Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
File: mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft (raw, json)
Hash identifier: jGXaZsvFZd4SRDFFBvvsYGCBHjHtiEAler4C4Ow2bLY=
Subject key identifier: 66:2C:D0:47:94:F3:C2:0A:BF:CE:FB:13:9C:1D:DD:A9:7A:DF:91:55
Authority key identifier: 99:25:2F:F7:F4:DC:F6:22:34:D2:2F:86:A1:13:5B:34:49:23:DA:AB
Certificate issuer: /CN=99252ff7f4dcf62234d22f86a1135b344923daab
Certificate serial: 019A4F625CB5BB285A2DAA2AC61539061D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
Manifest number: 09C4
Signing time: Tue 04 Nov 2025 15:00:37 +0000
Manifest this update: Tue 04 Nov 2025 15:00:37 +0000
Manifest next update: Wed 05 Nov 2025 15:00:37 +0000
Files and hashes: 1: 7qi71OAs6leux75HGJJKxd48zLc.roa (hash: z9Iokxbw9AVC6K3SxkWdhXBi3p5Bja4hYfL/NkWRSQw=)
2: mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl (hash: RYJa2wQF2llvJMaGRKGJE/JgSw+OqyDMxF11LajXm40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:5c:b5:bb:28:5a:2d:aa:2a:c6:15:39:06:1d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99252ff7f4dcf62234d22f86a1135b344923daab
Validity
Not Before: Nov 4 15:00:37 2025 GMT
Not After : Nov 5 15:00:37 2025 GMT
Subject: CN=662cd04794f3c20abfcefb139c1ddda97adf9155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cd:f1:7b:62:55:20:19:c1:80:52:73:3f:cf:
27:39:8e:e7:e9:d7:f6:97:6c:83:86:55:1a:b4:4a:
4d:17:a3:8d:62:9e:7e:a8:d2:fa:2b:a0:a4:f9:24:
73:a5:5e:80:04:95:cc:b7:39:b8:31:46:be:ad:67:
da:10:d0:9c:42:51:da:bf:44:43:43:59:65:b1:2a:
d9:c3:4f:ae:6f:2f:33:c2:79:14:59:40:c4:ae:39:
6a:6d:19:b5:8e:f4:83:b8:e0:28:45:ba:dd:72:58:
26:d5:85:f7:68:9d:7c:11:92:be:cf:04:2c:6c:b5:
a0:5a:a5:2e:f7:4f:f3:f3:21:85:92:52:d6:90:d5:
ac:df:27:a1:86:ee:dc:51:1e:66:f7:3d:25:14:1a:
a9:76:a0:6c:51:2d:c1:b2:73:ad:39:bf:20:41:26:
61:57:1a:a3:b7:75:42:20:6a:53:df:3d:fd:67:bd:
a2:7f:00:12:40:5e:8f:80:ab:a6:56:10:36:f8:f2:
c0:31:2a:9c:fb:6c:ee:4c:15:16:69:fa:f9:84:e6:
dc:4c:fc:cf:dd:6e:b6:d1:8b:b6:60:f8:b2:c5:da:
c1:d3:53:3c:3a:c1:22:62:3d:3d:6d:35:db:dc:e4:
e7:30:a2:8e:df:14:fb:3a:5a:5b:83:e5:25:81:58:
f9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2C:D0:47:94:F3:C2:0A:BF:CE:FB:13:9C:1D:DD:A9:7A:DF:91:55
X509v3 Authority Key Identifier:
keyid:99:25:2F:F7:F4:DC:F6:22:34:D2:2F:86:A1:13:5B:34:49:23:DA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b2:57:79:44:dc:6f:c6:89:ba:c2:c4:0d:53:e0:c1:d3:b2:
a5:d5:9e:13:c5:9f:13:1d:82:30:f8:a1:f9:41:ed:fd:67:29:
ad:e5:1d:c7:f7:06:d5:6b:9c:69:f6:06:eb:27:d0:e8:f0:54:
b2:10:c4:3e:18:c7:9d:7e:e7:cc:71:71:a7:3e:89:68:82:02:
56:57:bf:fb:ff:d7:8e:62:4a:ae:f0:35:58:27:2e:2f:28:02:
f9:b2:63:1f:37:af:66:d4:6c:d2:08:ce:de:1a:88:89:71:11:
62:62:5b:3c:85:a8:03:7c:4f:1d:47:cf:ac:62:03:d0:0f:ea:
78:7b:46:56:52:7e:a2:37:56:bc:9f:64:71:73:1a:03:a7:60:
89:88:46:c8:0f:48:8a:e7:25:25:a4:6a:8c:01:fa:0d:4d:2a:
fa:4e:6d:fc:7c:b3:c8:e6:b9:f9:19:14:45:2b:3c:53:c0:fd:
65:82:04:a5:98:92:c3:ee:0d:7a:f7:77:cd:eb:bb:cc:9f:f2:
eb:45:af:58:2c:7a:b8:c8:bc:44:67:03:46:96:35:78:c8:e0:
21:25:97:52:e9:af:ae:8f:b8:3e:f9:ce:41:d4:28:c2:0e:d4:
3e:ac:76:25:75:f9:1b:2f:47:cc:38:81:cc:fb:26:b0:62:58:
f1:d9:8a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:10 2025 by rpki-client