Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
File: msLwFwWoWaHX3lAwr4LfmlLI7C8.mft (raw, json)
Hash identifier: LoIBZd3hlgORfqCZjG09Bbn95qDYjFufP0SqAYSLBm0=
Subject key identifier: 7A:30:BC:AB:E8:98:A3:E6:2D:B7:C1:BF:A8:AD:62:3A:E8:20:64:78
Authority key identifier: 9A:C2:F0:17:05:A8:59:A1:D7:DE:50:30:AF:82:DF:9A:52:C8:EC:2F
Certificate issuer: /CN=9ac2f01705a859a1d7de5030af82df9a52c8ec2f
Certificate serial: 01987D8BC4C5C2B71DAA398734AF882A3272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
Manifest number: 1618
Signing time: Wed 06 Aug 2025 04:02:48 +0000
Manifest this update: Wed 06 Aug 2025 04:02:48 +0000
Manifest next update: Thu 07 Aug 2025 04:02:48 +0000
Files and hashes: 1: msLwFwWoWaHX3lAwr4LfmlLI7C8.crl (hash: RGoidhdRk8z3MFSdtKgMv2Jm3nDX1MwW/mTQl6dj5y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:c4:c5:c2:b7:1d:aa:39:87:34:af:88:2a:32:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ac2f01705a859a1d7de5030af82df9a52c8ec2f
Validity
Not Before: Aug 6 04:02:48 2025 GMT
Not After : Aug 7 04:02:48 2025 GMT
Subject: CN=7a30bcabe898a3e62db7c1bfa8ad623ae8206478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:59:ff:bf:05:04:e1:94:c8:74:53:c5:83:58:
62:fd:68:63:e5:3d:aa:2c:2b:78:66:ad:ed:78:f4:
3a:fd:1b:95:fc:16:f6:69:8c:2a:f2:6c:b4:1a:e2:
7b:99:e5:f7:62:3a:dd:c4:0d:67:2f:d9:f5:33:72:
43:e6:b5:e5:b3:b3:5d:7e:ae:d4:90:07:c6:ea:cc:
8b:14:ae:48:3f:ef:bd:33:b6:2e:d4:ae:c3:70:1e:
0e:96:98:39:f6:aa:46:ec:9f:15:39:6d:cd:6f:70:
3c:21:b9:0e:73:4a:7a:45:3e:73:73:89:89:ef:47:
07:ff:6e:b7:99:e5:72:19:8a:3f:a1:4f:bb:44:ec:
a0:71:b5:12:8d:bf:3d:c9:c3:b1:fa:ba:89:8d:df:
02:25:ce:46:0b:dd:3c:68:2f:35:4e:47:01:06:fc:
65:33:3b:34:27:db:7a:e4:4b:ff:7c:43:c3:54:73:
7e:59:4c:47:07:94:5c:38:cf:b2:1f:02:47:94:94:
b1:91:d6:34:97:71:45:f4:92:d2:09:c7:89:de:09:
21:aa:94:3f:87:43:58:0b:48:91:f9:ef:f0:74:8b:
ba:99:7a:59:1c:ba:af:4c:2a:26:43:bf:b3:4d:8d:
f1:e5:ed:33:f4:fa:32:ef:cc:91:d5:4a:a1:6b:75:
49:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:30:BC:AB:E8:98:A3:E6:2D:B7:C1:BF:A8:AD:62:3A:E8:20:64:78
X509v3 Authority Key Identifier:
keyid:9A:C2:F0:17:05:A8:59:A1:D7:DE:50:30:AF:82:DF:9A:52:C8:EC:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:35:12:75:96:b9:f6:f0:ed:fb:50:80:55:31:a4:e7:2b:87:
22:a0:98:0e:59:b0:5d:33:be:a0:1e:3a:aa:2c:70:8d:2a:8e:
