Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
File: mssomVmi7E-KKEGRVELMvTRCSTg.mft (raw, json)
Hash identifier: V8piqqsHZVcNqL1I4cccE9rWPMo7GjUHxjcHgAxtIgE=
Subject key identifier: 9D:F4:5D:0F:AF:8A:31:01:3F:2D:CE:F5:05:B7:1E:0E:F8:FB:1B:4A
Authority key identifier: 9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
Certificate issuer: /CN=9acb289959a2ec4f8a2841915442ccbd34424938
Certificate serial: 019873E32200C3CC1873F7C73CC581030F5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
Manifest number: 0152
Signing time: Mon 04 Aug 2025 07:02:01 +0000
Manifest this update: Mon 04 Aug 2025 07:02:01 +0000
Manifest next update: Tue 05 Aug 2025 07:02:01 +0000
Files and hashes: 1: XTu5vjEexW769xTu81kG0hu1WhA.roa (hash: Ne41d2x1Hfl8GjUz/n/mltRHcHp7ZxByOWAV8Ao4X7o=)
2: mssomVmi7E-KKEGRVELMvTRCSTg.crl (hash: NhGOIyuaJGBPhhDOeBedjhdx249kmu4MQ+YKpZKsktM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:22:00:c3:cc:18:73:f7:c7:3c:c5:81:03:0f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9acb289959a2ec4f8a2841915442ccbd34424938
Validity
Not Before: Aug 4 07:02:01 2025 GMT
Not After : Aug 5 07:02:01 2025 GMT
Subject: CN=9df45d0faf8a31013f2dcef505b71e0ef8fb1b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8e:7c:e8:8b:61:6f:1f:53:d6:cf:88:df:0e:
9c:68:dd:9e:ee:7c:dc:e1:b9:06:00:6e:34:38:60:
11:ad:4b:72:e3:4c:0d:57:fa:04:7c:c5:b5:7c:45:
67:44:de:6c:d0:80:18:4e:9b:a4:76:ce:0b:86:0c:
20:1f:60:69:92:d2:8d:dd:0b:a7:1c:4f:44:e3:0a:
c3:d8:08:57:fe:04:b6:36:d8:1a:18:56:38:fe:93:
b7:2d:4a:bf:80:9d:dd:f0:7c:1d:8e:86:1d:ed:1d:
c1:35:34:d1:3b:9f:0c:8b:c1:fb:68:82:76:07:72:
49:e5:78:83:4c:94:f8:8d:a7:a9:0b:e1:8c:87:42:
c6:34:c3:25:e5:4c:cc:0a:1c:44:6f:80:7b:26:e5:
cb:7d:2c:a3:9f:2f:95:26:32:ec:ce:4e:72:56:ab:
c6:9e:da:6d:bc:32:6f:67:41:7e:23:89:16:a5:6e:
33:58:fd:33:3f:69:6e:0b:f5:c4:45:1d:da:87:80:
bf:4e:fc:78:5a:7d:9f:f2:d8:e0:26:4d:25:76:2b:
3f:68:fc:3d:d9:87:92:aa:a4:08:2b:10:53:e6:6e:
be:7c:ae:a1:22:f7:bc:a0:a3:9d:80:72:5d:a0:f9:
4d:4d:dd:be:b4:0f:8d:8c:3a:26:ff:ac:cc:82:be:
e1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F4:5D:0F:AF:8A:31:01:3F:2D:CE:F5:05:B7:1E:0E:F8:FB:1B:4A
X509v3 Authority Key Identifier:
keyid:9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e9:13:3f:74:41:be:e9:08:d9:01:0e:79:bc:cb:26:1e:cc:
d9:60:78:2b:b1:2f:07:e9:f6:f7:8a:d2:52:8c:28:83:2d:6a:
45:6c:8a:76:40:92:af:32:dc:97:be:e1:18:ce:07:3a:74:37:
34:a7:ae:f6:78:8e:62:35:8c:c7:4a:36:cd:29:84:2f:fc:ab:
5f:0e:dc:6b:aa:b9:41:80:4a:a2:fa:3b:43:a0:c9:46:28:6f:
f7:01:32:30:9b:2a:b6:32:e1:48:7d:0f:8d:7e:ae:4d:ab:a7:
6b:c8:ce:ee:c1:c8:8c:5c:f7:1b:15:e7:20:d4:67:02:63:45:
4b:5b:47:28:f6:09:c7:27:64:34:9c:fc:49:94:8e:2b:df:30:
57:7e:04:12:dc:7d:6d:b7:ad:9e:f9:39:1e:8e:3b:dd:3d:94:
ab:e5:aa:b7:4d:db:92:3c:fc:a9:0b:1c:5e:29:d4:61:0e:8a:
29:71:1d:3b:39:8d:d1:17:b2:fe:52:38:98:1e:76:15:6d:54:
8c:92:43:47:17:0a:1c:29:d0:5a:23:bc:45:18:5e:b3:f3:db:
00:61:64:0d:40:3f:28:67:be:9b:b0:91:81:8f:5d:cb:48:fc:
27:03:99:12:ce:a7:81:09:ce:73:d0:13:fb:88:27:ea:8b:a6:
0a:25:0c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:11 2025 by rpki-client