Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
File: mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft (raw, json)
Hash identifier: odToQBiWBY73EwS6rmYij0wdgrtBUe6zk+8HpHK44Ao=
Subject key identifier: 08:9C:03:7B:EC:C0:B8:1D:CF:FD:04:8A:36:97:82:5E:F9:18:AB:AE
Authority key identifier: 99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
Certificate issuer: /CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Certificate serial: 01987D1C9A918CCDECADF0506D2441665EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
Manifest number: 0612
Signing time: Wed 06 Aug 2025 02:01:23 +0000
Manifest this update: Wed 06 Aug 2025 02:01:23 +0000
Manifest next update: Thu 07 Aug 2025 02:01:23 +0000
Files and hashes: 1: Hg9K5nZYj4y2LREbfAkkrFG5Zls.roa (hash: F2au21rdmN5JT8fnaZxO8lAlqsDmX3/SHMl+Sh2h2I8=)
2: PYZw-6nO0E-fCuRk7f6-YtCO0xE.roa (hash: HII+EpmrCTFcWzx501ezrd96ebkYigxDHvPMzn/KKcI=)
3: mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl (hash: iYdso+7L+DZ7wDMAX/5RJzDyLp3PpXzdU5nf+D1E94A=)
4: x7qF1swc6KDeUuxg1VrqWurToxo.roa (hash: YrT3FZ1bNCws8FjDrY5Tigrw49fzDr1WY2YjpG9Nkf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:9a:91:8c:cd:ec:ad:f0:50:6d:24:41:66:5e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Validity
Not Before: Aug 6 02:01:23 2025 GMT
Not After : Aug 7 02:01:23 2025 GMT
Subject: CN=089c037becc0b81dcffd048a3697825ef918abae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:67:cc:9d:21:9a:09:f7:51:2a:fb:ef:90:d8:
43:63:96:65:04:c8:22:17:b6:88:52:d8:3e:67:c1:
70:bf:33:47:ff:ce:75:a6:04:14:e5:38:df:e7:97:
4f:50:3a:ae:a4:fb:a1:6e:44:e4:26:82:f0:0a:a0:
64:d0:8a:d4:26:21:a7:0e:fc:5c:3b:d7:1e:e2:95:
ad:48:2d:20:3f:6e:28:1a:93:34:3b:51:f1:a0:ac:
01:96:50:a7:53:c9:6f:47:6f:99:ff:16:71:0b:0a:
a4:b9:4c:68:84:ff:f7:ff:79:44:88:2b:f0:3e:95:
63:55:ab:93:17:45:34:bb:a4:a7:56:d4:20:35:bf:
c7:d1:45:6a:f9:e5:af:f8:38:a1:69:28:ff:54:91:
c8:63:9a:9a:d2:19:54:5b:58:db:0d:da:d0:fd:83:
65:0b:7c:8d:4b:04:9c:6d:58:4d:d2:8f:f0:cc:c7:
24:20:1c:50:b3:26:7b:37:7b:f8:6e:b1:3a:7e:6b:
91:aa:60:a6:2d:64:bb:73:46:dd:c1:6b:0d:ff:09:
56:f8:87:ad:2e:35:e5:2d:92:39:b7:12:7c:17:1a:
bd:27:29:0d:4a:45:54:b8:ec:18:fa:9d:3d:b0:a3:
0b:84:39:88:36:89:74:a3:05:8f:45:63:7f:9a:33:
4a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9C:03:7B:EC:C0:B8:1D:CF:FD:04:8A:36:97:82:5E:F9:18:AB:AE
X509v3 Authority Key Identifier:
keyid:99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:f8:72:b3:d7:a9:a2:55:ae:4b:fd:ed:76:7e:45:f2:d5:fc:
