Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
File: mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft (raw, json)
Hash identifier: GIHugx3XrqVVDN/jgLQVw34uIvlP48JfFH1+1h7GTyQ=
Subject key identifier: F3:5C:6E:AB:B2:DC:99:6E:94:A1:88:B7:56:24:BB:79:C4:9B:4F:BD
Authority key identifier: 99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
Certificate issuer: /CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Certificate serial: 019A4C616D3296259DA9887593C534607EE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 01:00:44 +0000
Manifest this update: Tue 04 Nov 2025 01:00:44 +0000
Manifest next update: Wed 05 Nov 2025 01:00:44 +0000
Files and hashes: 1: djCZyDS3Av-3n9Oi3QzE4yqgYHQ.roa (hash: umRqAsXCH4x+gTRMItrAG7erZAX903krnPo4zn0Ncs0=)
2: kIauAKAEPDGUiqRzZKf1-zzLViU.roa (hash: ajO4l/6tIJY/grZz1/mU3dymnv+IkFvwXNVUf7Kw9ao=)
3: mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl (hash: HTVyRTghvHve9aIUJLLIMws32gYOGMA3dN9I5mVkYKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:6d:32:96:25:9d:a9:88:75:93:c5:34:60:7e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Validity
Not Before: Nov 4 01:00:44 2025 GMT
Not After : Nov 5 01:00:44 2025 GMT
Subject: CN=f35c6eabb2dc996e94a188b75624bb79c49b4fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6c:1d:6c:e9:6c:d4:5e:25:a2:92:bd:00:37:
b2:97:ec:22:79:a6:bb:9a:51:05:42:25:12:9e:94:
54:e7:cf:76:44:47:46:77:22:51:ff:bc:18:bd:ff:
d0:4a:54:8b:c8:56:26:8b:b5:8c:6f:10:b0:65:ee:
43:e7:fc:42:68:19:55:0a:11:96:48:7c:f2:7b:59:
d2:47:f0:46:d9:c7:45:9f:b4:b0:c6:55:e5:38:ee:
fc:10:c9:62:84:49:7d:c2:46:aa:7a:38:cf:29:3a:
2d:05:b6:17:b0:84:c4:fa:be:5f:d3:bc:9d:64:c4:
42:77:3f:eb:4f:15:60:dd:95:25:61:a1:8e:e8:da:
e4:60:80:58:ce:ed:20:0a:44:18:1c:ea:34:fb:66:
56:b4:23:3e:bc:cc:9e:72:b4:24:cc:4d:d2:8b:66:
05:02:49:89:d3:34:0d:d5:66:92:4d:88:49:d0:52:
4f:c6:28:1a:fe:91:a2:14:a2:66:84:0c:ee:56:26:
a1:53:9f:eb:60:d1:1c:ed:99:8c:88:2e:e8:00:a8:
2b:6d:86:ca:c3:df:5d:78:1f:3d:b1:2c:29:b1:53:
d3:1c:7c:c0:32:5b:77:7e:41:d3:66:c3:65:4b:0a:
d2:c0:ef:a1:3c:6a:cf:5e:01:17:d1:de:54:b0:f2:
df:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5C:6E:AB:B2:DC:99:6E:94:A1:88:B7:56:24:BB:79:C4:9B:4F:BD
X509v3 Authority Key Identifier:
keyid:99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:88:8b:62:70:e2:9b:7f:26:10:b2:a5:31:5e:fc:cf:94:b6:
fe:72:d1:68:d5:2f:9e:cb:47:9a:ca:73:a0:f3:3b:21:d6:e6:
88:e0:9f:d5:f2:71:f9:5a:16:56:70:22:ba:41:e4:53:dd:92:
0f:a5:78:31:c7:19:49:35:70:dd:76:83:48:e5:5b:18:56:8e:
81:1c:24:bb:06:c3:ac:18:b8:e7:89:ca:fc:58:16:35:ae:9c:
b6:dd:f0:5a:e9:82:af:96:1e:1f:73:aa:e5:37:0d:43:8c:7a:
a8:fa:ba:2c:67:d3:69:2d:b4:bc:ca:b6:0d:61:c8:ae:4d:d4:
3f:3f:1c:05:b9:b8:ad:4f:cf:04:81:0d:fa:d1:82:5e:eb:1d:
8a:3d:48:56:a5:24:6d:c3:aa:b0:14:fa:99:ce:85:82:18:55:
2b:c4:a2:a7:b5:33:31:99:55:83:09:08:79:08:c3:5f:ea:61:
5b:a1:3c:9c:cd:0b:5e:6d:84:ec:14:aa:ec:e5:07:85:94:cd:
87:2d:d6:4c:40:a4:c3:53:99:a6:af:da:85:e1:8b:29:12:bd:
07:c6:27:00:e2:61:95:f6:71:9b:ad:ae:7f:c1:97:ff:c1:03:
a3:62:25:2d:0c:db:fe:1e:1e:0a:d9:37:c8:bf:85:f6:82:e5:
ed:27:5a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:42 2025 by rpki-client