Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
File: MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft (raw, json)
Hash identifier: CFnK7piPr1LbUs8hl3GszeUWGsJuBwXLGGEIPUydMvQ=
Subject key identifier: A5:10:12:C0:38:A6:9F:9D:F5:32:2C:06:E1:FA:74:7B:25:A5:5F:F1
Authority key identifier: 31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84
Certificate issuer: /CN=31242850cad41cdf75a3c9d60b21fca543f74384
Certificate serial: 0199C3E94C1B6C59DF6C9BFFAD97D6A1B8DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
Manifest number: 16CA
Signing time: Wed 08 Oct 2025 13:01:10 +0000
Manifest this update: Wed 08 Oct 2025 13:01:10 +0000
Manifest next update: Thu 09 Oct 2025 13:01:10 +0000
Files and hashes: 1: 6G5nNFKJWFzHfNQU02eI4MMaEEg.roa (hash: 6cSP9En6aM/vjTao+cEFN3U0rlWFoCsSysKwaT7SNIU=)
2: MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl (hash: hUrM3pNM4LBMTEFCoFQm3U1WUmHWfGWljMuRa+869Rw=)
3: dTX8V27b3FZ8vwtYRtnPTsQ9bhg.roa (hash: 77xEsKoJwAS0zsMbL8sU52nye1oYIoAnIfCbqIAKy1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:e9:4c:1b:6c:59:df:6c:9b:ff:ad:97:d6:a1:b8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31242850cad41cdf75a3c9d60b21fca543f74384
Validity
Not Before: Oct 8 13:01:10 2025 GMT
Not After : Oct 9 13:01:10 2025 GMT
Subject: CN=a51012c038a69f9df5322c06e1fa747b25a55ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:93:28:97:df:33:1c:30:8c:38:60:e0:30:fa:
98:9b:85:21:5b:51:8f:20:05:05:d2:7a:fa:ff:5c:
44:48:d0:89:57:9c:72:97:ff:11:e6:79:d8:cd:40:
d1:a1:1b:f0:54:3a:27:c0:e1:a0:e9:4e:67:ec:10:
37:47:dd:29:eb:59:69:e3:d4:5c:71:eb:f5:99:7e:
5b:0d:9d:d9:aa:65:3a:41:93:48:cf:9c:f4:ce:98:
21:ae:c6:5c:44:36:ef:b7:13:ad:4f:eb:73:74:5c:
12:86:f6:b7:7a:85:ff:29:71:56:77:ad:10:a0:df:
45:e1:b7:fc:32:d3:97:58:e0:ac:e5:0b:b8:41:0b:
d5:73:95:c3:06:05:88:45:b1:84:06:82:67:b4:e6:
6d:8d:c7:c2:d6:d8:78:c5:07:a1:74:97:78:93:b3:
cb:7a:48:82:0a:9f:a4:57:54:d4:63:1f:59:5f:ee:
e4:fe:5c:56:3c:26:93:88:3f:52:63:16:cd:20:b7:
b5:82:4c:21:36:c0:41:db:cc:5e:dd:6a:42:1e:b8:
3e:cc:95:e6:d6:57:ec:30:3d:87:bc:4a:58:71:80:
de:66:ab:11:31:35:a3:31:51:3e:61:a8:c6:da:40:
74:81:e8:95:62:50:07:60:cc:91:f3:88:1c:2c:4d:
b7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:10:12:C0:38:A6:9F:9D:F5:32:2C:06:E1:FA:74:7B:25:A5:5F:F1
X509v3 Authority Key Identifier:
keyid:31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b0:8b:28:b5:f1:5f:d3:2d:b3:fb:a1:9f:38:77:5b:b9:ee:
