Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
File: mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft (raw, json)
Hash identifier: /6hHgWGEWiQYHEy5418zU8YOgp1j0WaAD3br1jWKKFQ=
Subject key identifier: 7F:4B:2C:64:8B:2B:C1:2D:F0:17:4C:7E:29:4D:8F:FB:47:39:75:34
Authority key identifier: 99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
Certificate issuer: /CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Certificate serial: 01988E463F1F0D66BEA39F45E4BBFC99A6E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
Manifest number: 1626
Signing time: Sat 09 Aug 2025 10:00:24 +0000
Manifest this update: Sat 09 Aug 2025 10:00:24 +0000
Manifest next update: Sun 10 Aug 2025 10:00:24 +0000
Files and hashes: 1: djCZyDS3Av-3n9Oi3QzE4yqgYHQ.roa (hash: umRqAsXCH4x+gTRMItrAG7erZAX903krnPo4zn0Ncs0=)
2: kIauAKAEPDGUiqRzZKf1-zzLViU.roa (hash: ajO4l/6tIJY/grZz1/mU3dymnv+IkFvwXNVUf7Kw9ao=)
3: mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl (hash: ORkm2IUyM/NaTna/TF3fp5vxwJHwIqaVDeKyeNt1NJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:46:3f:1f:0d:66:be:a3:9f:45:e4:bb:fc:99:a6:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Validity
Not Before: Aug 9 10:00:24 2025 GMT
Not After : Aug 10 10:00:24 2025 GMT
Subject: CN=7f4b2c648b2bc12df0174c7e294d8ffb47397534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9b:32:b2:6d:73:76:14:41:1d:2e:6c:70:1e:
e0:39:66:df:19:af:3b:ed:4c:28:e2:3e:e2:d7:1e:
2f:66:27:a9:e1:31:56:7e:2b:79:2f:55:89:21:95:
37:f3:7d:f8:0d:c0:ed:63:ed:96:e3:8b:fa:6c:70:
0d:32:50:c1:91:00:b4:bc:6a:b4:b2:ee:42:ca:22:
2c:61:48:12:35:8d:ac:8f:39:99:08:fc:b6:51:59:
f8:03:7e:62:07:6d:75:af:82:57:e1:70:10:1e:0c:
b9:59:55:0b:c6:52:18:9b:ef:3a:14:a8:2d:c9:fb:
61:c1:dd:dc:81:91:07:08:1d:61:f6:a4:66:eb:8f:
e1:cb:6e:0c:70:f6:fa:cb:e8:43:0a:8d:6f:b7:bf:
13:d3:8b:e7:62:c6:51:8e:bb:94:b0:9b:1e:cb:a9:
0e:19:22:15:a8:0c:50:2a:ba:6b:82:1a:d0:7f:e8:
b3:e7:16:58:74:f6:4f:20:0c:59:98:a7:db:d4:26:
56:1c:e8:c2:01:d4:f2:18:02:13:2b:c2:80:6f:6a:
4e:5a:42:12:22:3f:40:6c:d5:f2:84:d1:b6:34:93:
4b:ba:a9:5f:af:5f:ab:ec:59:37:d8:91:1d:e2:81:
9d:7e:60:5c:d4:09:ef:f2:71:b6:dc:4d:e2:bf:dc:
d6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4B:2C:64:8B:2B:C1:2D:F0:17:4C:7E:29:4D:8F:FB:47:39:75:34
X509v3 Authority Key Identifier:
keyid:99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:0d:6c:e1:2e:ae:5d:ef:d6:d6:1d:0d:d5:b7:39:a8:86:32:
b1:e2:2d:12:e9:ab:de:e6:05:fa:cd:74:04:f4:75:86:ad:b8:
e9:a0:07:d6:c0:c9:6d:18:4f:35:28:75:53:65:49:42:51:c6:
2d:fd:4a:73:40:e2:4e:a5:0d:a6:5b:56:50:a1:03:b2:b4:4f:
0e:51:37:cb:e3:3b:63:6f:28:3d:cd:7a:37:49:eb:31:7b:e0:
4a:95:01:15:75:bf:f2:98:1b:c8:cc:05:12:be:c0:9d:a9:3e:
b2:91:35:37:cf:21:20:20:ca:2e:83:89:9c:0f:db:ed:3c:ea:
19:7a:8e:72:a9:f9:a2:ef:2a:5c:05:1a:98:0c:39:cd:d2:f0:
e1:ed:67:b0:35:f5:0d:c9:c5:52:86:39:b1:7a:0e:e9:c2:67:
22:9c:fc:97:b7:6e:d0:e8:5a:e2:c7:cd:dd:f8:6c:1c:26:1d:
54:83:c2:26:1c:b6:1b:ec:93:48:98:f0:e0:65:c5:95:bb:58:
fb:a0:20:7b:1d:ea:0f:6d:74:28:93:27:cd:f5:a1:47:4f:ac:
87:ca:50:7d:1a:fa:88:80:cf:c1:93:25:25:2a:31:9b:a0:f9:
a6:bf:40:70:03:8f:be:0e:b5:e4:af:bc:01:57:00:7f:54:13:
85:3d:74:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:33:47 2025 by rpki-client