Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
File: MSbg1dN79m8-nYh-rq2cpjwYlIk.mft (raw, json)
Hash identifier: /JOrpgyI9gQchJ5wGoe1FbKn9Eg2Ah05TUTjKON69nU=
Subject key identifier: 97:E8:A6:DC:E6:F6:31:6C:EA:C5:A9:B9:8C:8A:86:4B:03:28:22:4C
Authority key identifier: 31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
Certificate issuer: /CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Certificate serial: 019A23653D7A1018C68A87C451345A720A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
Manifest number: 16F5
Signing time: Mon 27 Oct 2025 02:00:28 +0000
Manifest this update: Mon 27 Oct 2025 02:00:28 +0000
Manifest next update: Tue 28 Oct 2025 02:00:28 +0000
Files and hashes: 1: MSbg1dN79m8-nYh-rq2cpjwYlIk.crl (hash: 6jiphs7GvvGwe4usbLILRjQKrFoo2wBlbRbaAWBfRfs=)
2: UmPwqKyARZqa-K92MHrGqC9QyYg.roa (hash: j/qBkJJtXcMUmDoWtmsXwP9m2yfPn26NNyaQXDeqLdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:3d:7a:10:18:c6:8a:87:c4:51:34:5a:72:0a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Validity
Not Before: Oct 27 02:00:28 2025 GMT
Not After : Oct 28 02:00:28 2025 GMT
Subject: CN=97e8a6dce6f6316ceac5a9b98c8a864b0328224c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:e7:fd:22:4d:89:70:73:a9:32:97:22:0a:
42:f7:f9:78:b4:0b:0b:73:45:ff:5c:9c:4c:2d:68:
a5:4d:24:f9:d5:14:07:bb:84:58:1e:5b:19:20:b9:
16:e9:69:3e:23:03:7d:e8:45:8d:94:b6:99:53:88:
93:ab:ae:2e:8c:ac:f7:ae:dc:b8:55:d5:ff:45:74:
31:cc:61:34:5f:8a:74:64:f9:3c:84:4c:51:05:d8:
69:c2:dc:45:51:5c:c5:49:36:cc:b7:64:f4:d6:5d:
e4:9c:e1:27:c3:09:ac:b4:ad:6d:05:88:ff:82:9c:
34:9a:bf:73:c9:13:00:a6:76:d5:ec:96:59:a8:13:
93:5c:34:3c:28:c0:84:23:c2:5b:bd:a3:f9:2d:2f:
f6:e1:e8:63:8d:a8:c1:08:58:32:ba:b4:af:44:93:
1d:4e:06:f3:ee:a8:de:3b:34:f6:1f:e9:91:8f:82:
21:5e:57:35:3c:ec:cc:41:86:ea:9e:42:13:4e:c4:
6b:5e:f7:34:f3:e3:92:bf:60:01:d8:53:bd:ea:16:
45:c5:2a:64:57:94:e1:a5:00:64:95:3f:9f:fe:ff:
c6:e7:6d:44:8a:c5:49:28:f6:9b:4b:b5:1a:b0:1e:
7c:ea:74:66:a1:d3:a3:04:4d:8f:f3:c2:a7:6c:1e:
b0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E8:A6:DC:E6:F6:31:6C:EA:C5:A9:B9:8C:8A:86:4B:03:28:22:4C
X509v3 Authority Key Identifier:
keyid:31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:88:62:b2:f7:fe:04:60:2d:ee:d8:10:df:56:2f:b3:fa:7b:
e3:1e:9d:7c:64:a7:71:83:8c:20:17:26:d7:d0:25:50:37:b7:
