Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
File: MSOZsSkM1Bmni9L7MR47x9-fXx8.mft (raw, json)
Hash identifier: G/diw2SgCojb7pi+8Sjeng3g7Xt1SvQtL1VK1y84CGE=
Subject key identifier: 97:F1:75:19:D6:1A:50:48:FD:FC:27:28:9B:93:B1:FD:D7:E8:6E:23
Authority key identifier: 31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
Certificate issuer: /CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Certificate serial: 019A51F5D798CBCA510D5D08E62DC13BDA19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
Manifest number: 021C
Signing time: Wed 05 Nov 2025 03:00:57 +0000
Manifest this update: Wed 05 Nov 2025 03:00:57 +0000
Manifest next update: Thu 06 Nov 2025 03:00:57 +0000
Files and hashes: 1: MSOZsSkM1Bmni9L7MR47x9-fXx8.crl (hash: nFGVkHyjHZY0EBBrKIKiOG06EK+qQJsX79RNlTZzBtI=)
2: _YRrPXeHgAXgMpc2QmNmEMk3D08.roa (hash: rjz45MaRJ7ZN8GT6YntGrX6BstY+oeOQVYxVS/+RMXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:d7:98:cb:ca:51:0d:5d:08:e6:2d:c1:3b:da:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Validity
Not Before: Nov 5 03:00:57 2025 GMT
Not After : Nov 6 03:00:57 2025 GMT
Subject: CN=97f17519d61a5048fdfc27289b93b1fdd7e86e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:aa:80:0a:46:3c:a8:41:7c:63:fb:1e:30:d5:
23:7c:b2:8a:a1:5f:82:13:8d:bb:76:54:22:32:76:
b9:6b:1b:4d:0c:f5:c3:eb:18:d9:5c:09:2c:32:40:
54:70:f6:9e:ce:c4:35:e9:02:a6:f0:ae:cf:79:2d:
48:55:be:2b:ae:c7:01:8c:50:21:71:75:bd:a1:0c:
b2:62:34:64:47:db:05:f4:e2:96:f3:ce:83:22:ce:
83:7e:78:0a:e1:57:86:31:d0:f2:4b:10:ae:ec:f0:
15:0f:8b:40:30:7f:14:e7:58:c4:54:c6:ef:78:b0:
b4:90:81:60:02:4a:6d:c4:a8:4b:d2:c4:03:8a:bb:
65:be:d6:4d:84:9b:39:50:eb:59:0b:0a:6a:1b:12:
7d:55:55:0b:f6:ca:92:ee:e6:d5:81:bd:76:c5:b2:
10:f3:21:e4:72:8c:ff:23:e0:ed:74:ce:76:02:48:
0d:2e:3e:3f:1c:e4:a9:6d:93:af:49:2c:12:be:89:
98:64:fd:39:87:06:f1:e9:28:29:2e:08:f1:a5:8e:
69:91:39:06:49:57:cd:cf:ef:fa:41:bc:ce:e0:1b:
04:ce:e0:7c:1a:9c:cd:d6:2e:52:ab:2e:5b:89:f4:
ae:06:46:4f:80:36:34:a3:7e:ac:7b:89:5d:9d:62:
bb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F1:75:19:D6:1A:50:48:FD:FC:27:28:9B:93:B1:FD:D7:E8:6E:23
X509v3 Authority Key Identifier:
keyid:31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:34:cf:91:22:31:db:a9:86:2e:4e:95:67:16:52:87:f2:7e:
17:13:43:81:ea:a0:27:59:a7:5c:4a:14:b4:23:7c:9a:c5:cd:
1e:50:55:3a:c5:b1:77:05:f6:9a:0a:e6:0f:a4:5e:c7:46:b8:
b4:74:22:d8:f4:32:89:14:ef:a8:2c:ed:6c:0b:4a:35:3b:8c:
00:91:b0:9d:dd:87:58:7f:a0:32:84:c1:1f:33:06:cc:f9:d4:
70:ab:e8:52:ae:4f:73:85:ab:97:89:ac:2b:0a:a7:d6:68:fd:
e9:8f:cf:28:b5:5d:38:20:64:be:92:ca:b8:99:53:4c:c8:0a:
c6:e6:24:d9:0a:16:63:d6:72:3a:28:45:5a:15:11:db:01:16:
be:03:f1:fe:8d:ec:54:75:39:31:45:40:b7:f0:eb:46:cc:43:
a5:ea:a0:48:a4:79:09:94:d9:d7:72:27:8f:c1:5e:e5:47:d9:
2d:8d:47:ad:91:79:d3:69:69:9d:74:e7:27:ef:7f:d8:59:ff:
95:c8:8d:5c:80:e4:d2:81:51:87:a9:d9:55:cc:d2:e8:15:b6:
04:e0:e8:f3:64:1e:0b:51:b8:eb:2d:28:d9:a7:d6:0f:9a:0b:
d9:11:f2:02:1b:54:12:28:62:b6:6a:3c:a3:4e:91:b2:59:ae:
2b:a7:c7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:49:38 2025 by rpki-client