Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
File: MSbg1dN79m8-nYh-rq2cpjwYlIk.mft (raw, json)
Hash identifier: Pju1rsdvgMf2qdnx4NEnb9jjeTSoku5thoJ2RFqN5HI=
Subject key identifier: 3A:13:BA:84:0E:B4:12:BD:F9:04:5E:4C:A9:0B:66:49:6D:3C:A1:31
Authority key identifier: 31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
Certificate issuer: /CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Certificate serial: 01987E6662FB3B2D1206CED942CCD13C861C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 08:01:35 +0000
Manifest this update: Wed 06 Aug 2025 08:01:35 +0000
Manifest next update: Thu 07 Aug 2025 08:01:35 +0000
Files and hashes: 1: MSbg1dN79m8-nYh-rq2cpjwYlIk.crl (hash: kCd5Fib1SRdPxBnmpGlu+rTpRvZISADPN0zsI1jQ5Do=)
2: UmPwqKyARZqa-K92MHrGqC9QyYg.roa (hash: j/qBkJJtXcMUmDoWtmsXwP9m2yfPn26NNyaQXDeqLdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:66:62:fb:3b:2d:12:06:ce:d9:42:cc:d1:3c:86:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3126e0d5d37bf66f3e9d887eaead9ca63c189489
Validity
Not Before: Aug 6 08:01:35 2025 GMT
Not After : Aug 7 08:01:35 2025 GMT
Subject: CN=3a13ba840eb412bdf9045e4ca90b66496d3ca131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:69:3c:1a:99:95:55:ff:fb:71:a0:3d:09:17:
50:9c:36:3f:77:2d:bf:39:25:f6:5d:f8:d6:54:88:
46:4d:db:39:63:cf:46:f6:ef:f1:53:4e:71:e6:cc:
a5:59:14:fe:cc:e4:b6:b2:97:9d:d7:d6:e4:e4:9d:
cb:62:f2:54:61:95:81:f4:5e:8a:09:51:87:69:54:
2c:e8:ac:c0:0d:93:0f:ea:24:77:a1:b8:66:df:01:
2b:d2:0f:76:58:68:84:ed:be:8d:63:23:c2:13:57:
90:11:98:74:f2:47:00:a5:6f:15:97:47:64:ed:2c:
7e:d3:42:53:cb:fa:b7:49:19:e9:10:7a:5a:cd:4e:
1c:44:11:33:a7:37:eb:5f:ab:2b:ca:e5:b3:9a:9a:
11:18:60:c8:a5:25:b5:5f:d5:1a:06:98:e4:0c:96:
f9:f0:c3:95:0e:71:08:06:62:aa:cc:42:d5:e7:61:
ef:3c:f7:64:3c:e8:67:53:a6:7f:dc:68:ee:52:22:
e2:e7:c7:13:d1:0e:aa:ed:ea:33:31:a5:56:07:64:
44:c6:2b:6f:ea:bd:85:83:f9:8f:30:28:3d:07:5c:
bb:7f:3f:7a:48:60:fb:88:01:99:7a:92:0b:8d:5f:
45:0c:a5:19:84:f0:40:c2:bb:be:4e:20:d3:68:e7:
f8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:13:BA:84:0E:B4:12:BD:F9:04:5E:4C:A9:0B:66:49:6D:3C:A1:31
X509v3 Authority Key Identifier:
keyid:31:26:E0:D5:D3:7B:F6:6F:3E:9D:88:7E:AE:AD:9C:A6:3C:18:94:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSbg1dN79m8-nYh-rq2cpjwYlIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32ef5a-e2b9-4999-bfb2-6e8ed3c7307e/1/MSbg1dN79m8-nYh-rq2cpjwYlIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f0:c6:71:16:bb:93:2b:f4:04:b4:c5:de:62:10:15:0b:a1:
