Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
File: MseO7vestFH8N1df65EU38zBzfs.mft (raw, json)
Hash identifier: Px2mrh7gkFXryS214DiXG8TXS/HJQsqzikr5WI1VV94=
Subject key identifier: 47:83:B9:31:92:55:53:AA:A2:C7:49:D4:CC:9F:4D:04:2C:69:68:FB
Authority key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
Certificate issuer: /CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Certificate serial: 019A2440B22A15D049E8972955DBB0545F5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
Manifest number: 1238
Signing time: Mon 27 Oct 2025 06:00:10 +0000
Manifest this update: Mon 27 Oct 2025 06:00:10 +0000
Manifest next update: Tue 28 Oct 2025 06:00:10 +0000
Files and hashes: 1: 9i8DjH71Ep8U9n2vVSWdpKwB5UA.roa (hash: fm2wqDwUiAhqNuk8l7rNQtkTwCk4cyJ8IN2iwk3dti0=)
2: GbEyk8ZWl0vqgj_sPWLMTAGno6s.roa (hash: JzRbeYoWUwlRVaKgJmm7hD8H9CYTCwAivI+PSmgKwME=)
3: M6U6dkH9DSHzE2ElXf3ZUgv-gao.roa (hash: gyUWfn2VEKn6DTTZDCrSAEanNDrzsmaWPFOYycLgJ88=)
4: MseO7vestFH8N1df65EU38zBzfs.crl (hash: v+BDKg635q+2OaP+9dTFrpzF6F3q0cxrs6H6mJL8Umc=)
5: qcE5lMt-ta8yQgK_A4TOf_qcnKk.roa (hash: mHbw87Bhgg5orJBSCEF9YhID6w2GXs/pHd+LaovXweg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:40:b2:2a:15:d0:49:e8:97:29:55:db:b0:54:5f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Validity
Not Before: Oct 27 06:00:10 2025 GMT
Not After : Oct 28 06:00:10 2025 GMT
Subject: CN=4783b931925553aaa2c749d4cc9f4d042c6968fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:7b:1c:c1:04:26:da:60:e3:05:46:5e:9a:
81:59:b7:86:0a:6b:08:cf:91:5b:d3:49:16:6a:de:
97:9a:95:ba:04:dc:d3:87:1f:b8:fd:c7:ec:65:76:
0f:d0:8f:97:9b:3e:5a:21:1e:44:53:1e:b7:16:73:
98:ff:08:21:27:02:e2:ab:71:be:c6:0e:ae:6f:3d:
fc:62:ae:7a:3c:bd:f6:0d:63:2f:2e:af:cb:6b:98:
d0:f0:e2:0b:96:62:05:91:e9:2a:2a:08:99:3d:85:
dd:14:3a:7a:5e:4c:fd:6e:58:1c:4b:1c:26:b8:d6:
92:4a:81:ca:b9:e3:ea:a7:0b:2f:97:9f:68:28:91:
1d:ae:6a:4b:31:e3:77:7e:a5:84:81:04:28:21:ac:
54:32:7c:82:6f:22:3d:2a:8b:01:ef:92:51:6c:13:
57:a5:2d:c6:81:53:30:3c:c2:7c:23:c3:47:e3:1c:
3c:bb:47:4b:09:0f:12:b2:98:ce:1c:c7:99:24:f1:
4d:0c:e3:27:20:8d:2a:96:44:52:20:2d:fc:be:92:
d5:c1:73:9c:35:8b:6c:d5:3d:ae:20:65:c2:8f:cd:
76:2f:ef:20:39:bd:12:68:6c:76:fe:93:96:d4:68:
bd:18:24:88:90:5a:51:32:e4:09:d3:a0:86:26:2e:
16:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:83:B9:31:92:55:53:AA:A2:C7:49:D4:CC:9F:4D:04:2C:69:68:FB
X509v3 Authority Key Identifier:
