Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
File: mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft (raw, json)
Hash identifier: 1iGdZya499lGJc9JAUS+6hFvyf35jfz+T4vsCn5Zk/o=
Subject key identifier: 9D:D7:D0:A5:49:7E:12:1B:CC:45:9C:E9:5F:91:99:AF:3A:FB:85:2D
Authority key identifier: 99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
Certificate issuer: /CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Certificate serial: 019A4E8682C2BF2D1D154763643C3C210B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
Manifest number: 0703
Signing time: Tue 04 Nov 2025 11:00:29 +0000
Manifest this update: Tue 04 Nov 2025 11:00:29 +0000
Manifest next update: Wed 05 Nov 2025 11:00:29 +0000
Files and hashes: 1: Hg9K5nZYj4y2LREbfAkkrFG5Zls.roa (hash: F2au21rdmN5JT8fnaZxO8lAlqsDmX3/SHMl+Sh2h2I8=)
2: PYZw-6nO0E-fCuRk7f6-YtCO0xE.roa (hash: HII+EpmrCTFcWzx501ezrd96ebkYigxDHvPMzn/KKcI=)
3: mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl (hash: NsYZGJdyN/KlK6zNXF8xdIyoAMQjsSZIB0klboDT8/U=)
4: x7qF1swc6KDeUuxg1VrqWurToxo.roa (hash: YrT3FZ1bNCws8FjDrY5Tigrw49fzDr1WY2YjpG9Nkf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:82:c2:bf:2d:1d:15:47:63:64:3c:3c:21:0b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Validity
Not Before: Nov 4 11:00:29 2025 GMT
Not After : Nov 5 11:00:29 2025 GMT
Subject: CN=9dd7d0a5497e121bcc459ce95f9199af3afb852d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3a:af:07:da:fc:35:15:8e:8c:9e:9f:92:b3:
0a:fa:d8:de:e8:77:79:e1:75:8f:7a:ad:b3:f3:3b:
78:ad:6d:de:75:a6:fb:4f:67:50:5f:ce:af:5a:db:
8b:49:82:4d:64:b5:5f:7a:f2:6e:84:cd:c7:b6:1b:
38:3d:e7:b6:ca:6b:4d:a6:9b:f9:0d:4e:2a:9b:44:
a3:99:d9:98:01:98:36:d3:b8:4f:27:9b:9e:9a:3f:
06:4c:c2:b7:09:35:64:7f:56:66:e7:91:89:87:8a:
3a:2f:47:36:1f:56:20:66:b7:b7:07:05:68:5d:81:
f6:34:ec:70:07:43:fc:e6:3f:18:72:45:59:4b:75:
f4:17:5d:f6:0b:9a:80:35:55:6d:f4:1c:bb:fa:55:
03:73:58:cc:db:de:98:a6:4c:7d:9e:b6:21:c8:f5:
73:e2:0f:d7:2c:39:a6:8b:fb:e6:1e:49:aa:f8:d1:
91:06:13:8e:ac:bd:55:ca:a2:8d:e5:af:9a:dc:b5:
6c:35:01:bf:99:5b:d9:2d:b4:ce:9b:b0:40:d7:97:
b8:ae:5a:3a:23:82:66:e6:65:42:d2:82:7f:ee:1d:
3a:1b:f8:e5:4b:e3:35:32:03:90:2d:b5:88:f2:86:
34:e9:71:57:fb:31:33:39:38:39:e8:80:2a:0b:5d:
b7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D7:D0:A5:49:7E:12:1B:CC:45:9C:E9:5F:91:99:AF:3A:FB:85:2D
X509v3 Authority Key Identifier:
keyid:99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:3c:bb:98:92:05:75:51:a0:06:ad:b5:f7:db:5b:72:fa:d2:
fa:9c:ce:39:b5:42:0b:c1:f6:78:e2:88:10:dd:ba:15:5e:02:
06:43:b7:60:8a:5f:2a:31:79:f8:79:17:9f:da:89:7b:64:8d:
ac:cf:aa:79:bd:34:bd:aa:9e:b7:3b:8d:0e:5f:ca:7a:cd:dc:
89:59:ad:3f:18:ae:18:21:00:ea:95:ff:17:93:45:ea:bb:36:
b0:7d:2f:eb:6f:f4:c0:be:3e:2d:07:8b:a3:71:41:1d:4b:41:
11:62:01:5d:5c:69:37:d8:06:e5:0f:4c:00:a8:cc:01:ff:a6:
b7:da:d3:02:ea:10:4c:7f:a5:dc:b7:90:12:cc:3e:ac:66:cf:
7c:18:02:12:e8:02:02:e6:9a:99:39:85:49:9f:01:57:8b:33:
b2:3f:7e:9a:bf:07:13:08:e9:54:aa:36:55:09:76:d6:08:6c:
3c:b1:40:31:e1:61:4b:35:d4:6f:b5:32:c7:06:dd:1a:8b:cc:
68:7c:2c:8c:ed:85:47:ed:e5:2d:a0:9e:30:37:64:e7:a9:16:
02:c6:10:06:02:f9:97:d8:1d:ed:96:e7:61:73:fe:c8:9a:f0:
6c:21:a1:df:38:d9:39:2a:e0:0c:31:12:01:03:40:b2:42:b0:
5e:f2:2b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:57 2025 by rpki-client