Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
File: MSbg1dN79m8-nYh-rq2cpjwYlIk.mft (raw, json)
Hash identifier: fhfdLDE7WeVdc2ANhxlpcrhvxIj7Fy/WZ86bPMv4NAA=
Subject key identifier: A2:29:97:51:61:1D:17:F4:EB:2E:B3:83:1A:51:14:46:84:0E:FF:A2
Authority key identifier: 31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
Certificate issuer: /CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Certificate serial: 019935DC1321FF391B695FCB9674F11AD9FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
Manifest number: 167A
Signing time: Wed 10 Sep 2025 23:00:39 +0000
Manifest this update: Wed 10 Sep 2025 23:00:39 +0000
Manifest next update: Thu 11 Sep 2025 23:00:39 +0000
Files and hashes: 1: MSbg1dN79m8-nYh-rq2cpjwYlIk.crl (hash: ItWYcss9efYrAMnZD2ObWRBOXEco5iAp9N+AMinkc94=)
2: UmPwqKyARZqa-K92MHrGqC9QyYg.roa (hash: j/qBkJJtXcMUmDoWtmsXwP9m2yfPn26NNyaQXDeqLdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:dc:13:21:ff:39:1b:69:5f:cb:96:74:f1:1a:d9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Validity
Not Before: Sep 10 23:00:39 2025 GMT
Not After : Sep 11 23:00:39 2025 GMT
Subject: CN=a2299751611d17f4eb2eb3831a511446840effa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6a:47:65:52:46:bc:4d:5f:10:d4:79:6c:be:
dc:27:1a:fc:7b:ee:00:f5:ba:11:29:c9:11:d4:8e:
f1:83:1f:9a:fc:cc:b4:a4:2f:1c:1b:84:0c:51:6a:
3b:1d:7b:83:4f:41:e4:8d:8a:0e:54:88:d0:f9:3f:
c7:cd:82:e0:11:b3:a8:be:6f:e8:f2:8b:1c:b8:da:
cb:89:12:4e:ab:fd:d1:de:86:35:15:52:b9:66:7f:
c4:89:62:14:c6:bc:81:d0:a8:76:cf:3a:55:48:b1:
24:ba:c8:0f:3b:24:31:1b:86:58:ba:09:9e:bb:d0:
eb:29:ad:db:45:81:33:ff:4f:4a:bb:59:b4:91:53:
e1:8c:a0:73:38:eb:19:ff:6c:ae:00:98:53:cd:13:
b7:03:cc:b6:46:14:8a:3c:37:3e:61:3c:63:f3:28:
89:83:46:ac:7c:f9:63:c3:3b:28:9e:2a:5d:ef:d2:
bd:cd:ed:c5:9c:45:48:93:03:d2:f1:00:f7:60:6f:
b3:4c:e4:bd:ce:9a:1d:8c:7e:09:b8:36:b3:f7:ba:
c1:3d:f8:00:a6:e4:ee:74:8e:11:c4:3f:d3:68:c6:
31:a5:ba:32:9d:35:41:92:00:d4:6d:84:cd:89:3f:
48:c0:b4:81:95:43:1a:17:bb:5d:73:94:02:7c:2c:
ad:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:29:97:51:61:1D:17:F4:EB:2E:B3:83:1A:51:14:46:84:0E:FF:A2
X509v3 Authority Key Identifier:
keyid:31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:dd:fa:b4:fe:6a:61:62:c0:57:5a:ed:a8:a4:61:ac:1c:e4:
f0:09:cd:63:d3:9d:b9:6b:61:aa:fa:b5:1a:5d:a1:b7:98:85:
3d:b3:36:1a:e1:94:82:61:4b:91:d5:f6:7d:54:06:32:e9:ba:
e7:5f:fb:1c:85:51:46:89:95:9a:c4:b5:71:1b:8a:c4:5b:f9:
d5:4a:9f:07:f1:b0:ef:4f:52:ed:6c:2c:73:b1:24:e4:ec:0b:
36:34:f6:72:da:3d:63:9b:d8:96:c5:a8:a7:00:91:2a:a0:d3:
74:6b:bf:b7:92:47:16:0d:f1:59:91:7b:cf:aa:b7:0b:41:e2:
96:6c:fb:47:cb:05:e2:87:94:01:7b:e1:86:5b:64:a8:d9:9b:
93:2e:cd:d8:54:cc:f0:57:f7:70:9b:72:88:16:86:25:49:55:
cc:01:aa:b6:d2:cf:be:34:fb:fc:5f:24:45:91:0e:59:5c:63:
af:0e:11:e6:93:82:29:d4:2b:58:d1:50:72:8f:38:09:00:7a:
21:0a:fc:9e:8a:a5:e8:4c:b3:c2:30:7d:61:15:56:42:18:17:
9c:1f:c6:9a:c6:d1:d1:ae:f1:82:1d:64:06:92:89:22:1d:36:
47:36:3d:14:2b:e9:a6:49:d5:b5:a5:d1:97:9e:e6:a5:c0:58:
42:0d:19:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 08:02:07 2025 by rpki-client