Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
File: MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft (raw, json)
Hash identifier: N3M5Mxw9fHUB2ElnbjoC4fabTMeU2ExkPF0ecoTRYdY=
Subject key identifier: AA:7A:09:87:39:89:98:8F:53:EB:47:49:32:02:D0:56:8D:34:DF:A5
Authority key identifier: 31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84
Certificate issuer: /CN=31242850cad41cdf75a3c9d60b21fca543f74384
Certificate serial: 019776E5336CF77DDAB74F8CED45AD174CD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
Manifest number: 1599
Signing time: Mon 16 Jun 2025 04:00:21 +0000
Manifest this update: Mon 16 Jun 2025 04:00:21 +0000
Manifest next update: Tue 17 Jun 2025 04:00:21 +0000
Files and hashes: 1: 6G5nNFKJWFzHfNQU02eI4MMaEEg.roa (hash: 6cSP9En6aM/vjTao+cEFN3U0rlWFoCsSysKwaT7SNIU=)
2: MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl (hash: AOKwtcu0tA8gZO85kW7UDTEsiCrn/+7lCmT3eQwTATM=)
3: dTX8V27b3FZ8vwtYRtnPTsQ9bhg.roa (hash: 77xEsKoJwAS0zsMbL8sU52nye1oYIoAnIfCbqIAKy1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e5:33:6c:f7:7d:da:b7:4f:8c:ed:45:ad:17:4c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31242850cad41cdf75a3c9d60b21fca543f74384
Validity
Not Before: Jun 16 04:00:21 2025 GMT
Not After : Jun 17 04:00:21 2025 GMT
Subject: CN=aa7a09873989988f53eb47493202d0568d34dfa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5a:af:3f:c6:0f:86:ba:be:67:a7:72:45:ff:
5f:94:18:de:cf:0c:75:89:d1:20:9a:f0:7f:22:2a:
11:35:32:87:cd:8e:4e:08:18:86:0b:38:75:6b:4a:
16:6b:cf:c4:0b:ea:fe:47:8d:9d:27:72:0a:e6:cd:
eb:67:5b:e5:4c:9d:db:7b:04:24:92:0a:ed:b3:a6:
12:6a:0a:5b:84:94:d8:22:78:b8:5a:49:bb:df:cc:
31:b2:f4:31:85:11:24:b2:c5:01:b2:53:7f:ae:7f:
a9:89:64:d5:a6:9d:ec:24:94:78:6b:2d:7f:89:10:
51:c2:fa:1f:28:06:e3:a9:df:e6:cb:ce:fe:8a:79:
ab:c5:27:8c:c0:7d:89:64:16:e7:00:06:48:89:1b:
4a:37:70:e6:fc:1f:3d:3a:c7:2f:84:c6:74:f4:fb:
30:dd:60:de:b3:a8:ac:a6:f3:4f:2f:f1:d6:77:2e:
f1:0c:87:18:29:94:b2:82:52:ea:32:84:3e:02:99:
ed:ed:be:50:17:47:1c:8a:d7:c6:d9:8e:fc:ca:78:
0b:18:15:f5:bd:c8:a6:f0:23:63:cc:16:a6:ed:3a:
fd:61:54:e3:83:b0:ba:58:6b:5b:e6:2d:78:c6:4b:
6a:fc:e1:94:4c:69:5d:bc:a0:e9:96:5d:8a:3e:12:
8a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7A:09:87:39:89:98:8F:53:EB:47:49:32:02:D0:56:8D:34:DF:A5
X509v3 Authority Key Identifier:
keyid:31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:2f:87:38:1c:7a:fe:78:30:6e:16:42:23:34:ba:3b:70:43:
