Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
File: MSOZsSkM1Bmni9L7MR47x9-fXx8.mft (raw, json)
Hash identifier: ikUlDg6wXb+yfuO/z3vcK0t29+ZaZWVF/bwj1glOdRc=
Subject key identifier: 2B:24:53:25:21:C2:B2:15:F6:09:BC:99:BE:39:01:1F:F2:4E:CC:5F
Authority key identifier: 31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
Certificate issuer: /CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Certificate serial: 01989D82965AE246C5F07A811B778FB3DDDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
Manifest number: 013A
Signing time: Tue 12 Aug 2025 09:00:37 +0000
Manifest this update: Tue 12 Aug 2025 09:00:37 +0000
Manifest next update: Wed 13 Aug 2025 09:00:37 +0000
Files and hashes: 1: MSOZsSkM1Bmni9L7MR47x9-fXx8.crl (hash: tA0gt8JXkkmIgW+kez/JVP3H2WQto766lpCjzf7UqQM=)
2: _YRrPXeHgAXgMpc2QmNmEMk3D08.roa (hash: rjz45MaRJ7ZN8GT6YntGrX6BstY+oeOQVYxVS/+RMXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:82:96:5a:e2:46:c5:f0:7a:81:1b:77:8f:b3:dd:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Validity
Not Before: Aug 12 09:00:37 2025 GMT
Not After : Aug 13 09:00:37 2025 GMT
Subject: CN=2b24532521c2b215f609bc99be39011ff24ecc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e1:b8:fb:3a:fd:e2:6b:d1:af:ed:46:bc:91:
fd:58:f1:02:d0:f5:cc:05:0d:cd:71:14:ad:56:e4:
c8:49:5b:3d:b8:87:be:d5:7d:5f:15:77:d5:6f:b2:
a0:95:53:3e:07:9e:7c:b5:57:68:04:43:2e:f9:6a:
35:a7:00:af:c4:9a:17:4a:e4:a2:2a:74:bc:7a:5d:
f9:5e:18:a8:47:40:7b:08:54:1f:e2:37:26:2d:41:
57:2e:f0:3b:00:d8:be:b1:07:f0:5b:66:b2:7f:a6:
b6:7d:e9:8a:57:05:19:51:35:1a:65:9e:ee:a3:00:
e2:3f:66:5f:a7:0d:e5:01:df:b2:03:e4:5b:a4:27:
6f:ad:a4:18:68:9a:75:0e:0e:75:a8:40:14:bd:1a:
1a:8b:07:32:4e:0a:79:6a:9c:a7:15:23:b6:aa:fb:
5d:a4:1d:ad:ca:b3:2b:f2:2e:25:4f:ec:65:8e:89:
f1:de:32:0a:2b:3f:80:56:81:df:70:9f:58:63:ef:
da:44:ce:b3:23:fa:70:d7:62:42:66:b6:3a:bc:14:
7b:2d:15:eb:3f:24:7b:fb:66:5d:63:84:08:ea:a8:
6f:cc:4a:cb:1a:81:e8:49:0d:ac:c5:19:2c:97:b8:
90:a7:21:ae:ac:01:5b:43:74:a6:96:ea:8c:6e:39:
74:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:24:53:25:21:C2:B2:15:F6:09:BC:99:BE:39:01:1F:F2:4E:CC:5F
X509v3 Authority Key Identifier:
keyid:31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:fb:94:6f:e3:0f:87:18:ca:9e:14:62:2c:e6:b9:18:63:e3:
be:5e:31:a5:87:06:96:3d:97:65:23:e0:c5:4a:be:cf:9d:7a:
24:71:80:cb:80:ca:5c:9d:c7:67:90:96:80:e9:95:1d:cf:9b:
48:8e:6b:bb:61:ff:b0:8b:ec:c7:83:8a:51:9b:b7:d8:ac:19:
86:43:4c:c9:9b:5c:17:aa:81:a9:6f:69:69:47:fd:69:d4:7a:
c1:c9:bc:3d:4d:28:25:a5:2f:29:46:27:83:ca:27:b5:ef:cd:
f8:67:6e:84:97:b1:bd:88:52:b2:c5:58:6d:f1:c2:f8:d4:25:
7b:8c:50:8d:be:26:23:50:0c:b8:7d:40:1d:e3:b3:36:78:0c:
44:9d:8f:a7:c9:d8:94:cf:c8:68:87:27:0d:e0:92:74:5f:f3:
f6:86:0a:43:89:c5:3e:a8:9c:09:05:b6:9a:ae:00:fd:7d:71:
f0:ca:90:3f:96:44:20:53:99:db:9a:f1:71:98:d0:b5:cb:2f:
29:8c:8a:b5:1b:24:9b:63:ec:ea:ac:a2:bb:9a:31:fd:e6:5b:
29:e4:fa:b3:fa:1f:ae:6a:fb:51:29:3b:f7:83:45:c5:48:fb:
df:ad:64:60:d4:9d:53:05:a3:84:d6:95:52:1f:b9:1a:d7:4f:
0e:82:5b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 19:08:13 2025 by rpki-client