67:b5:52:d7:08:d5:86:ae:9d:bc:59:2b:2c:f9:c3:c8:2b:5a:
d7:a1:ff:f8:24:00:99:e8:31:e8:b7:85:19:04:ca:8c:77:5c:
6c:00:40:41:a5:5a:d1:50:a1:69:10:36:60:16:0f:6b:39:11:
85:6f:02:3c:34:84:fc:16:fd:a8:07:e4:eb:30:2c:7b:64:64:
8b:7b:98:56:78:36:d5:50:5d:ae:72:75:7a:b1:4c:cb:24:b4:
82:2f:b9:8d:16:fa:43:33:eb:25:eb:6c:b2:df:7b:07:82:d0:
9a:7d:06:bd:ae:53:7e:60:0a:69:5a:0a:0d:be:5b:aa:27:23:
50:c5:9f:dc:6e:85:52:30:0c:5a:9a:a1:60:11:d7:f8:b2:90:
e1:f8:b1:27:5b:a7:75:e0:81:b6:44:45:6c:62:fd:25:55:3b:
48:0f:d0:ed:da:57:0d:d5:6b:03:fc:ac:c1:8e:6c:50:76:72:
28:4a:0e:ff:9b:73:fa:da:b3:17:3e:8d:4b:58:60:43:01:c5:
bb:f3:c0:84:07:7e:d3:56:0b:c8:bf:2e:82:a5:38:f8:df:72:
b6:18:cb:1c:05:63:aa:83:25:9d:02:4a:0a:5e:b0:b5:10:3c:
23:43:c6:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9HJqRjM3srfBQbSRBZl7IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MjM4MTJhMTU5N2U5NjA1ZTJhOWJmNDlhY2Y4ZDYzODk4
MWE1ZjQwHhcNMjUwODA2MDIwMTIzWhcNMjUwODA3MDIwMTIzWjAzMTEwLwYDVQQD
EygwODljMDM3YmVjYzBiODFkY2ZmZDA0OGEzNjk3ODI1ZWY5MThhYmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmfMnSGaCfdRKvvvkNhDY5ZlBMgi
F7aIUtg+Z8FwvzNH/851pgQU5Tjf55dPUDqupPuhbkTkJoLwCqBk0IrUJiGnDvxc
O9ce4pWtSC0gP24oGpM0O1HxoKwBllCnU8lvR2+Z/xZxCwqkuUxohP/3/3lEiCvw
PpVjVauTF0U0u6SnVtQgNb/H0UVq+eWv+DihaSj/VJHIY5qa0hlUW1jbDdrQ/YNl
C3yNSwScbVhN0o/wzMckIBxQsyZ7N3v4brE6fmuRqmCmLWS7c0bdwWsN/wlW+Iet
LjXlLZI5txJ8Fxq9JykNSkVUuOwY+p09sKMLhDmINol0owWPRWN/mjNKkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAicA3vswLgdz/0EijaXgl75GKuuMB8GA1UdIwQY
MBaAFJkjgSoVl+lgXiqb9JrPjWOJgaX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVNPQktoV1g2V0JlS3B2MG1zLU5ZNG1CcGZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9jM2NlZWYtZDc1NS00MzU1LTkzMDQt
NmIxNmM3ODhhOTBmLzEvbVNPQktoV1g2V0JlS3B2MG1zLU5ZNG1CcGZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9jM2NlZWYtZDc1NS00MzU1LTkzMDQtNmIxNmM3ODhhOTBm
LzEvbVNPQktoV1g2V0JlS3B2MG1zLU5ZNG1CcGZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsPhys9ep
olWuS/3tdn5F8tX8Z7VS1wjVhq6dvFkrLPnDyCta16H/+CQAmegx6LeFGQTKjHdc
bABAQaVa0VChaRA2YBYPazkRhW8CPDSE/Bb9qAfk6zAse2Rki3uYVng21VBdrnJ1
erFMyyS0gi+5jRb6QzPrJetsst97B4LQmn0Gva5TfmAKaVoKDb5bqicjUMWf3G6F
UjAMWpqhYBHX+LKQ4fixJ1undeCBtkRFbGL9JVU7SA/Q7dpXDdVrA/yswY5sUHZy
KEoO/5tz+tqzFz6NS1hgQwHFu/PAhAd+01YLyL8ugqU4+N9ythjLHAVjqoMlnQJK
Cl6wtRA8I0PGCw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:10:00 2025 by rpki-client