Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
File: mSgtd8Zi5ou4foMzi3ata-rZMYU.mft (raw, json)
Hash identifier: 0jrT6XC23CeWRnFV0hEYk5GUUAQGT9gfTsMcXjQhJCY=
Subject key identifier: 68:D5:2F:20:15:69:95:89:72:FC:91:12:61:B9:69:D6:1B:9A:46:2E
Authority key identifier: 99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
Certificate issuer: /CN=99282d77c662e68bb87e83338b76ad6bead93185
Certificate serial: 019A52D203CF2A5DA419EEA12B541453216E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 07:01:26 +0000
Manifest this update: Wed 05 Nov 2025 07:01:26 +0000
Manifest next update: Thu 06 Nov 2025 07:01:26 +0000
Files and hashes: 1: TAIaujQ4VKKsXuUakY0dKEcAcGs.roa (hash: d9TADe0Qn4Oy08MasSNafdYWP3qjs55v/m6HHzPTGmc=)
2: mSgtd8Zi5ou4foMzi3ata-rZMYU.crl (hash: QYck/05CysQDv9xbvqxat3JYPb2MOgaHoJp0nmm+LIU=)
3: osc7ldM1EyAIq-Pc65jfOVsDsEo.roa (hash: jLW59X/F/Mi9You64kz4gdG8TC0tIrDCV1yujScQLmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:03:cf:2a:5d:a4:19:ee:a1:2b:54:14:53:21:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99282d77c662e68bb87e83338b76ad6bead93185
Validity
Not Before: Nov 5 07:01:26 2025 GMT
Not After : Nov 6 07:01:26 2025 GMT
Subject: CN=68d52f201569958972fc911261b969d61b9a462e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f1:03:fc:fb:a1:89:46:40:04:fa:52:f5:70:
dd:ab:3c:97:c7:d2:04:45:98:04:e5:fa:9b:57:20:
fb:88:30:25:cb:77:88:d9:86:3f:88:fd:0d:f9:83:
5b:d1:92:80:00:61:6c:74:9f:42:a3:48:cf:22:f5:
1a:0c:53:a9:79:11:fa:71:d3:cb:db:e0:98:9c:af:
69:4f:13:df:a5:24:8c:3b:d9:1b:da:d5:67:ea:43:
f6:ec:f8:1f:ba:98:cb:32:1f:f8:df:62:6e:b6:4f:
de:67:87:57:ff:96:d1:69:c8:2f:bc:ef:46:21:22:
e7:82:d1:ee:5e:f1:97:8b:d6:85:b4:b4:af:05:ab:
c7:06:58:97:c3:7c:d5:29:1c:b2:f6:4d:ab:e0:e7:
bb:57:1f:26:10:f1:e9:b7:bb:d7:6b:3e:88:85:88:
e6:67:89:ee:3d:f5:f8:84:c3:c8:8a:40:57:c4:76:
51:26:42:68:45:0f:0c:a4:c7:bc:f7:39:80:32:33:
8d:fa:a0:8f:33:85:84:86:a7:cb:5e:b1:af:05:82:
d7:e4:26:c7:1c:35:ef:45:84:a4:f4:4a:ee:69:a4:
cc:2d:57:e8:01:35:ec:b7:b9:00:1a:14:48:7b:86:
82:c9:ff:83:5e:14:fe:9c:21:59:ee:77:9a:bb:93:
e8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D5:2F:20:15:69:95:89:72:FC:91:12:61:B9:69:D6:1B:9A:46:2E
X509v3 Authority Key Identifier:
keyid:99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:40:42:5f:b2:e6:ce:ea:15:ff:62:92:ef:4b:fd:47:0f:71:
fe:41:df:76:85:14:80:ed:ac:a8:66:2c:5e:fe:e3:a9:e7:6c:
b4:c2:72:bf:8f:fa:d8:2f:ff:0d:83:03:47:de:b9:74:58:47:
86:06:a4:b2:99:87:92:0e:05:96:a5:f3:f3:11:b1:b6:1d:51:
27:ba:35:ef:99:17:6a:fc:25:3b:ee:e5:d7:42:c5:3e:c6:e1:
55:41:1e:0b:dd:3b:15:71:c2:38:2a:57:1a:b9:26:ea:d6:74:
cd:39:c9:cd:f7:f6:06:3b:b1:33:1e:45:65:69:19:7d:68:6b:
8c:c8:58:e2:09:8c:af:da:7b:a8:e7:80:9d:4b:08:b5:1a:82:
ac:93:19:fa:96:4b:4f:fb:29:5e:15:dc:43:ca:22:a4:9a:a4:
85:4d:09:ed:d3:94:60:e1:9b:06:02:72:52:e4:a4:0f:ac:8a:
22:05:59:f4:9c:1f:31:53:ae:d2:16:98:6d:39:70:ab:f5:24:
0d:fe:e4:8a:ee:38:04:00:46:c1:f6:81:d8:fe:da:71:97:4d:
b6:4c:60:41:d0:f7:9d:31:5a:ac:9e:41:e7:73:5f:c0:cf:e4:
e7:f8:62:bc:e0:ea:6e:ee:fe:6a:53:fa:9f:87:e7:2a:4b:2c:
fb:c0:26:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:14:05 2025 by rpki-client