Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
File: MsAnS8F_nHXNP8EPi1gloZOCq08.mft (raw, json)
Hash identifier: EQSkTDGZgsdkXtGvdD73KBZyMYZc5BvIrNAmqU0X6Ok=
Subject key identifier: E8:9A:58:31:20:DA:8E:E0:6C:05:0A:F8:E2:11:D2:7B:A9:83:71:89
Authority key identifier: 32:C0:27:4B:C1:7F:9C:75:CD:3F:C1:0F:8B:58:25:A1:93:82:AB:4F
Certificate issuer: /CN=32c0274bc17f9c75cd3fc10f8b5825a19382ab4f
Certificate serial: 0198737457D2EF061D46CF7EE2560203D91A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 05:01:00 +0000
Manifest this update: Mon 04 Aug 2025 05:01:00 +0000
Manifest next update: Tue 05 Aug 2025 05:01:00 +0000
Files and hashes: 1: MsAnS8F_nHXNP8EPi1gloZOCq08.crl (hash: 7HUtJ77jUctAFoGBQ287XQdGAxdxPf6SeJzPcPlMzEI=)
2: TOIzNWX91Fklg3hNSjJLHCHMbgY.roa (hash: vI/ydx27fqpwXcKYk7mipA2wZEP7zEBHHuwYkt7nRa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:57:d2:ef:06:1d:46:cf:7e:e2:56:02:03:d9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c0274bc17f9c75cd3fc10f8b5825a19382ab4f
Validity
Not Before: Aug 4 05:01:00 2025 GMT
Not After : Aug 5 05:01:00 2025 GMT
Subject: CN=e89a583120da8ee06c050af8e211d27ba9837189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bf:4f:8d:10:44:3e:4f:88:bd:77:c5:34:7b:
20:d5:2d:ac:fd:45:11:35:f8:2c:3d:f0:8b:03:d5:
d9:df:38:96:a5:60:8b:3f:36:c7:75:a3:3b:bc:ea:
ba:98:c5:3d:a8:df:37:da:bc:72:c4:b5:6c:63:ed:
da:c5:3b:0f:3b:de:19:2f:32:3d:13:5c:85:fa:50:
d2:aa:14:a0:0c:07:fc:3f:50:84:2f:af:d9:5c:74:
b8:2b:2d:db:d8:85:9a:1f:2c:4e:c1:1e:7d:85:66:
05:a4:0a:20:b2:0c:b5:11:11:32:ce:3c:3c:92:27:
37:1d:33:00:d9:25:6d:12:fa:07:15:35:69:8b:7b:
49:73:6b:df:4f:47:56:91:d0:9b:59:76:86:21:6d:
da:b9:ce:8e:4b:af:56:72:d1:e2:b2:4f:e3:20:98:
af:b2:26:fe:84:f3:96:af:d8:98:24:ca:ff:40:35:
1e:34:28:b9:e0:ec:1e:2e:bb:9a:3d:1d:4b:18:7a:
fa:ab:6c:39:4f:98:72:0a:7a:be:e3:ca:71:3a:e5:
81:c0:ca:d8:5a:8d:fc:36:2b:d3:fa:a0:fb:94:5a:
12:bd:aa:b9:b9:b4:05:bb:77:3b:29:77:80:44:84:
80:84:24:85:2f:be:6e:d5:32:fc:fe:af:17:a0:f9:
40:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9A:58:31:20:DA:8E:E0:6C:05:0A:F8:E2:11:D2:7B:A9:83:71:89
X509v3 Authority Key Identifier:
keyid:32:C0:27:4B:C1:7F:9C:75:CD:3F:C1:0F:8B:58:25:A1:93:82:AB:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:db:30:e7:dc:34:ff:58:a4:a7:7a:64:7d:80:f5:b8:c4:9c:
d2:ef:61:6a:d9:a3:02:f0:05:83:e0:39:c9:08:2f:6f:bd:ba:
dc:c1:26:fb:72:b7:b2:a5:4f:b0:b1:1d:af:81:1d:27:fe:b8:
71:1a:64:4d:5a:03:ba:c5:00:2d:11:49:2b:0e:1d:51:2e:59:
3d:bc:97:9d:b4:c6:ab:c6:13:3d:3c:78:8e:60:9e:c4:a1:02:
98:6d:8d:27:22:b2:61:f2:c8:80:7f:27:68:00:10:ca:03:21:
8b:33:9a:7b:8c:9a:4f:46:21:69:f5:d6:f3:08:2c:53:51:e3:
a1:31:4f:b0:1e:29:67:96:2c:05:be:52:e7:4b:85:d4:e9:9d:
93:6c:08:55:8d:59:c3:9b:df:35:ef:11:1b:f7:31:8c:b2:50:
04:3a:e9:3f:9b:35:a8:10:0f:f5:fb:ec:bc:b5:c1:ab:0b:56:
37:1b:e8:d7:de:51:0a:46:36:3f:7f:59:10:09:b0:78:7e:a7:
ff:ef:72:59:6c:13:68:8f:a5:45:7f:f8:c7:f9:4a:e2:6c:02:
48:4d:7a:60:13:ae:01:8a:1e:c2:ba:11:28:5d:27:a3:af:93:
9f:ce:33:ea:ec:07:ef:45:b0:67:85:d3:11:df:87:c0:6f:e1:
3f:5d:a8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:17:24 2025 by rpki-client