Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
File: MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft (raw, json)
Hash identifier: d/hZHZZQ3QgwGpltYfvK6a4QHWVWRVflr7q6yDgbIMc=
Subject key identifier: E7:7D:49:A4:87:F9:06:9A:E4:24:97:99:D6:4B:EB:B2:1D:0B:C7:49
Authority key identifier: 31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84
Certificate issuer: /CN=31242850cad41cdf75a3c9d60b21fca543f74384
Certificate serial: 019A4EF5ACF64FAD1BAB24F7C00A2052A238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 13:01:54 +0000
Manifest this update: Tue 04 Nov 2025 13:01:54 +0000
Manifest next update: Wed 05 Nov 2025 13:01:54 +0000
Files and hashes: 1: 6G5nNFKJWFzHfNQU02eI4MMaEEg.roa (hash: 6cSP9En6aM/vjTao+cEFN3U0rlWFoCsSysKwaT7SNIU=)
2: MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl (hash: Y9m8iWyf2g5R1mBRbd1Egip6r8toqp0s1KM9j6vRP1Q=)
3: dTX8V27b3FZ8vwtYRtnPTsQ9bhg.roa (hash: 77xEsKoJwAS0zsMbL8sU52nye1oYIoAnIfCbqIAKy1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:ac:f6:4f:ad:1b:ab:24:f7:c0:0a:20:52:a2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31242850cad41cdf75a3c9d60b21fca543f74384
Validity
Not Before: Nov 4 13:01:54 2025 GMT
Not After : Nov 5 13:01:54 2025 GMT
Subject: CN=e77d49a487f9069ae4249799d64bebb21d0bc749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b6:5a:e1:23:25:21:a9:6b:8e:e1:83:dd:90:
3e:6b:92:02:0b:b0:68:39:db:15:53:1e:73:0f:76:
fc:35:ff:cd:f5:48:66:bc:23:19:f6:0c:fa:55:80:
02:18:36:df:69:0d:ce:3b:52:8e:00:1f:7f:98:26:
51:5d:b7:6f:58:8e:c9:d7:d3:b4:1e:b4:3b:20:1d:
a7:2f:54:e4:f5:9a:e1:9e:29:70:2b:5b:d4:6f:8f:
59:b3:71:1b:cd:30:d5:ab:11:5a:b3:da:fb:79:5d:
f4:3a:1b:56:b3:76:7b:7d:c9:33:7d:2f:59:d9:49:
b4:be:9b:ae:ea:9e:04:3c:fb:2d:9d:10:7e:e7:e1:
c4:05:9e:87:fd:cb:c1:95:54:49:7c:03:b4:dc:56:
73:6d:4f:ea:66:4c:19:c5:e9:92:b2:49:5d:41:ce:
2d:2b:9e:bc:e9:1b:bb:b6:87:3d:51:55:8c:67:74:
10:0f:2c:91:72:a3:4d:d7:4b:a1:52:6a:c8:3f:76:
ad:35:95:f4:81:75:8c:5c:f4:ae:9e:d7:5b:b5:fa:
ee:5e:3a:cd:b6:6c:06:e7:eb:23:a7:e9:03:d0:cc:
ee:98:c5:47:8c:d3:ed:3c:04:13:eb:cd:35:ba:9e:
35:cd:90:08:27:f8:14:70:65:91:2c:7e:b3:14:3e:
9b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7D:49:A4:87:F9:06:9A:E4:24:97:99:D6:4B:EB:B2:1D:0B:C7:49
X509v3 Authority Key Identifier:
keyid:31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:64:5a:1c:78:8c:86:aa:20:09:79:b6:aa:38:5f:dd:bf:00:
77:a7:2c:13:80:0f:7b:3f:a7:db:74:07:1b:b5:b5:7b:fc:33:
25:2a:b6:5c:17:f1:c8:9f:c5:c2:07:3d:b1:e7:1d:35:57:d2:
ad:7c:f7:e4:98:37:9c:72:9e:71:8d:9b:5c:57:db:b8:db:88:
94:55:91:1f:5d:f0:ac:b1:af:f5:d1:bf:7a:78:d9:3a:6d:06:
84:9e:9c:8a:07:b7:d6:15:fd:5f:d6:d1:80:69:8c:cb:38:ab:
85:69:66:62:6f:cf:bf:5a:8f:44:b2:8a:7a:27:fb:1b:6c:ec:
79:8a:60:94:6a:14:57:c3:b0:a4:68:9d:16:c4:cf:9f:9f:59:
c9:52:7b:ff:42:dd:0e:28:d2:e3:b1:85:43:29:7c:a7:3a:c5:
bd:c2:aa:5f:ab:75:36:d7:6a:e0:12:27:42:59:82:ef:53:0b:
83:b5:0c:fb:8b:d7:b0:ba:33:c4:15:9f:9a:98:0e:81:29:58:
d4:93:70:74:40:c0:aa:cc:9a:fd:62:c0:4f:1a:eb:a4:ed:e7:
64:a8:71:0f:46:88:8e:99:26:5c:47:58:b3:94:c3:0a:8c:fc:
50:41:07:90:ea:4e:69:01:b1:14:eb:19:71:ff:1c:53:0a:88:
1c:9f:49:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:52 2025 by rpki-client