Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
File: Mss8BdaixRwv9S3Z3LnitVxASPk.mft (raw, json)
Hash identifier: I8WZ9OcFuNr3q9cE7tn7yzy0ulgGDBLFnjqvU3wd7t4=
Subject key identifier: B1:DA:5C:66:32:B3:68:ED:15:20:92:48:C9:10:03:F6:25:1B:E0:28
Authority key identifier: 32:CB:3C:05:D6:A2:C5:1C:2F:F5:2D:D9:DC:B9:E2:B5:5C:40:48:F9
Certificate issuer: /CN=32cb3c05d6a2c51c2ff52dd9dcb9e2b55c4048f9
Certificate serial: 019A51505EC1E2557698477026C5AC1B27B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
Manifest number: 170C
Signing time: Wed 05 Nov 2025 00:00:12 +0000
Manifest this update: Wed 05 Nov 2025 00:00:12 +0000
Manifest next update: Thu 06 Nov 2025 00:00:12 +0000
Files and hashes: 1: Mss8BdaixRwv9S3Z3LnitVxASPk.crl (hash: 4qiLWb+6CtdCngMwRybgU2MoQbICs7TSZdPnzaksuoQ=)
2: pkl1dG1Tn-y8sIzafCzQdaxLGO0.roa (hash: +t+HSalevZKgrBOwo+A1WYwHvxUsDh9dx8CrhAZYnCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:5e:c1:e2:55:76:98:47:70:26:c5:ac:1b:27:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32cb3c05d6a2c51c2ff52dd9dcb9e2b55c4048f9
Validity
Not Before: Nov 5 00:00:12 2025 GMT
Not After : Nov 6 00:00:12 2025 GMT
Subject: CN=b1da5c6632b368ed15209248c91003f6251be028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7d:dd:45:62:6f:4a:98:f5:5b:e4:a8:fd:97:
de:fa:ab:0e:89:3a:f1:e0:93:8a:27:de:9c:5d:86:
2b:42:d1:68:e4:13:39:ab:64:ed:12:08:75:d0:07:
e0:11:68:af:54:ab:c3:a0:bf:25:d3:cb:59:88:7e:
63:37:4a:19:15:f0:3c:68:49:6c:29:ac:8a:ac:3e:
8e:b6:aa:b5:80:50:ba:1e:65:b8:c3:f7:50:70:9a:
3c:7f:e2:46:09:f8:d0:7a:32:3a:d0:48:e1:16:71:
ce:37:19:fe:ac:b3:ac:89:5e:09:a4:ca:ba:35:85:
04:57:71:eb:e6:68:7f:3e:e2:e6:cb:52:26:14:29:
57:be:a4:19:30:fa:05:12:db:c3:75:18:08:b5:7b:
ad:c6:b0:d5:2a:07:d5:e4:0a:e3:c3:2a:be:73:3b:
ea:af:0d:67:15:1b:12:8a:89:6f:c9:4f:8b:0a:7c:
9d:7a:95:0b:b1:56:82:18:54:4d:36:89:b5:6c:7a:
72:77:6e:2c:1f:71:44:f8:33:e1:4b:d5:f4:d0:59:
28:8b:90:48:3d:b8:40:31:99:df:20:7c:5f:56:98:
97:1f:06:ab:71:a0:0a:32:f4:49:2b:61:96:df:16:
f6:84:45:19:13:10:73:d0:40:11:57:1a:37:f7:71:
7b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DA:5C:66:32:B3:68:ED:15:20:92:48:C9:10:03:F6:25:1B:E0:28
X509v3 Authority Key Identifier:
keyid:32:CB:3C:05:D6:A2:C5:1C:2F:F5:2D:D9:DC:B9:E2:B5:5C:40:48:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:47:fd:ee:52:1d:fe:2d:ec:cf:84:c6:b5:6d:bf:44:cc:68:
70:c6:28:ba:06:36:ba:50:95:8d:61:91:e5:62:dc:34:a8:d7:
86:22:13:ee:8f:ef:a0:0d:ee:6d:c5:46:a2:b6:37:ca:1b:87:
ed:52:ee:dd:4e:76:15:9d:88:70:c4:b2:85:dc:c8:af:6a:8f:
0d:d3:16:f2:75:e6:90:3c:a9:51:c3:46:01:2b:98:c5:06:f2:
1f:60:95:b8:e4:e4:98:6f:3d:e9:04:1a:b3:76:af:98:9f:19:
d6:b4:7a:ba:9a:c4:8b:e9:17:0a:0b:51:54:6e:fd:20:8e:59:
b1:ba:28:fa:c0:b7:f0:c6:bb:95:da:52:fc:5b:92:d1:20:31:
47:30:6a:f9:d8:a8:d2:9e:b4:44:e6:51:93:62:c5:50:e5:96:
d3:3b:b8:b9:f4:bc:60:7f:c3:43:23:05:6d:a4:d8:0e:39:3a:
e1:20:bf:e8:47:8e:58:1d:87:0a:d3:8f:63:ad:f8:83:e1:31:
76:05:aa:96:46:c0:84:fa:6d:b5:0d:3b:6b:5d:9c:c7:1d:50:
14:34:b5:65:4b:b4:d9:91:63:05:8a:1a:be:79:bc:9a:54:5e:
33:06:fe:4f:5f:77:4a:19:b0:bd:84:30:a6:61:fb:ab:33:e7:
ea:a7:09:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:44:18 2025 by rpki-client