a6:b7:8b:36:62:b2:b2:0b:78:fe:cf:8e:ec:55:7c:a6:a8:22:
94:90:6a:9d:17:69:29:00:83:fc:64:83:6e:c3:af:1a:ab:04:
b3:00:f2:31:e3:51:d3:c5:20:4e:b4:64:9f:09:6c:1a:4e:2d:
43:2b:2b:d9:06:2f:33:f9:d2:57:e9:4a:30:46:45:a0:16:13:
b0:c6:40:d5:04:c4:fd:31:e2:ea:e5:27:b0:ab:ea:6d:74:ef:
37:24:22:84:10:cf:94:43:67:4b:2e:fe:c8:19:64:c8:70:43:
33:1f:43:dc:ff:37:46:05:ce:fa:52:11:63:e6:5e:5a:cc:67:
0e:0a:81:d7:2f:a4:5a:2b:33:e3:05:d4:67:27:5a:0f:a7:b9:
5d:0c:91:a0:f0:92:c1:51:31:a1:ba:38:fa:8c:a6:d5:9d:4d:
e9:c2:85:14:4e:1f:e3:ed:8d:26:17:ab:c6:a4:c5:b6:d5:70:
3c:19:27:b0:ee:f1:81:ba:47:9e:14:a2:48:25:19:3c:f4:4f:
77:06:3e:2a:be:16:b1:b1:db:97:57:31:f7:2e:c9:98:2a:6f:
11:b3:e8:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZojZT16EBjGiofEUTRacgqdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMjZlMGQ1ZDM3YmY2NmYzZTlkODg3ZWFlYWQ5Y2E2M2Mx
ODk0ODkwHhcNMjUxMDI3MDIwMDI4WhcNMjUxMDI4MDIwMDI4WjAzMTEwLwYDVQQD
Eyg5N2U4YTZkY2U2ZjYzMTZjZWFjNWE5Yjk4YzhhODY0YjAzMjgyMjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso/n/SJNiXBzqTKXIgpC9/l4tAsL
c0X/XJxMLWilTST51RQHu4RYHlsZILkW6Wk+IwN96EWNlLaZU4iTq64ujKz3rty4
VdX/RXQxzGE0X4p0ZPk8hExRBdhpwtxFUVzFSTbMt2T01l3knOEnwwmstK1tBYj/
gpw0mr9zyRMApnbV7JZZqBOTXDQ8KMCEI8JbvaP5LS/24ehjjajBCFgyurSvRJMd
Tgbz7qjeOzT2H+mRj4IhXlc1POzMQYbqnkITTsRrXvc08+OSv2AB2FO96hZFxSpk
V5ThpQBklT+f/v/G521EisVJKPabS7UasB586nRmodOjBE2P88KnbB6weQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfoptzm9jFs6sWpuYyKhksDKCJMMB8GA1UdIwQY
MBaAFDEm4NXTe/ZvPp2Ifq6tnKY8GJSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVNiZzFkTjc5bTgtblloLXJxMmNwandZbElrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMmVmNWEtZTJiOS00OTk5LWJmYjIt
NmU4ZWQzYzczMDdlLzEvTVNiZzFkTjc5bTgtblloLXJxMmNwandZbElrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zMmVmNWEtZTJiOS00OTk5LWJmYjItNmU4ZWQzYzczMDdl
LzEvTVNiZzFkTjc5bTgtblloLXJxMmNwandZbElrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYhisvf+
BGAt7tgQ31Yvs/p74x6dfGSncYOMIBcm19AlUDe3preLNmKysgt4/s+O7FV8pqgi
lJBqnRdpKQCD/GSDbsOvGqsEswDyMeNR08UgTrRknwlsGk4tQysr2QYvM/nSV+lK
MEZFoBYTsMZA1QTE/THi6uUnsKvqbXTvNyQihBDPlENnSy7+yBlkyHBDMx9D3P83
RgXO+lIRY+ZeWsxnDgqB1y+kWisz4wXUZydaD6e5XQyRoPCSwVExobo4+oym1Z1N
6cKFFE4f4+2NJherxqTFttVwPBknsO7xgbpHnhSiSCUZPPRPdwY+Kr4WsbHbl1cx
9y7JmCpvEbPovQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 09:19:37 2025 by rpki-client