7b:24:07:f4:95:4a:d5:68:e1:61:96:2f:21:f3:28:d4:84:47:
9c:cc:a9:d5:dd:8e:d7:96:b7:28:3b:bf:59:b4:07:75:67:93:
62:17:2e:a5:79:cf:2f:47:7a:47:07:87:d2:1b:a9:d2:8d:13:
24:f3:e3:46:36:57:1f:4c:f5:f2:0d:22:9c:91:c0:eb:8f:aa:
e9:37:17:65:73:c2:6f:8a:6c:e3:90:eb:d9:f0:fb:65:60:8d:
9c:82:eb:52:5a:f2:10:f9:11:6d:25:bd:7a:94:72:ef:33:24:
97:fb:69:c9:15:fe:13:ec:b9:ce:88:1c:c5:92:f3:d2:4f:71:
8f:a9:d8:45:02:6d:dc:90:59:df:74:ae:74:b2:0f:f5:73:09:
89:ac:b7:b8:f4:9c:4b:6c:ec:24:97:78:51:26:09:11:e3:2d:
c3:b7:aa:d6:a5:2e:65:d8:f1:8d:b7:09:31:50:9a:88:0d:48:
2c:cb:1c:e6:da:0c:9d:72:b6:ea:ff:ae:7a:4e:0d:91:eb:5c:
c2:ec:9c:c5:80:27:77:cc:30:f7:05:02:14:70:4f:46:0e:85:
a9:34:92:12:ec:4f:f0:75:85:20:05:31:9a:4e:e0:b9:d0:57:
ba:c2:a5:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnD6UwbbFnfbJv/rZfWobjcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMjQyODUwY2FkNDFjZGY3NWEzYzlkNjBiMjFmY2E1NDNm
NzQzODQwHhcNMjUxMDA4MTMwMTEwWhcNMjUxMDA5MTMwMTEwWjAzMTEwLwYDVQQD
EyhhNTEwMTJjMDM4YTY5ZjlkZjUzMjJjMDZlMWZhNzQ3YjI1YTU1ZmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZMol98zHDCMOGDgMPqYm4UhW1GP
IAUF0nr6/1xESNCJV5xyl/8R5nnYzUDRoRvwVDonwOGg6U5n7BA3R90p61lp49Rc
cev1mX5bDZ3ZqmU6QZNIz5z0zpghrsZcRDbvtxOtT+tzdFwShva3eoX/KXFWd60Q
oN9F4bf8MtOXWOCs5Qu4QQvVc5XDBgWIRbGEBoJntOZtjcfC1th4xQehdJd4k7PL
ekiCCp+kV1TUYx9ZX+7k/lxWPCaTiD9SYxbNILe1gkwhNsBB28xe3WpCHrg+zJXm
1lfsMD2HvEpYcYDeZqsRMTWjMVE+YajG2kB0geiVYlAHYMyR84gcLE23vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUQEsA4pp+d9TIsBuH6dHslpV/xMB8GA1UdIwQY
MBaAFDEkKFDK1BzfdaPJ1gsh/KVD90OEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVNRb1VNclVITjkxbzhuV0N5SDhwVVAzUTRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xYTI3ZWMtZWIwYS00NDA2LWExZDEt
MDdlZDQ2YjE0OWMzLzEvTVNRb1VNclVITjkxbzhuV0N5SDhwVVAzUTRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8xYTI3ZWMtZWIwYS00NDA2LWExZDEtMDdlZDQ2YjE0OWMz
LzEvTVNRb1VNclVITjkxbzhuV0N5SDhwVVAzUTRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZbCLKLXx
X9Mts/uhnzh3W7nueyQH9JVK1WjhYZYvIfMo1IRHnMyp1d2O15a3KDu/WbQHdWeT
YhcupXnPL0d6RweH0hup0o0TJPPjRjZXH0z18g0inJHA64+q6TcXZXPCb4ps45Dr
2fD7ZWCNnILrUlryEPkRbSW9epRy7zMkl/tpyRX+E+y5zogcxZLz0k9xj6nYRQJt
3JBZ33SudLIP9XMJiay3uPScS2zsJJd4USYJEeMtw7eq1qUuZdjxjbcJMVCaiA1I
LMsc5toMnXK26v+uek4NketcwuycxYAnd8ww9wUCFHBPRg6FqTSSEuxP8HWFIAUx
mk7gudBXusKl1A==
-----END CERTIFICATE-----
Generated at Wed Oct 8 15:48:26 2025 by rpki-client