50:3e:68:4a:77:bc:
25:ba:ae:fe:60:5a:21:28:54:da:92:3b:28:09:a4:d4:8a:6e:
33:15:54:a1:81:13:14:1f:61:18:f7:52:1d:fe:6c:f6:23:56:
71:d6:19:ce:23:3e:05:a4:12:c4:b7:61:4b:72:8c:9a:38:e3:
82:e7:c9:62:9c:44:20:d8:2d:e0:fa:27:05:e2:ef:79:d3:05:
3e:f7:ef:c3:cc:77:a7:b9:fa:2d:93:a6:f6:d1:12:a9:40:f9:
1e:52:32:ef:db:e3:7e:21:b5:42:ce:4e:43:9d:1c:04:aa:34:
39:03:ee:f6:4b:65:94:f2:72:b8:51:96:80:37:16:f1:81:8f:
eb:e1:ef:e5:50:42:1d:06:27:dc:06:83:0b:aa:5a:11:8a:6c:
92:2a:c2:6c:bb:c9:3a:0d:80:2b:15:1e:b8:93:b5:84:aa:87:
2e:f7:17:f4:1e:b8:f8:c2:97:dd:6c:89:2c:b2:2a:05:75:69:
a0:9f:71:e2:08:fa:4d:1f:a2:37:cd:34:ad:73:87:e7:52:c4:
75:b1:74:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:54:46 2025 by rpki-client