6d:bc:9e:00:3e:ee:67:43:5e:ee:ed:35:a9:ca:51:c7:8f:a4:
fe:30:9a:31:0a:fd:58:ee:60:f4:c1:16:77:16:1b:55:ea:38:
1f:a5:c9:74:1c:77:aa:5c:04:87:21:1a:26:59:c7:0f:29:35:
26:74:b5:ba:71:3d:3d:90:e7:ee:c7:2e:b4:d2:2c:73:9b:7a:
39:7b:6e:da:e2:26:77:c5:df:92:10:e4:63:3b:a1:0a:dd:e1:
c0:2c:c3:d9:7b:bb:66:67:16:34:23:94:3d:72:a6:92:d7:9b:
9d:9e:97:63:4b:01:8e:50:d4:ee:3c:5b:64:3b:c6:4c:08:c4:
e6:22:75:2b:79:19:90:71:9b:ba:68:d0:7c:aa:cf:75:66:33:
be:a5:65:57:66:68:7d:87:4e:3a:eb:a9:3f:ef:86:6b:76:d4:
b6:5c:1b:ab:3e:96:56:cb:08:51:05:2d:96:90:ca:f0:67:b2:
c4:f8:e6:0c:ac:10:9b:c1:a3:7a:5f:25:1d:41:b0:87:1b:c0:
6a:36:0a:aa:10:94:7b:c3:28:a0:ff:e3:a7:dc:b4:c4:cd:12:
e8:99:91:cd:c7:e3:95:41:78:57:99:20:f4:4e:bd:25:ab:f7:
81:d4:82:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+ZmL7Oy0SBs7ZQszRPIYcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMjZlMGQ1ZDM3YmY2NmYzZTlkODg3ZWFlYWQ5Y2E2M2Mx
ODk0ODkwHhcNMjUwODA2MDgwMTM1WhcNMjUwODA3MDgwMTM1WjAzMTEwLwYDVQQD
EygzYTEzYmE4NDBlYjQxMmJkZjkwNDVlNGNhOTBiNjY0OTZkM2NhMTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2k8GpmVVf/7caA9CRdQnDY/dy2/
OSX2XfjWVIhGTds5Y89G9u/xU05x5sylWRT+zOS2sped19bk5J3LYvJUYZWB9F6K
CVGHaVQs6KzADZMP6iR3obhm3wEr0g92WGiE7b6NYyPCE1eQEZh08kcApW8Vl0dk
7Sx+00JTy/q3SRnpEHpazU4cRBEzpzfrX6sryuWzmpoRGGDIpSW1X9UaBpjkDJb5
8MOVDnEIBmKqzELV52HvPPdkPOhnU6Z/3GjuUiLi58cT0Q6q7eozMaVWB2RExitv
6r2Fg/mPMCg9B1y7fz96SGD7iAGZepILjV9FDKUZhPBAwru+TiDTaOf4YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDoTuoQOtBK9+QReTKkLZkltPKExMB8GA1UdIwQY
MBaAFDEm4NXTe/ZvPp2Ifq6tnKY8GJSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVNiZzFkTjc5bTgtblloLXJxMmNwandZbElrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMmVmNWEtZTJiOS00OTk5LWJmYjIt
NmU4ZWQzYzczMDdlLzEvTVNiZzFkTjc5bTgtblloLXJxMmNwandZbElrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zMmVmNWEtZTJiOS00OTk5LWJmYjItNmU4ZWQzYzczMDdl
LzEvTVNiZzFkTjc5bTgtblloLXJxMmNwandZbElrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArfDGcRa7
kyv0BLTF3mIQFQuhbbyeAD7uZ0Ne7u01qcpRx4+k/jCaMQr9WO5g9MEWdxYbVeo4
H6XJdBx3qlwEhyEaJlnHDyk1JnS1unE9PZDn7scutNIsc5t6OXtu2uImd8XfkhDk
YzuhCt3hwCzD2Xu7ZmcWNCOUPXKmktebnZ6XY0sBjlDU7jxbZDvGTAjE5iJ1K3kZ
kHGbumjQfKrPdWYzvqVlV2ZofYdOOuupP++Ga3bUtlwbqz6WVssIUQUtlpDK8Gey
xPjmDKwQm8Gjel8lHUGwhxvAajYKqhCUe8MooP/jp9y0xM0S6JmRzcfjlUF4V5kg
9E69Jav3gdSCoA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 12:43:47 2025 by rpki-client