Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
File: MSbg1dN79m8-nYh-rq2cpjwYlIk.mft (raw, json)
Hash identifier: wbuHOUkPp8ygt+q9vyU0bkVtcssMwE0Ig0SciCEzupQ=
Subject key identifier: FA:99:E4:F0:A8:5F:22:CD:B6:2E:43:60:54:17:D1:FF:5A:1F:2A:E9
Authority key identifier: 31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
Certificate issuer: /CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Certificate serial: 019A53AC9ECFDCCCB121E034725CBA57C277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 11:00:13 +0000
Manifest this update: Wed 05 Nov 2025 11:00:13 +0000
Manifest next update: Thu 06 Nov 2025 11:00:13 +0000
Files and hashes: 1: MSbg1dN79m8-nYh-rq2cpjwYlIk.crl (hash: CEui+SuzUTSIGEClXjvayzwmxE7qRrNGWuiSsDIV7Is=)
2: UmPwqKyARZqa-K92MHrGqC9QyYg.roa (hash: j/qBkJJtXcMUmDoWtmsXwP9m2yfPn26NNyaQXDeqLdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:9e:cf:dc:cc:b1:21:e0:34:72:5c:ba:57:c2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Validity
Not Before: Nov 5 11:00:13 2025 GMT
Not After : Nov 6 11:00:13 2025 GMT
Subject: CN=fa99e4f0a85f22cdb62e43605417d1ff5a1f2ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:30:9c:22:00:8f:f5:fe:9f:dd:56:e2:89:94:
f3:a4:c0:87:c4:f6:b2:fb:5e:e1:4b:2a:d5:5d:28:
f8:f4:3b:d6:6c:bb:fd:f0:c0:67:84:23:4a:e0:d7:
b3:24:e1:3c:7d:98:d6:68:69:de:08:72:e3:99:cb:
68:21:da:eb:c4:e0:75:05:4d:df:a0:04:06:b2:16:
f2:2e:d8:80:fb:35:36:7f:ce:1f:52:b2:41:9f:6e:
02:1b:66:02:c1:8b:65:9c:25:a2:02:a3:62:35:e6:
6e:1f:76:69:e2:30:2c:7d:e8:7e:51:ca:5e:17:10:
02:3e:ac:b4:31:8c:4d:b8:db:e2:9f:db:22:25:84:
ec:6e:54:d7:8e:ca:e9:71:17:66:4c:c5:91:22:d0:
e0:5c:b1:32:00:22:a0:27:2c:e0:27:39:00:05:c7:
1a:43:b0:f7:d6:46:df:8a:84:c4:8d:34:7c:a9:b3:
01:a5:83:24:5e:1f:30:aa:e8:cf:5a:8f:64:47:f2:
36:7e:5e:43:46:f5:42:3b:c3:b4:98:49:18:a0:f3:
d8:ca:08:2a:38:99:48:26:d1:0a:01:12:fe:bb:f9:
30:ba:3d:9c:94:3e:42:6a:13:11:2f:13:8f:80:fb:
3a:12:36:6e:14:37:11:92:79:94:c5:21:da:8c:0d:
42:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:99:E4:F0:A8:5F:22:CD:B6:2E:43:60:54:17:D1:FF:5A:1F:2A:E9
X509v3 Authority Key Identifier:
keyid:31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:fa:22:94:47:b1:69:fc:d6:81:65:34:f6:98:47:8f:b8:19:
57:56:d1:bc:d8:e6:52:fb:80:52:d3:fe:b6:7a:2c:07:05:9e:
5f:d4:03:ea:d0:e8:e0:f4:69:90:8b:f0:94:02:56:06:59:a2:
33:68:c6:1b:52:87:8c:c0:95:64:25:5c:21:6a:50:0a:68:6f:
12:3f:cd:95:f5:bd:13:77:80:5b:ec:53:18:be:99:67:48:bf:
b2:0b:31:6e:e6:f7:3a:20:c2:c3:ac:89:f9:83:93:17:86:b1:
08:c8:d8:70:6c:29:a2:78:d1:d5:35:ca:7a:46:b1:12:36:2e:
7d:bd:21:49:e5:ce:2e:c9:cd:70:14:82:4e:d8:ec:00:3f:ec:
ad:a3:84:a5:a7:0b:f3:69:c8:b1:80:db:39:b9:e8:16:3f:6f:
dd:39:b1:83:f5:bf:0f:ca:d5:85:94:27:fc:c0:4b:33:73:1d:
28:c8:07:f3:8a:e8:e1:7c:a6:9f:ec:06:47:72:06:e8:34:9f:
1a:1f:29:5c:dc:98:9f:ab:35:12:d4:c0:da:a4:c2:d4:8a:96:
7a:88:8f:30:4e:b8:82:f4:56:fa:0c:ce:02:38:23:08:58:58:
66:9b:e4:9c:25:d6:50:5a:20:47:55:42:63:09:6d:c3:a1:4b:
6a:64:a7:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTrJ7P3MyxIeA0cly6V8J3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMjZlMGQ1ZDM3YmY2NmYzZTlkODg3ZWFlYWQ5Y2E2M2Mx
ODk0ODkwHhcNMjUxMTA1MTEwMDEzWhcNMjUxMTA2MTEwMDEzWjAzMTEwLwYDVQQD
EyhmYTk5ZTRmMGE4NWYyMmNkYjYyZTQzNjA1NDE3ZDFmZjVhMWYyYWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDCcIgCP9f6f3VbiiZTzpMCHxPay
+17hSyrVXSj49DvWbLv98MBnhCNK4NezJOE8fZjWaGneCHLjmctoIdrrxOB1BU3f
oAQGshbyLtiA+zU2f84fUrJBn24CG2YCwYtlnCWiAqNiNeZuH3Zp4jAsfeh+Ucpe
FxACPqy0MYxNuNvin9siJYTsblTXjsrpcRdmTMWRItDgXLEyACKgJyzgJzkABcca
Q7D31kbfioTEjTR8qbMBpYMkXh8wqujPWo9kR/I2fl5DRvVCO8O0mEkYoPPYyggq
OJlIJtEKARL+u/kwuj2clD5CahMRLxOPgPs6EjZuFDcRknmUxSHajA1CtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqZ5PCoXyLNti5DYFQX0f9aHyrpMB8GA1UdIwQY
MBaAFDEm4NXTe/ZvPp2Ifq6tnKY8GJSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVNiZzFkTjc5bTgtblloLXJxMmNwandZbElrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMmVmNWEtZTJiOS00OTk5LWJmYjIt
NmU4ZWQzYzczMDdlLzEvTVNiZzFkTjc5bTgtblloLXJxMmNwandZbElrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zMmVmNWEtZTJiOS00OTk5LWJmYjItNmU4ZWQzYzczMDdl
LzEvTVNiZzFkTjc5bTgtblloLXJxMmNwandZbElrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEvoilEex
afzWgWU09phHj7gZV1bRvNjmUvuAUtP+tnosBwWeX9QD6tDo4PRpkIvwlAJWBlmi
M2jGG1KHjMCVZCVcIWpQCmhvEj/NlfW9E3eAW+xTGL6ZZ0i/sgsxbub3OiDCw6yJ
+YOTF4axCMjYcGwponjR1TXKekaxEjYufb0hSeXOLsnNcBSCTtjsAD/sraOEpacL
82nIsYDbObnoFj9v3Tmxg/W/D8rVhZQn/MBLM3MdKMgH84ro4Xymn+wGR3IG6DSf
Gh8pXNyYn6s1EtTA2qTC1IqWeoiPME64gvRW+gzOAjgjCFhYZpvknCXWUFogR1VC
Ywltw6FLamSnhw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:44:43 2025 by rpki-client