keyid:32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:70:03:91:f8:f0:d9:65:d6:1b:d7:2e:4b:cb:b0:1a:56:5d:
70:ce:6a:79:28:7c:41:14:55:b8:3e:85:e8:9a:01:b6:50:a7:
61:5b:a7:a6:a9:af:96:44:d9:ba:61:cd:b6:4a:cd:4f:71:39:
90:77:1d:a8:ab:dd:94:36:07:63:53:86:5a:5d:a0:60:1d:2e:
45:2c:1c:ae:83:5b:fd:4b:9d:2b:8f:01:74:05:9c:22:80:7c:
33:84:d8:40:9e:2b:a9:3c:41:28:32:4d:a2:67:93:ad:4b:05:
74:f5:76:11:e8:07:6b:76:af:64:a2:a5:cd:01:9b:c9:ed:69:
e2:d7:51:0b:62:d3:57:ed:19:93:d5:fb:dd:6f:ad:46:7e:9b:
a9:a1:aa:0b:2c:94:73:3f:a6:e3:1a:b3:5f:45:a2:b0:47:a5:
61:58:21:5e:57:4e:75:7c:a2:c4:5e:c1:d7:ad:d1:bb:50:05:
93:e4:83:ab:48:97:2f:04:64:5b:70:60:12:b5:77:4c:30:e7:
c2:d1:ee:4f:4f:74:34:d4:39:cd:58:20:ce:0e:51:2c:24:59:
12:d4:b4:53:f6:f4:16:e2:83:74:c5:60:4e:6a:fe:1b:ff:6f:
c2:9c:9d:3e:0b:a1:b1:76:55:cf:2b:57:37:1b:ec:5d:65:6f:
03:70:a8:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZokQLIqFdBJ6JcpVduwVF9fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYzc4ZWVlZjdhY2I0NTFmYzM3NTc1ZmViOTExNGRmY2Nj
MWNkZmIwHhcNMjUxMDI3MDYwMDEwWhcNMjUxMDI4MDYwMDEwWjAzMTEwLwYDVQQD
Eyg0NzgzYjkzMTkyNTU1M2FhYTJjNzQ5ZDRjYzlmNGQwNDJjNjk2OGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8J7HMEEJtpg4wVGXpqBWbeGCmsI
z5Fb00kWat6XmpW6BNzThx+4/cfsZXYP0I+Xmz5aIR5EUx63FnOY/wghJwLiq3G+
xg6ubz38Yq56PL32DWMvLq/La5jQ8OILlmIFkekqKgiZPYXdFDp6Xkz9blgcSxwm
uNaSSoHKuePqpwsvl59oKJEdrmpLMeN3fqWEgQQoIaxUMnyCbyI9KosB75JRbBNX
pS3GgVMwPMJ8I8NH4xw8u0dLCQ8SspjOHMeZJPFNDOMnII0qlkRSIC38vpLVwXOc
NYts1T2uIGXCj812L+8gOb0SaGx2/pOW1Gi9GCSIkFpRMuQJ06CGJi4WvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeDuTGSVVOqosdJ1MyfTQQsaWj7MB8GA1UdIwQY
MBaAFDLHju73rLRR/DdXX+uRFN/Mwc37MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXNlTzd2ZXN0Rkg4TjFkZjY1RVUzOHpCemZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yMjViY2ItNmQzZC00YzBlLTgyNGYt
MmYxYzhlNDA4YjY0LzEvTXNlTzd2ZXN0Rkg4TjFkZjY1RVUzOHpCemZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8yMjViY2ItNmQzZC00YzBlLTgyNGYtMmYxYzhlNDA4YjY0
LzEvTXNlTzd2ZXN0Rkg4TjFkZjY1RVUzOHpCemZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHADkfjw
2WXWG9cuS8uwGlZdcM5qeSh8QRRVuD6F6JoBtlCnYVunpqmvlkTZumHNtkrNT3E5
kHcdqKvdlDYHY1OGWl2gYB0uRSwcroNb/UudK48BdAWcIoB8M4TYQJ4rqTxBKDJN
omeTrUsFdPV2EegHa3avZKKlzQGbye1p4tdRC2LTV+0Zk9X73W+tRn6bqaGqCyyU
cz+m4xqzX0WisEelYVghXldOdXyixF7B163Ru1AFk+SDq0iXLwRkW3BgErV3TDDn
wtHuT090NNQ5zVggzg5RLCRZEtS0U/b0FuKDdMVgTmr+G/9vwpydPguhsXZVzytX
NxvsXWVvA3Co4w==
-----END CERTIFICATE-----
Generated at Mon Oct 27 14:55:15 2025 by rpki-client