93:63:56:e4:c4:3a:b8:6d:50:ed:78:34:b4:d2:2f:46:a0:01:
f9:90:aa:7b:a0:2e:bd:dd:cc:17:1e:32:75:97:88:89:73:ec:
57:cf:ed:ff:b0:a9:33:25:31:fe:b3:8d:f5:70:d2:a7:47:a6:
33:5a:fe:44:6d:7c:15:ce:5b:3d:f6:33:53:a0:c6:e4:bc:11:
63:42:61:27:20:c3:c1:84:72:f4:cc:33:a5:02:9e:e4:32:70:
86:a2:cc:ab:a1:d7:a3:02:c5:21:94:eb:36:12:3a:1c:93:c9:
d7:ef:5c:b2:1a:d8:e9:91:0a:fa:44:ba:05:4f:91:3a:b3:6c:
33:3e:52:d5:39:9e:2f:c1:68:e3:80:ba:6a:12:d3:32:6d:83:
bb:c6:9d:ef:05:76:6d:63:82:25:a1:af:c4:1d:74:7d:c8:b7:
8a:79:d0:f2:ad:81:9a:29:e9:e7:50:a1:75:34:3d:3f:9f:d4:
1c:31:e0:2d:73:25:64:21:a7:d8:cd:51:44:bd:94:a0:2b:ce:
b1:ea:a3:7a:44:4f:f1:45:8b:de:de:62:a7:59:89:ca:d4:a5:
f0:59:2a:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9i8TFwrcdqjmHNK+IKjJyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhYzJmMDE3MDVhODU5YTFkN2RlNTAzMGFmODJkZjlhNTJj
OGVjMmYwHhcNMjUwODA2MDQwMjQ4WhcNMjUwODA3MDQwMjQ4WjAzMTEwLwYDVQQD
Eyg3YTMwYmNhYmU4OThhM2U2MmRiN2MxYmZhOGFkNjIzYWU4MjA2NDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwln/vwUE4ZTIdFPFg1hi/Whj5T2q
LCt4Zq3tePQ6/RuV/Bb2aYwq8my0GuJ7meX3YjrdxA1nL9n1M3JD5rXls7Ndfq7U
kAfG6syLFK5IP++9M7Yu1K7DcB4Olpg59qpG7J8VOW3Nb3A8IbkOc0p6RT5zc4mJ
70cH/263meVyGYo/oU+7ROygcbUSjb89ycOx+rqJjd8CJc5GC908aC81TkcBBvxl
Mzs0J9t65Ev/fEPDVHN+WUxHB5RcOM+yHwJHlJSxkdY0l3FF9JLSCceJ3gkhqpQ/
h0NYC0iR+e/wdIu6mXpZHLqvTComQ7+zTY3x5e0z9Poy78yR1Uqha3VJXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHowvKvomKPmLbfBv6itYjroIGR4MB8GA1UdIwQY
MBaAFJrC8BcFqFmh195QMK+C35pSyOwvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXNMd0Z3V29XYUhYM2xBd3I0TGZtbExJN0M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy81ZjZiYTAtOWNhNS00YTY3LTlmM2Et
MTg3YTU3YTRkNjc3LzEvbXNMd0Z3V29XYUhYM2xBd3I0TGZtbExJN0M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy81ZjZiYTAtOWNhNS00YTY3LTlmM2EtMTg3YTU3YTRkNjc3
LzEvbXNMd0Z3V29XYUhYM2xBd3I0TGZtbExJN0M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDUSdZa5
9vDt+1CAVTGk5yuHIqCYDlmwXTO+oB46qixwjSqOk2NW5MQ6uG1Q7Xg0tNIvRqAB
+ZCqe6Auvd3MFx4ydZeIiXPsV8/t/7CpMyUx/rON9XDSp0emM1r+RG18Fc5bPfYz
U6DG5LwRY0JhJyDDwYRy9MwzpQKe5DJwhqLMq6HXowLFIZTrNhI6HJPJ1+9cshrY
6ZEK+kS6BU+ROrNsMz5S1TmeL8Fo44C6ahLTMm2Du8ad7wV2bWOCJaGvxB10fci3
innQ8q2Bminp51ChdTQ9P5/UHDHgLXMlZCGn2M1RRL2UoCvOseqjekRP8UWL3t5i
p1mJytSl8Fkqpg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:32 2025 by rpki-client