a3:71:b3:1f:b0:b2:ac:93:d3:c0:99:ba:8e:44:8c:b7:d7:b0:
5f:1d:20:12:72:bd:dc:27:57:75:50:37:a3:d1:1b:a3:80:2a:
a2:b7:1f:c3:07:64:ae:f2:90:05:68:e6:97:bd:63:be:02:16:
39:0a:e2:e9:c4:a7:87:15:26:b2:c6:62:b9:82:bf:e4:0c:c9:
45:57:48:94:15:97:a0:7d:e1:e2:6e:0c:06:71:d0:7c:3b:9e:
0a:18:f9:56:18:cb:1f:39:b2:fd:86:ea:68:d8:7b:68:ce:4b:
2a:18:0b:ce:67:84:a0:a4:de:8c:45:31:82:01:0d:05:3c:61:
18:d1:e3:ff:e4:91:fa:5e:ed:48:03:b3:f2:df:74:e8:72:01:
4c:fb:bc:af:e0:ce:1b:ff:30:94:b3:d2:5a:c5:f0:d5:b0:70:
f0:74:85:92:55:1b:c1:a4:af:1b:24:56:d2:ef:b2:0b:b8:a1:
24:e5:08:05:85:2e:ba:39:51:f7:a4:5f:bf:9e:72:97:70:3f:
ac:ca:bb:53:de:10:a0:3b:fa:92:b3:8d:6d:24:81:17:d5:26:
78:b8:26:bc:90:9d:b6:67:77:aa:ef:07:bc:a6:7f:e4:a1:bc:
de:20:cf:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd25TNs933at0+M7UWtF0zWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMjQyODUwY2FkNDFjZGY3NWEzYzlkNjBiMjFmY2E1NDNm
NzQzODQwHhcNMjUwNjE2MDQwMDIxWhcNMjUwNjE3MDQwMDIxWjAzMTEwLwYDVQQD
EyhhYTdhMDk4NzM5ODk5ODhmNTNlYjQ3NDkzMjAyZDA1NjhkMzRkZmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FqvP8YPhrq+Z6dyRf9flBjezwx1
idEgmvB/IioRNTKHzY5OCBiGCzh1a0oWa8/EC+r+R42dJ3IK5s3rZ1vlTJ3bewQk
kgrts6YSagpbhJTYIni4Wkm738wxsvQxhREkssUBslN/rn+piWTVpp3sJJR4ay1/
iRBRwvofKAbjqd/my87+inmrxSeMwH2JZBbnAAZIiRtKN3Dm/B89OscvhMZ09Psw
3WDes6ispvNPL/HWdy7xDIcYKZSyglLqMoQ+Apnt7b5QF0ccitfG2Y78yngLGBX1
vcim8CNjzBam7Tr9YVTjg7C6WGtb5i14xktq/OGUTGldvKDpll2KPhKKvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKp6CYc5iZiPU+tHSTIC0FaNNN+lMB8GA1UdIwQY
MBaAFDEkKFDK1BzfdaPJ1gsh/KVD90OEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVNRb1VNclVITjkxbzhuV0N5SDhwVVAzUTRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xYTI3ZWMtZWIwYS00NDA2LWExZDEt
MDdlZDQ2YjE0OWMzLzEvTVNRb1VNclVITjkxbzhuV0N5SDhwVVAzUTRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8xYTI3ZWMtZWIwYS00NDA2LWExZDEtMDdlZDQ2YjE0OWMz
LzEvTVNRb1VNclVITjkxbzhuV0N5SDhwVVAzUTRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYy+HOBx6
/ngwbhZCIzS6O3BDo3GzH7CyrJPTwJm6jkSMt9ewXx0gEnK93CdXdVA3o9Ebo4Aq
orcfwwdkrvKQBWjml71jvgIWOQri6cSnhxUmssZiuYK/5AzJRVdIlBWXoH3h4m4M
BnHQfDueChj5VhjLHzmy/YbqaNh7aM5LKhgLzmeEoKTejEUxggENBTxhGNHj/+SR
+l7tSAOz8t906HIBTPu8r+DOG/8wlLPSWsXw1bBw8HSFklUbwaSvGyRW0u+yC7ih
JOUIBYUuujlR96Rfv55yl3A/rMq7U94QoDv6krONbSSBF9UmeLgmvJCdtmd3qu8H
vKZ/5KG83iDPlg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:07:53 2025 by rpki-client