
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
File: MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft (raw, json)
Hash identifier: 4vTPffDIP/YmzZ51BrGxYo5bEYk/f05QTxvEgjo9iJE=
Subject key identifier: 5A:38:37:CC:08:EF:44:27:FA:C0:0C:6D:46:7A:41:88:7C:0A:7E:1A
Authority key identifier: 32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
Certificate issuer: /CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Certificate serial: 01987FE72572DE87D9E067A710C31F0DE016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
Manifest number: 0FC0
Signing time: Wed 06 Aug 2025 15:01:51 +0000
Manifest this update: Wed 06 Aug 2025 15:01:51 +0000
Manifest next update: Thu 07 Aug 2025 15:01:51 +0000
Files and hashes: 1: MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl (hash: ynkUlsM2iwWzAPnQ/QHs6UCT4W0ztPBlhORYF/Z6+F0=)
2: TBM-WxKs_JnUU_yCd07gs-SEpTM.roa (hash: ITKz1rUEY27fZS9fRQNAXZm00rkbdJk7GbuSl5tqJwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 15:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:e7:25:72:de:87:d9:e0:67:a7:10:c3:1f:0d:e0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Validity
Not Before: Aug 6 15:01:51 2025 GMT
Not After : Aug 7 15:01:51 2025 GMT
Subject: CN=5a3837cc08ef4427fac00c6d467a41887c0a7e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c2:31:bf:68:12:d9:cf:d0:b1:ca:02:ac:c3:
48:0b:a2:50:23:22:0b:a5:ae:0d:e1:6c:bc:be:68:
d6:4c:9f:46:61:33:94:ac:d0:70:81:6b:25:35:20:
3b:e9:08:f6:30:c4:5a:5f:b4:af:c1:5d:46:da:01:
88:ef:5a:cf:dc:71:bd:b1:d9:ae:72:ff:67:4a:f5:
78:9b:4a:1b:ef:f3:1b:f6:96:39:59:53:dd:fc:19:
d6:75:37:83:b7:bd:26:a6:24:71:f0:cc:55:f4:a4:
44:6e:10:c3:8a:74:23:ee:36:96:9a:6f:43:8d:14:
ef:d9:83:3a:33:9a:f7:c3:32:6b:2f:1a:ff:32:b8:
14:4a:a8:f1:44:9c:f3:aa:96:cb:e6:d4:a1:75:ad:
66:3e:53:8c:2f:32:31:f0:8d:22:e6:f0:f9:9c:ae:
d7:85:22:61:44:44:1f:ae:3d:a5:66:9f:9e:ce:5f:
cc:35:80:5d:9c:15:8f:29:37:3a:d2:d8:4a:90:88:
e1:97:d4:eb:95:f5:f2:6c:3f:0b:c7:a1:02:66:27:
2d:e3:8a:e2:40:f1:20:7a:70:c6:91:c6:89:7e:6c:
b3:4f:6d:6e:ca:38:10:fc:dc:8a:64:12:a7:93:13:
8c:1e:98:e3:2a:65:b4:fb:6c:b7:47:73:31:e5:56:
ca:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:38:37:CC:08:EF:44:27:FA:C0:0C:6D:46:7A:41:88:7C:0A:7E:1A
X509v3 Authority Key Identifier:
keyid:32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:cd:5c:6f:b3:01:d3:31:60:d4:33:5b:b7:8f:f5:39:27:be:
05:9c:c8:b6:fa:85:3a:b1:b6:19:68:91:c0:83:b9:a6:d6:d7:
4d:67:46:84:c5:d1:32:cb:4e:6c:61:4a:87:81:31:28:f2:28:
94:0a:0f:b1:0f:3d:0a:e0:7e:6d:b0:09:7e:eb:46:44:f3:3f:
ef:61:5c:53:97:bb:a8:d0:ae:ea:f9:94:08:ca:79:a1:cd:ce:
3a:c9:56:43:c1:b5:7c:e2:86:50:12:42:fb:aa:33:57:a8:16:
9d:48:a8:b7:53:73:fd:76:2a:4e:7d:1d:bb:39:b8:9d:1e:20:
94:5a:8a:cd:35:c6:96:7b:e1:05:63:bd:e3:c3:50:18:f2:ea:
e0:82:47:c7:64:80:e5:e9:a1:26:a0:d7:1d:42:2b:70:17:00:
6b:b4:1a:fc:32:0b:36:aa:78:46:0f:a6:8e:21:10:7d:d5:df:
1d:24:ef:54:ba:82:42:fe:98:36:04:03:a3:9a:d0:97:b7:a6:
39:07:61:ca:3e:63:73:0a:8e:9a:9b:55:22:27:af:4d:88:5d:
d9:6e:6d:7c:b8:41:47:67:f0:dd:c8:8b:79:ae:04:31:4e:4a:
31:bc:5b:7c:11:aa:9d:b9:2b:44:44:d5:97:10:84:09:71:c7:
f9:97:81:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:32:44 2025 by rpki-client