Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
File: MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft (raw, json)
Hash identifier: 2Zu6pL5yi8AdMzikGkEZ6/mMCylU5s4ybXh8+8Dwm3Y=
Subject key identifier: 39:BD:46:4A:E0:03:DD:67:A6:E0:EF:92:2A:FB:4F:08:5F:74:38:28
Authority key identifier: 32:C2:BE:48:3F:F2:7B:B8:F0:DC:09:CE:0F:71:F2:A8:8E:AF:7E:07
Certificate issuer: /CN=32c2be483ff27bb8f0dc09ce0f71f2a88eaf7e07
Certificate serial: 019A4E191BB4998ED54958A9B3572929C933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 09:00:59 +0000
Manifest this update: Tue 04 Nov 2025 09:00:59 +0000
Manifest next update: Wed 05 Nov 2025 09:00:59 +0000
Files and hashes: 1: 3Ld3_xMK0PlfZFY-qBwXca5iVGM.roa (hash: CjU6hi/Jh6Zo5sGQ2UDjZfEn9Czpv8lCLYgvh/6NOKs=)
2: MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl (hash: /q2Fz8BA+V6TWZ8u3z/6gENiy2pPqzKaYte2n9ey1yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:1b:b4:99:8e:d5:49:58:a9:b3:57:29:29:c9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c2be483ff27bb8f0dc09ce0f71f2a88eaf7e07
Validity
Not Before: Nov 4 09:00:59 2025 GMT
Not After : Nov 5 09:00:59 2025 GMT
Subject: CN=39bd464ae003dd67a6e0ef922afb4f085f743828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f3:90:65:0a:dc:c6:03:c2:3f:c3:86:c5:3f:
49:58:ed:88:dd:19:b2:d2:dd:9f:4c:19:e4:d1:2d:
ca:67:91:17:a2:77:e4:e6:d6:c5:a8:3f:1b:b9:2f:
2c:26:40:25:7b:aa:8f:8d:72:56:ef:cd:33:f8:91:
77:a8:2e:5a:80:28:da:e8:7c:1b:b2:52:96:8d:87:
d0:09:c3:1a:ca:34:e5:11:04:8e:e4:57:e0:d9:72:
b3:1a:7d:1b:e2:9b:85:f2:58:ce:3e:61:dd:6d:92:
e9:6e:6d:af:db:8f:de:10:a1:5c:e8:23:14:39:9f:
cb:9a:ad:c9:48:e1:0c:57:d1:89:69:8a:98:37:7c:
df:85:80:e4:46:5b:55:0a:26:d9:99:4f:ac:b4:75:
ba:9b:bb:60:d3:09:bb:28:66:20:ad:eb:8f:3c:73:
dc:35:dd:ba:ab:82:91:d1:2f:a3:49:f6:1b:81:2d:
87:01:97:de:6f:26:9c:de:09:4a:52:94:70:e3:81:
a9:84:21:1a:94:33:cd:e7:c3:99:f7:1f:63:65:50:
4c:cf:b4:ad:9d:09:4f:6d:c3:ba:f4:a8:46:ef:23:
e3:52:aa:6a:dd:08:c3:ae:c2:bd:d2:6e:ef:71:5b:
fd:26:ec:1a:73:d8:e9:31:bd:c5:8f:79:af:ed:e5:
7d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BD:46:4A:E0:03:DD:67:A6:E0:EF:92:2A:FB:4F:08:5F:74:38:28
X509v3 Authority Key Identifier:
keyid:32:C2:BE:48:3F:F2:7B:B8:F0:DC:09:CE:0F:71:F2:A8:8E:AF:7E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MsK-SD_ye7jw3AnOD3HyqI6vfgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ff00c4-b728-44a0-962d-973db9ce68b5/1/MsK-SD_ye7jw3AnOD3HyqI6vfgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a8:2b:ed:d7:41:09:38:b5:82:d2:a3:82:20:34:80:b2:12:
