Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
File: mssomVmi7E-KKEGRVELMvTRCSTg.mft (raw, json)
Hash identifier: 138rZp7Cuc6+1v9GXkGtbCixdRGSVy5yhstNVoZLsfM=
Subject key identifier: 13:8F:E2:2E:56:BF:D5:E2:3C:3F:65:5E:F9:F4:B8:E9:3F:58:21:E2
Authority key identifier: 9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
Certificate issuer: /CN=9acb289959a2ec4f8a2841915442ccbd34424938
Certificate serial: 019A52D27F72264669984592F1AAB817B139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
Manifest number: 024A
Signing time: Wed 05 Nov 2025 07:01:58 +0000
Manifest this update: Wed 05 Nov 2025 07:01:58 +0000
Manifest next update: Thu 06 Nov 2025 07:01:58 +0000
Files and hashes: 1: XTu5vjEexW769xTu81kG0hu1WhA.roa (hash: Ne41d2x1Hfl8GjUz/n/mltRHcHp7ZxByOWAV8Ao4X7o=)
2: mssomVmi7E-KKEGRVELMvTRCSTg.crl (hash: YQcqLU810o4lux3eKH6auiGt9RROoBaf+VP52V/8KKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:7f:72:26:46:69:98:45:92:f1:aa:b8:17:b1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9acb289959a2ec4f8a2841915442ccbd34424938
Validity
Not Before: Nov 5 07:01:58 2025 GMT
Not After : Nov 6 07:01:58 2025 GMT
Subject: CN=138fe22e56bfd5e23c3f655ef9f4b8e93f5821e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:21:75:04:ad:90:dd:b5:df:41:d5:68:0a:a5:
c8:5d:30:09:aa:ac:72:7f:db:5a:dd:c7:12:4e:fe:
3a:ff:67:9d:47:53:3a:e4:b1:5b:38:a8:40:3b:80:
fd:aa:ca:65:53:bb:5b:2f:2d:30:4c:84:df:00:57:
42:fd:55:fa:d8:82:cd:c0:ff:e7:c1:ca:63:9e:85:
db:f0:f6:9e:52:75:a0:8b:82:05:d7:80:48:50:4d:
88:14:c2:93:72:6a:a7:f4:64:7c:77:89:ef:b1:ae:
ae:c8:cb:5a:16:e5:17:2c:61:90:82:56:bb:f5:83:
0d:03:5e:96:1b:26:db:7c:8e:43:bf:74:b0:06:c6:
02:c2:66:6e:95:48:d5:52:06:7a:82:23:1d:a4:84:
a4:9c:3b:62:0b:21:a3:d3:46:0f:14:f6:f4:61:87:
17:ac:ff:bb:12:c7:b5:e9:e5:42:4e:b9:1e:c8:16:
81:f7:85:37:7e:02:06:bf:8d:35:fa:8b:31:a8:7d:
99:d0:c1:3f:95:f2:1d:d0:18:db:bb:26:fb:e6:70:
64:d7:21:17:0b:54:48:d0:17:a1:1a:0a:be:e4:ab:
6d:e3:f4:25:ed:a9:cd:5d:9d:db:45:78:eb:c8:94:
08:b3:b8:a3:c1:6e:8b:22:15:35:65:5b:5b:47:02:
6a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8F:E2:2E:56:BF:D5:E2:3C:3F:65:5E:F9:F4:B8:E9:3F:58:21:E2
X509v3 Authority Key Identifier:
keyid:9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ec:e1:3a:d1:1f:1f:e5:44:71:08:61:4c:60:f6:b7:27:9a:
b4:fe:53:28:2d:3f:05:bc:20:a6:46:a0:43:82:0c:41:e8:25:
e5:1c:1e:07:2f:d9:b1:02:5b:e2:03:6f:5e:ba:bf:da:54:2c:
b7:f6:84:1e:1e:cf:8e:94:a2:88:db:15:70:39:72:cb:30:bb:
ee:f1:a8:e6:a2:38:56:bd:38:a8:37:f8:0c:5e:6b:c5:92:9b:
b5:11:27:98:b1:a4:79:de:7d:c9:ec:ca:2e:31:8f:65:a5:af:
8b:34:30:a3:05:88:34:b1:5e:2d:e9:48:cf:4a:13:02:3b:f4:
50:af:ab:35:e7:30:90:07:18:0a:58:87:d6:f0:0b:71:1e:32:
e2:f7:9b:a3:1f:4a:01:8f:aa:ea:6b:39:17:be:01:79:b7:41:
31:76:df:c9:36:92:4a:15:14:cb:b3:45:d8:a5:41:a7:36:fb:
9c:ee:79:e3:9b:d3:a7:59:fb:17:b3:f7:a3:e3:10:09:02:af:
e6:6c:3f:ae:bb:d6:af:8d:b2:bd:a4:67:7b:03:d9:b3:18:00:
6a:36:ae:da:5e:69:5f:9c:12:ea:cc:13:97:37:77:50:e6:e0:
e2:cf:c8:90:cc:f9:0b:c3:c2:49:1b:ee:de:40:f0:2d:e9:08:
80:0b:52:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:43:54 2025 by rpki-client