Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
File: mSuGCVzlWNLpYYcopEIoonvpCY8.mft (raw, json)
Hash identifier: 6vxHtF1RyI2R9FDE4gprVqANWyI2AqbGfYh7GZ0NyW0=
Subject key identifier: 07:E8:A8:E3:6F:3A:C3:08:2B:8B:30:5D:76:71:5F:DD:91:AB:42:E2
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 019A4F997FB977DE27B922949696E4775D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
Manifest number: 1735
Signing time: Tue 04 Nov 2025 16:00:51 +0000
Manifest this update: Tue 04 Nov 2025 16:00:51 +0000
Manifest next update: Wed 05 Nov 2025 16:00:51 +0000
Files and hashes: 1: BlYJMM4ls15zJ30iXM_Rv84I-d4.roa (hash: MRyw1DsxxSYF8y5F3ROkLuVWefJpMb00uWwfBxmnsGk=)
2: e2BcAV15shqdiU98OktC9_gXkUU.roa (hash: rZS4+9XjUiv9YzxM45CHUYZIhLrSaA9eZkuie33ePcg=)
3: mSuGCVzlWNLpYYcopEIoonvpCY8.crl (hash: suy/GLc/2FJSkqlfZjVG5Vlu/yfwcC/ijH49i34PT9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:7f:b9:77:de:27:b9:22:94:96:96:e4:77:5d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Nov 4 16:00:51 2025 GMT
Not After : Nov 5 16:00:51 2025 GMT
Subject: CN=07e8a8e36f3ac3082b8b305d76715fdd91ab42e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:18:95:e1:67:ec:4d:22:88:bd:f5:52:01:e9:
18:d1:48:48:18:51:86:51:6f:e9:0d:c7:aa:cf:49:
93:27:dc:06:23:62:61:21:2c:e3:62:c0:93:04:fb:
85:33:33:34:20:7b:22:18:c8:ad:50:ae:19:cf:28:
2f:07:4f:94:09:6c:d7:30:ba:f9:d9:50:88:de:2a:
a6:27:dd:7d:f1:d5:38:1a:b7:67:b6:a2:87:0a:cc:
d0:3e:df:91:ff:df:46:0e:c8:e5:82:03:cf:ff:83:
af:bd:9c:e8:36:8a:d6:87:01:0e:52:bc:c7:22:61:
d7:03:53:1d:40:06:e1:99:51:33:cd:ca:a8:a9:2f:
65:7a:ba:27:53:9e:ee:01:ba:e3:78:a0:eb:d2:d9:
2c:10:5d:74:fb:a8:40:0d:1e:dc:54:1e:1f:f0:9f:
63:55:d3:1e:c0:38:20:cf:75:69:47:c3:bf:82:51:
1b:88:6c:da:d0:e3:f0:de:dd:5e:50:f9:b0:53:b2:
cb:0e:09:e9:6b:41:55:37:b0:7c:1c:58:b9:89:67:
e1:6d:2b:5d:7a:f5:27:f0:20:aa:fa:43:7e:d5:92:
51:10:41:43:72:8c:5f:e6:e0:6b:1b:bd:bc:5d:cb:
09:7b:cd:50:50:b5:72:f8:b5:a0:9d:75:e2:5a:a3:
89:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E8:A8:E3:6F:3A:C3:08:2B:8B:30:5D:76:71:5F:DD:91:AB:42:E2
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:03:3f:3a:c1:67:a8:c2:aa:11:97:dc:ae:7c:29:0e:c7:f2:
3a:6d:0d:e1:78:aa:c6:bf:b4:f2:82:7e:6d:b9:e9:7a:42:4d:
29:4c:66:42:b7:63:52:96:0e:31:40:7d:8e:67:f0:d5:0a:5a:
95:22:b6:8b:50:6f:2e:a8:54:f3:c2:9f:40:c7:54:f2:ab:8a:
11:aa:0c:5f:fd:cb:d5:30:31:a5:0b:24:1a:f4:b9:53:24:24:
d7:dc:81:8c:08:10:de:58:cd:16:39:e9:9a:47:e9:7a:b6:3d:
a9:34:96:2f:a6:ad:ca:27:0b:07:6e:88:0e:79:df:56:7b:3e:
4a:7d:d5:1c:08:75:19:c3:48:ae:ef:0a:be:92:27:a3:a1:b7:
8f:6d:94:78:5c:a8:e7:d7:c1:ae:a6:d0:80:0b:53:b4:06:3d:
29:fa:2d:3d:70:8c:b6:ea:c6:2c:b8:63:6b:78:8b:18:9d:37:
3a:87:fb:84:b5:45:1a:7c:72:23:4c:1a:5a:e7:fb:e7:2e:0e:
9c:b4:ab:ad:00:80:31:a6:10:1b:0d:57:10:68:aa:f7:3d:96:
a6:66:ab:98:e4:05:38:84:19:c9:0e:dc:a4:c0:60:d6:cf:8f:
b6:5a:60:66:ed:c9:f3:d2:c9:60:92:ff:d0:80:dd:bc:49:ae:
36:b4:76:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:17 2025 by rpki-client