96:d0:72:a1:5b:ab:33:97:9a:18:50:8e:05:3b:a5:03:2e:77:
e6:16:83:d5:7d:21:36:67:b4:c5:49:14:05:06:7a:1d:6b:be:
05:8d:26:5e:93:4e:fb:b7:a7:9b:5f:8a:80:08:8e:78:9c:b9:
78:47:22:48:39:63:9b:88:e9:e8:d6:c6:8c:ce:ba:37:84:08:
82:b7:e7:c2:76:24:b5:16:a2:c9:8d:44:5f:8c:bb:62:aa:7c:
62:04:9a:8f:43:72:36:fa:c4:a6:ad:07:86:30:0a:30:a9:77:
6b:2d:16:13:4b:76:01:2b:33:44:f9:98:4f:4e:38:ce:d0:00:
ec:33:22:ea:8e:6f:e2:5f:f0:aa:6a:a8:32:4f:55:69:6c:8d:
db:7a:d1:bd:bb:9e:32:d5:14:1e:91:17:5c:46:39:7e:da:e1:
8a:f8:81:8e:7d:ba:0a:68:bb:52:b3:b3:7d:15:84:b9:09:1c:
70:a8:2a:25:80:97:d6:98:26:fe:8e:df:b9:13:7c:b5:10:3b:
67:bb:44:48:14:dc:a4:01:33:b4:52:00:2c:6c:0f:4e:e5:12:
36:a8:c7:03:2f:a5:53:61:74:8d:95:45:6a:75:c5:41:94:cf:
b5:ec:7c:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGRu0mY7VSVips1cpKckzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYzJiZTQ4M2ZmMjdiYjhmMGRjMDljZTBmNzFmMmE4OGVh
ZjdlMDcwHhcNMjUxMTA0MDkwMDU5WhcNMjUxMTA1MDkwMDU5WjAzMTEwLwYDVQQD
EygzOWJkNDY0YWUwMDNkZDY3YTZlMGVmOTIyYWZiNGYwODVmNzQzODI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPOQZQrcxgPCP8OGxT9JWO2I3Rmy
0t2fTBnk0S3KZ5EXonfk5tbFqD8buS8sJkAle6qPjXJW780z+JF3qC5agCja6Hwb
slKWjYfQCcMayjTlEQSO5Ffg2XKzGn0b4puF8ljOPmHdbZLpbm2v24/eEKFc6CMU
OZ/Lmq3JSOEMV9GJaYqYN3zfhYDkRltVCibZmU+stHW6m7tg0wm7KGYgreuPPHPc
Nd26q4KR0S+jSfYbgS2HAZfebyac3glKUpRw44GphCEalDPN58OZ9x9jZVBMz7St
nQlPbcO69KhG7yPjUqpq3QjDrsK90m7vcVv9Juwac9jpMb3Fj3mv7eV9+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDm9RkrgA91npuDvkir7TwhfdDgoMB8GA1UdIwQY
MBaAFDLCvkg/8nu48NwJzg9x8qiOr34HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXNLLVNEX3llN2p3M0FuT0QzSHlxSTZ2ZmdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mZjAwYzQtYjcyOC00NGEwLTk2MmQt
OTczZGI5Y2U2OGI1LzEvTXNLLVNEX3llN2p3M0FuT0QzSHlxSTZ2ZmdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9mZjAwYzQtYjcyOC00NGEwLTk2MmQtOTczZGI5Y2U2OGI1
LzEvTXNLLVNEX3llN2p3M0FuT0QzSHlxSTZ2ZmdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKgr7ddB
CTi1gtKjgiA0gLISltByoVurM5eaGFCOBTulAy535haD1X0hNme0xUkUBQZ6HWu+
BY0mXpNO+7enm1+KgAiOeJy5eEciSDljm4jp6NbGjM66N4QIgrfnwnYktRaiyY1E
X4y7Yqp8YgSaj0NyNvrEpq0HhjAKMKl3ay0WE0t2ASszRPmYT044ztAA7DMi6o5v
4l/wqmqoMk9VaWyN23rRvbueMtUUHpEXXEY5ftrhiviBjn26Cmi7UrOzfRWEuQkc
cKgqJYCX1pgm/o7fuRN8tRA7Z7tESBTcpAEztFIALGwPTuUSNqjHAy+lU2F0jZVF
anXFQZTPtex8zg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:44 2025 by rpki-client