Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
File: MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft (raw, json)
Hash identifier: +bW1csyfhvQeuvT/QTF7vdIcjPfZWMUTKxAql1LoHMU=
Subject key identifier: 05:64:A9:9D:85:7C:3E:16:2F:18:F0:55:28:6A:C5:AA:64:8F:F6:75
Authority key identifier: 32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
Certificate issuer: /CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Certificate serial: 019A4D73CA1269F7C996FFCE2D6880C2DD2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
Manifest number: 10AF
Signing time: Tue 04 Nov 2025 06:00:25 +0000
Manifest this update: Tue 04 Nov 2025 06:00:25 +0000
Manifest next update: Wed 05 Nov 2025 06:00:25 +0000
Files and hashes: 1: MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl (hash: R7d78ReFbpMh6JXzpycpsbNc6CKmoOY4HZfLZbiXglk=)
2: TBM-WxKs_JnUU_yCd07gs-SEpTM.roa (hash: ITKz1rUEY27fZS9fRQNAXZm00rkbdJk7GbuSl5tqJwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:ca:12:69:f7:c9:96:ff:ce:2d:68:80:c2:dd:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Validity
Not Before: Nov 4 06:00:25 2025 GMT
Not After : Nov 5 06:00:25 2025 GMT
Subject: CN=0564a99d857c3e162f18f055286ac5aa648ff675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:72:2d:6d:55:8a:94:57:d2:be:08:13:88:0a:
79:80:62:53:fd:a8:67:2b:3c:7d:9b:3b:21:cc:84:
1b:a9:f9:08:f9:aa:d4:2d:91:ff:9a:5c:93:70:73:
1f:4b:79:75:d8:13:dd:0a:4d:c1:31:e6:d9:96:7e:
b1:36:d0:1d:ad:b5:4c:98:8c:00:87:ca:1b:f1:8b:
5b:75:9d:c1:84:51:a4:6b:58:48:5a:63:f0:7d:04:
e0:86:03:ec:72:dd:a2:bb:6d:aa:3e:ef:95:e7:d8:
0a:b3:8c:0f:9c:7c:ec:17:fd:b7:cd:12:af:d2:fd:
20:58:a5:ef:82:ae:cb:80:9d:55:ad:c5:39:3c:42:
5b:2e:25:92:e8:28:23:a5:dd:8c:1c:d8:af:22:3f:
ec:42:7f:d1:6a:d2:4c:da:b1:4d:e8:0d:5f:1b:75:
18:54:9a:d8:eb:6c:44:d8:0c:bd:d3:ec:69:ee:f3:
24:86:ff:a8:6d:c3:8d:37:76:81:1c:a6:d3:2d:b7:
ef:63:01:74:fe:ae:c2:e2:40:0d:83:da:df:67:ce:
32:7a:4b:01:58:c0:0f:e3:cd:08:11:d5:95:8f:d0:
d6:b0:93:17:7d:d5:46:c8:8d:ae:64:65:9b:b1:97:
60:0b:73:a6:7a:dc:d5:bf:57:e1:d6:c2:3f:2c:3c:
92:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:64:A9:9D:85:7C:3E:16:2F:18:F0:55:28:6A:C5:AA:64:8F:F6:75
X509v3 Authority Key Identifier:
keyid:32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:62:4e:1d:63:e5:30:f5:62:30:e6:ef:b5:6b:98:39:96:d6:
b3:5b:72:62:d2:98:dc:38:0d:98:0a:99:0e:bc:ec:f3:ee:a4:
f4:c1:79:f3:b5:35:ed:7a:f8:f4:43:7d:bf:7a:40:57:49:53:
6e:81:09:f8:4f:47:21:73:dd:6b:7a:a7:d5:9a:ee:f2:46:2e:
7d:b1:ff:8c:d6:73:89:53:c9:90:58:2d:be:f7:1a:9d:71:e9:
67:38:72:85:d3:13:9b:64:0e:15:64:ba:be:38:72:c7:72:c6:
9e:b8:58:f4:5d:3e:d6:c0:86:f3:ce:e0:7c:45:77:09:b5:55:
a7:cb:ab:20:9f:2c:ae:b1:9e:19:b0:72:9a:28:16:14:7f:38:
a6:1f:ba:c9:5a:79:7f:d4:81:ff:95:89:dc:06:0f:0e:59:56:
d3:3b:cf:e6:a1:47:b1:a3:51:9f:ae:26:82:1c:d0:b6:9b:84:
15:58:2a:56:eb:ab:70:e1:cf:16:ba:4f:00:ae:31:9c:cd:c8:
84:b5:aa:ec:14:f8:4b:74:91:9f:d8:74:91:4e:11:23:a5:b7:
ae:b3:1a:46:40:53:a1:f9:f2:37:d7:20:bc:2f:e4:0c:da:21:
8f:20:a5:e4:b2:f2:f0:e0:2b:6f:4b:af:cd:e7:ed:6c:33:60:
00:98:76:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc8oSaffJlv/OLWiAwt0uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYzg0NmYxOTE0MzMyMzBkOTczY2JjOGZkYTA2YjYwMmVi
ZmNiNWIwHhcNMjUxMTA0MDYwMDI1WhcNMjUxMTA1MDYwMDI1WjAzMTEwLwYDVQQD
EygwNTY0YTk5ZDg1N2MzZTE2MmYxOGYwNTUyODZhYzVhYTY0OGZmNjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3ItbVWKlFfSvggTiAp5gGJT/ahn
Kzx9mzshzIQbqfkI+arULZH/mlyTcHMfS3l12BPdCk3BMebZln6xNtAdrbVMmIwA
h8ob8YtbdZ3BhFGka1hIWmPwfQTghgPsct2iu22qPu+V59gKs4wPnHzsF/23zRKv
0v0gWKXvgq7LgJ1VrcU5PEJbLiWS6Cgjpd2MHNivIj/sQn/RatJM2rFN6A1fG3UY
VJrY62xE2Ay90+xp7vMkhv+obcONN3aBHKbTLbfvYwF0/q7C4kANg9rfZ84yeksB
WMAP480IEdWVj9DWsJMXfdVGyI2uZGWbsZdgC3OmetzVv1fh1sI/LDySgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVkqZ2FfD4WLxjwVShqxapkj/Z1MB8GA1UdIwQY
MBaAFDLIRvGRQzIw2XPLyP2ga2Auv8tbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lNTc1NmUtMTMxNy00NDcyLTgzMDIt
YTIzNDFkM2JiMDUzLzEvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9lNTc1NmUtMTMxNy00NDcyLTgzMDItYTIzNDFkM2JiMDUz
LzEvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXWJOHWPl
MPViMObvtWuYOZbWs1tyYtKY3DgNmAqZDrzs8+6k9MF587U17Xr49EN9v3pAV0lT
boEJ+E9HIXPda3qn1Zru8kYufbH/jNZziVPJkFgtvvcanXHpZzhyhdMTm2QOFWS6
vjhyx3LGnrhY9F0+1sCG887gfEV3CbVVp8urIJ8srrGeGbBymigWFH84ph+6yVp5
f9SB/5WJ3AYPDllW0zvP5qFHsaNRn64mghzQtpuEFVgqVuurcOHPFrpPAK4xnM3I
hLWq7BT4S3SRn9h0kU4RI6W3rrMaRkBTofnyN9cgvC/kDNohjyCl5LLy8OArb0uv
zeftbDNgAJh2BA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:38:02 2025 by rpki-client