Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
File: MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft (raw, json)
Hash identifier: YOgd/RaicobKN+eMQWWVvpMf/lKmL5aEc8OkhEl35x8=
Subject key identifier: 25:25:28:2D:81:91:26:CE:FB:D2:B4:13:11:19:15:4E:C9:CA:C3:0F
Authority key identifier: 32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
Certificate issuer: /CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Certificate serial: 019782E96EE0C57CA219DC2EDEC9C33889D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
Manifest number: 0F3D
Signing time: Wed 18 Jun 2025 12:00:25 +0000
Manifest this update: Wed 18 Jun 2025 12:00:25 +0000
Manifest next update: Thu 19 Jun 2025 12:00:25 +0000
Files and hashes: 1: MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl (hash: G+m2AwzgjR3gVh/1K282QqydTW017pYM0sCIA9CKKNg=)
2: TBM-WxKs_JnUU_yCd07gs-SEpTM.roa (hash: ITKz1rUEY27fZS9fRQNAXZm00rkbdJk7GbuSl5tqJwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:e9:6e:e0:c5:7c:a2:19:dc:2e:de:c9:c3:38:89:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Validity
Not Before: Jun 18 12:00:25 2025 GMT
Not After : Jun 19 12:00:25 2025 GMT
Subject: CN=2525282d819126cefbd2b4131119154ec9cac30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:80:77:4c:75:7a:96:7d:fe:1f:57:0c:d4:
bd:84:1c:05:24:94:52:38:43:3a:f7:a8:55:af:c5:
bb:fe:b8:ad:d8:ae:94:e4:f1:03:c9:02:cb:18:04:
a0:54:58:5c:f0:be:aa:d3:5e:0b:1e:c7:0c:ff:8f:
c7:3b:55:11:7f:50:53:d1:f7:48:39:8b:ec:ea:2c:
a8:ee:22:84:97:df:6f:50:90:d6:86:fe:58:2a:06:
49:33:6b:0d:b3:8e:ad:83:96:f5:4c:80:86:0d:0c:
d8:f4:dd:22:c3:72:fe:5b:be:a9:4f:05:0f:f1:d7:
25:d3:b0:26:27:db:1e:1d:3f:6e:5e:d0:7c:22:76:
97:97:83:10:41:57:8d:5d:28:ca:2d:8a:38:9c:d9:
be:44:69:6b:50:10:73:eb:ed:3c:90:d5:a6:08:00:
ea:2e:5c:68:98:20:9d:3d:39:f4:01:c5:f6:f4:b2:
05:24:4c:7b:5e:9d:9d:f6:12:1f:ac:b4:ac:ef:65:
72:4a:99:56:cf:d2:2b:bd:e8:31:9d:b3:e0:8d:69:
77:9c:9c:6c:11:54:08:36:4b:3f:f1:58:66:51:34:
37:fe:49:b9:9c:8a:a2:66:0b:3a:a1:74:5d:d8:e7:
55:5a:fc:37:a9:78:ad:a1:f0:98:cd:f7:23:d7:a3:
64:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:25:28:2D:81:91:26:CE:FB:D2:B4:13:11:19:15:4E:C9:CA:C3:0F
X509v3 Authority Key Identifier:
keyid:32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:91:4b:0d:c8:65:12:38:3f:bc:43:f6:d0:a0:23:13:f4:3f:
f9:ec:04:b5:ff:d9:9b:ab:04:4d:b3:e8:a9:3e:67:9f:c3:90:
13:a5:05:a9:34:53:1e:c1:85:23:ec:48:6b:cc:f8:37:8e:8c:
a2:3e:dc:5c:ac:ba:a7:35:1a:f2:82:a3:14:cc:71:5f:3c:ec:
97:c1:2b:4a:7a:5b:81:06:7e:81:38:2d:7b:1c:74:d3:c6:e1:
38:36:61:9e:95:a5:ce:42:02:5f:c4:f4:a4:28:c2:f4:31:2f:
0f:c7:c5:bc:17:bf:11:ae:d7:11:d8:7f:73:ee:37:9f:94:b8:
31:6b:93:10:9f:c4:66:b4:9e:36:16:75:e8:6b:cc:69:de:a6:
44:82:b1:8d:f2:04:c3:24:ed:49:a5:f3:f3:9a:63:4c:cd:de:
df:98:cd:fe:5d:e6:54:97:44:35:8b:45:36:b5:56:95:55:dd:
01:a9:cf:9a:d2:94:ec:96:68:cc:27:6d:7a:20:ed:74:27:80:
18:ab:4e:f7:40:52:7e:0c:a8:30:6e:f8:e4:1a:0a:3e:fe:2c:
03:e4:34:ee:6e:1d:3c:b9:32:e7:2b:1a:1f:2f:e4:81:a9:a9:
f0:ce:0c:1f:d0:8b:3d:fa:7d:d1:79:61:75:c3:be:5b:32:be:
71:ae:2b:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeC6W7gxXyiGdwu3snDOInVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYzg0NmYxOTE0MzMyMzBkOTczY2JjOGZkYTA2YjYwMmVi
ZmNiNWIwHhcNMjUwNjE4MTIwMDI1WhcNMjUwNjE5MTIwMDI1WjAzMTEwLwYDVQQD
EygyNTI1MjgyZDgxOTEyNmNlZmJkMmI0MTMxMTE5MTU0ZWM5Y2FjMzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpaAd0x1epZ9/h9XDNS9hBwFJJRS
OEM696hVr8W7/rit2K6U5PEDyQLLGASgVFhc8L6q014LHscM/4/HO1URf1BT0fdI
OYvs6iyo7iKEl99vUJDWhv5YKgZJM2sNs46tg5b1TICGDQzY9N0iw3L+W76pTwUP
8dcl07AmJ9seHT9uXtB8InaXl4MQQVeNXSjKLYo4nNm+RGlrUBBz6+08kNWmCADq
LlxomCCdPTn0AcX29LIFJEx7Xp2d9hIfrLSs72VySplWz9IrvegxnbPgjWl3nJxs
EVQINks/8VhmUTQ3/km5nIqiZgs6oXRd2OdVWvw3qXitofCYzfcj16NkVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUlKC2BkSbO+9K0ExEZFU7JysMPMB8GA1UdIwQY
MBaAFDLIRvGRQzIw2XPLyP2ga2Auv8tbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lNTc1NmUtMTMxNy00NDcyLTgzMDIt
YTIzNDFkM2JiMDUzLzEvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9lNTc1NmUtMTMxNy00NDcyLTgzMDItYTIzNDFkM2JiMDUz
LzEvTXNoRzhaRkRNakRaYzh2SV9hQnJZQzZfeTFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJFLDchl
Ejg/vEP20KAjE/Q/+ewEtf/Zm6sETbPoqT5nn8OQE6UFqTRTHsGFI+xIa8z4N46M
oj7cXKy6pzUa8oKjFMxxXzzsl8ErSnpbgQZ+gTgtexx008bhODZhnpWlzkICX8T0
pCjC9DEvD8fFvBe/Ea7XEdh/c+43n5S4MWuTEJ/EZrSeNhZ16GvMad6mRIKxjfIE
wyTtSaXz85pjTM3e35jN/l3mVJdENYtFNrVWlVXdAanPmtKU7JZozCdteiDtdCeA
GKtO90BSfgyoMG745BoKPv4sA+Q07m4dPLky5ysaHy/kgamp8M4MH9CLPfp90Xlh
dcO+WzK+ca4rbA==
-----END CERTIFICATE-----
Generated at Wed Jun 18 14:05:39 2025 by rpki-client