Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
File: MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft (raw, json)
Hash identifier: xEPxQX/A3RYREHxSCTQCtR3edGEMaFMs15Ku8YTTkqg=
Subject key identifier: 43:41:08:4E:A4:F2:43:75:2C:F0:B7:0B:38:FD:1E:BA:54:DF:70:93
Authority key identifier: 32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
Certificate issuer: /CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Certificate serial: 019A22F792738378E68FD0D7E5A3FB857607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
Manifest number: 1099
Signing time: Mon 27 Oct 2025 00:00:41 +0000
Manifest this update: Mon 27 Oct 2025 00:00:41 +0000
Manifest next update: Tue 28 Oct 2025 00:00:41 +0000
Files and hashes: 1: MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl (hash: e0Nmp71GzZ5d/Apib/6inVlQ8dUURKVn0dIMYjF3McY=)
2: TBM-WxKs_JnUU_yCd07gs-SEpTM.roa (hash: ITKz1rUEY27fZS9fRQNAXZm00rkbdJk7GbuSl5tqJwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:92:73:83:78:e6:8f:d0:d7:e5:a3:fb:85:76:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Validity
Not Before: Oct 27 00:00:41 2025 GMT
Not After : Oct 28 00:00:41 2025 GMT
Subject: CN=4341084ea4f243752cf0b70b38fd1eba54df7093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4e:00:4e:3e:19:5a:08:47:dd:66:94:07:26:
09:65:e7:95:3e:82:88:8b:48:0c:92:49:f9:8a:97:
0e:07:df:06:4b:48:7f:68:c0:2d:77:a1:f3:35:04:
fc:7b:e5:98:ba:c3:ba:b5:0d:9e:59:55:da:80:ba:
80:71:12:77:b8:b6:2d:24:7f:4f:cf:e2:d8:30:ff:
5b:53:4c:81:d5:40:3c:34:96:77:e0:70:54:33:85:
dd:d0:b3:18:e0:8b:9a:09:39:54:6b:31:70:f5:60:
57:84:6c:9c:d8:cb:95:b8:5c:30:66:07:7b:76:c0:
38:c2:1a:d5:78:11:f7:01:24:f7:4d:fe:86:cc:b5:
b7:50:ab:8d:c5:89:19:e4:c7:25:84:70:4e:d7:ca:
a9:6a:3c:c8:03:8f:b4:c5:07:d0:3e:ca:ec:10:7f:
bf:10:c9:30:ee:8c:e4:c8:15:2a:4d:41:c2:da:8b:
56:e9:b7:f6:10:49:b3:c0:58:b8:87:8b:7d:82:10:
3c:da:d2:f9:d3:34:40:85:e4:1a:96:4b:aa:b4:12:
b8:f9:7a:03:06:c4:fe:79:e6:f8:b3:40:29:40:ae:
66:ec:6e:93:34:d7:1e:41:45:c4:d0:81:17:54:f9:
fd:e0:55:22:86:1b:18:3a:58:73:56:f4:ff:98:ad:
c8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:41:08:4E:A4:F2:43:75:2C:F0:B7:0B:38:FD:1E:BA:54:DF:70:93
X509v3 Authority Key Identifier:
keyid:32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f7:f4:a7:6b:b9:13:eb:6b:be:92:10:3a:70:76:eb:54:18:
62:74:5a:9f:0b:9b:70:f8:52:c6:19:26:a6:11:8f:7c:8c:63:
2f:7d:83:5b:54:1d:ef:1b:b4:76:f4:c4:88:16:b8:ae:af:b5:
55:38:e8:53:30:0d:f4:f7:73:43:d3:92:0b:ab:f4:87:17:4a:
45:f8:d6:ba:a0:dd:e6:15:03:41:c2:25:7a:51:98:39:14:8a:
96:55:a9:22:63:b1:cb:11:19:d4:34:c0:e2:1a:b7:ad:ff:e2:
35:df:15:fd:b7:e3:3e:b7:19:3b:56:b0:87:f7:f0:c4:cc:d7:
94:a4:23:4e:fa:14:43:1f:94:9a:7b:21:4d:34:35:9c:a0:02:
4a:b3:3e:48:16:88:bf:72:14:dc:cb:49:ab:76:fe:e3:1c:f5:
ab:e1:87:2d:4b:15:d8:be:01:b4:c1:e1:e5:b6:c7:8d:97:cb:
a3:70:19:83:32:73:13:ee:c2:a8:23:87:e0:99:7f:8d:9b:86:
9f:80:ea:3c:3c:7e:9a:74:e0:b3:80:bb:c3:24:46:ec:16:cb:
43:58:3c:f8:0b:40:63:41:16:a1:3d:1d:cc:1e:11:7c:04:10:
2b:55:7f:86:e6:3d:93:8b:4a:a6:9f:8e:2b:69:c0:95:97:5a:
bd:d5:24:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoi95Jzg3jmj9DX5aP7hXYHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYzg0NmYxOTE0MzMyMzBkOTczY2JjOGZkYTA2YjYwMmVi
ZmNiNWIwHhcNMjUxMDI3MDAwMDQxWhcNMjUxMDI4MDAwMDQxWjAzMTEwLwYDVQQD
Eyg0MzQxMDg0ZWE0ZjI0Mzc1MmNmMGI3MGIzOGZkMWViYTU0ZGY3MDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk4ATj4ZWghH3WaUByYJZeeVPoKI
i0gMkkn5ipcOB98GS0h/aMAtd6HzNQT8e+WYusO6tQ2eWVXagLqAcRJ3uLYtJH9P
z+LYMP9bU0yB1UA8NJZ34HBUM4Xd0LMY4IuaCTlUazFw9WBXhGyc2MuVuFwwZgd7
dsA4whrVeBH3AST3Tf6GzLW3UKuNxYkZ5MclhHBO18qpajzIA4+0xQfQPsrsEH+/
EMkw7ozkyBUqTUHC2otW6bf2EEmzwFi4h4t9ghA82tL50zRAheQalkuqtBK4+XoD
BsT+eeb4s0ApQK5m7G6TNNceQUXE0IEXVPn94FUihhsYOlhzVvT/mK3ILwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENBCE6k8kN1LPC3Czj9HrpU33CTMB8GA1UdIwQY
MBaAFDLIRvGRQzIw2XPLyP2ga2Auv8tbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lNTc1NmUtMTMxNy00NDcyLTgzMDIt
YTIzNDFkM2JiMDUzLzEvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9lNTc1NmUtMTMxNy00NDcyLTgzMDItYTIzNDFkM2JiMDUz
LzEvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJvf0p2u5
E+trvpIQOnB261QYYnRanwubcPhSxhkmphGPfIxjL32DW1Qd7xu0dvTEiBa4rq+1
VTjoUzAN9PdzQ9OSC6v0hxdKRfjWuqDd5hUDQcIlelGYORSKllWpImOxyxEZ1DTA
4hq3rf/iNd8V/bfjPrcZO1awh/fwxMzXlKQjTvoUQx+UmnshTTQ1nKACSrM+SBaI
v3IU3MtJq3b+4xz1q+GHLUsV2L4BtMHh5bbHjZfLo3AZgzJzE+7CqCOH4Jl/jZuG
n4DqPDx+mnTgs4C7wyRG7BbLQ1g8+AtAY0EWoT0dzB4RfAQQK1V/huY9k4tKpp+O
K2nAlZdavdUkeg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 07:08:18 2025 by rpki-client