Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
File: MksgMsOPsX9C-IMqTCHh8NXxnuA.mft (raw, json)
Hash identifier: 1Ar3RG23FLAj7rwDFTAsmfL6AEq7yJD2InIlMkfHjOU=
Subject key identifier: 93:78:83:66:04:74:32:CF:1E:CA:BE:E4:BF:2F:1B:C7:C5:52:36:F3
Authority key identifier: 32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
Certificate issuer: /CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Certificate serial: 019A4E8696B20CC4C4EFC0D437B03F0B3712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
Manifest number: 03B2
Signing time: Tue 04 Nov 2025 11:00:34 +0000
Manifest this update: Tue 04 Nov 2025 11:00:34 +0000
Manifest next update: Wed 05 Nov 2025 11:00:34 +0000
Files and hashes: 1: 1-5n0KWaGHCDQYhl2aLfMjhVyMRI.roa (hash: KATmxtMp2ikC0o4XIGyQU9bJkWtT8ILR3+Dm38ZRLnA=)
2: MksgMsOPsX9C-IMqTCHh8NXxnuA.crl (hash: G/ns5yePiXltgl3G8POt15LUvXQO0+8A4KMTYyh9FAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:96:b2:0c:c4:c4:ef:c0:d4:37:b0:3f:0b:37:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Validity
Not Before: Nov 4 11:00:34 2025 GMT
Not After : Nov 5 11:00:34 2025 GMT
Subject: CN=93788366047432cf1ecabee4bf2f1bc7c55236f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:49:f4:c5:1d:2d:36:01:74:56:32:ec:a4:87:
ff:cb:c8:dd:dd:cd:d7:5d:91:1c:14:d9:53:8b:b1:
a1:a0:aa:54:84:ca:b4:1b:0e:da:84:50:0e:52:69:
53:0b:b9:0b:15:c2:13:03:53:58:4b:aa:51:52:03:
d6:24:70:10:b6:23:6e:e5:79:25:49:d2:01:a5:39:
ea:f8:97:c4:3f:04:00:49:5c:aa:7b:2e:9f:11:65:
d3:f9:c6:96:a5:6f:6f:0b:bb:16:2e:67:10:86:5a:
c4:40:63:92:86:c9:15:24:1c:b8:e0:a3:76:63:7b:
41:1e:c8:18:e2:5f:e9:54:bf:db:09:42:27:a5:2b:
e0:39:66:67:53:53:02:4a:e4:a6:cc:46:07:cc:9f:
40:e4:14:ba:66:5b:44:da:ab:87:8c:d3:ad:15:96:
c5:01:55:29:12:64:ae:df:74:01:57:11:0a:12:32:
18:cf:d4:72:fd:10:6d:49:f4:d6:cc:5c:0f:d7:26:
80:82:fa:e7:c5:01:05:5c:9a:16:d3:1a:38:88:c5:
7f:63:d2:38:8a:98:8a:7b:30:53:73:0a:02:31:3b:
5c:31:9c:a0:9c:c0:5b:85:37:b2:cb:e2:94:02:8f:
14:ec:45:91:1f:8b:9c:a8:30:48:d8:17:b9:ba:f3:
ac:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:78:83:66:04:74:32:CF:1E:CA:BE:E4:BF:2F:1B:C7:C5:52:36:F3
X509v3 Authority Key Identifier:
keyid:32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d0:5b:2e:5a:01:d1:8b:71:d6:09:9d:07:2f:72:08:98:3b:
83:20:80:5d:ac:12:9c:a4:d9:e6:f0:48:e3:ab:e8:c5:78:25:
44:1b:ad:73:c2:14:a9:52:e3:be:da:6a:01:a9:67:5d:1d:fe:
94:81:db:3c:91:74:78:10:f0:9e:d8:bb:97:db:6e:7d:c6:82:
57:0f:03:f5:69:41:98:41:b2:4a:c5:94:76:f7:6d:42:1c:b5:
0c:4f:84:c9:b7:4e:9b:a5:7e:ce:1a:26:b3:03:27:8e:03:9e:
a2:34:62:3e:a6:20:72:d0:ea:bb:86:4f:0a:ec:e5:2b:44:5f:
80:a1:86:3f:c3:5d:ef:61:33:cc:36:a9:48:b6:f0:b3:de:e5:
8e:b8:d3:54:a7:e6:19:c7:bc:a9:8e:b3:a7:ce:16:43:51:9f:
ea:1c:27:53:5c:b8:10:95:46:86:1b:63:c2:f1:b9:00:36:49:
e1:1a:0d:69:ce:f7:22:f3:3c:3d:6b:d9:73:50:2f:11:e8:78:
e0:53:04:26:16:2e:71:ed:49:68:c5:b0:f9:98:48:ca:f7:e1:
ac:12:79:00:bd:b5:83:99:d2:bb:f5:69:83:e6:e7:b2:a2:40:
09:d1:ab:7c:da:c7:f2:9f:2b:5f:98:35:18:27:61:92:39:38:
97:97:69:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:07 2025 by rpki-client