Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
File: mssomVmi7E-KKEGRVELMvTRCSTg.mft (raw, json)
Hash identifier: lAw1OGWb4JA6OuTVcdFs0UMm/Q4XLV4sYfEnXqBe4F4=
Subject key identifier: 18:C8:B5:73:3C:32:D0:AB:7A:C6:54:AB:C4:0B:D1:D9:20:B2:60:D8
Authority key identifier: 9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
Certificate issuer: /CN=9acb289959a2ec4f8a2841915442ccbd34424938
Certificate serial: 01984B54DF140249DA2ED013FE8A211B371E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
Manifest number: 013D
Signing time: Sun 27 Jul 2025 10:01:49 +0000
Manifest this update: Sun 27 Jul 2025 10:01:49 +0000
Manifest next update: Mon 28 Jul 2025 10:01:49 +0000
Files and hashes: 1: XTu5vjEexW769xTu81kG0hu1WhA.roa (hash: Ne41d2x1Hfl8GjUz/n/mltRHcHp7ZxByOWAV8Ao4X7o=)
2: mssomVmi7E-KKEGRVELMvTRCSTg.crl (hash: QlK6WzyoDF1pKhTEMu6uasRgHyE9s82MXfKXwrD6ahI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:df:14:02:49:da:2e:d0:13:fe:8a:21:1b:37:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9acb289959a2ec4f8a2841915442ccbd34424938
Validity
Not Before: Jul 27 10:01:49 2025 GMT
Not After : Jul 28 10:01:49 2025 GMT
Subject: CN=18c8b5733c32d0ab7ac654abc40bd1d920b260d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8b:73:2f:82:8f:c4:e7:e6:28:d6:d7:19:a2:
01:e7:04:d5:fc:a3:d6:47:70:76:0b:71:bc:9a:3e:
94:8a:52:e2:0b:8e:0b:31:1e:26:ad:33:69:4d:4c:
66:05:17:c4:bf:6e:fb:8c:0a:0e:ee:62:7b:b6:36:
bd:5c:ac:23:cb:5e:09:91:66:ad:db:c5:eb:79:67:
7d:9c:06:d0:01:ab:11:2e:8d:9c:b6:bb:b0:3a:c0:
8d:42:62:36:4b:b7:30:f9:9b:c3:8f:be:78:64:e2:
92:13:f3:66:1a:13:30:4c:35:f1:c7:76:bc:ff:1c:
9c:2b:cb:84:d5:a4:66:01:68:65:bd:62:f0:af:1e:
28:0f:42:b6:f8:72:e0:15:94:a2:a6:ba:f8:65:c3:
69:8d:83:d8:42:68:e4:2e:67:92:a8:0e:48:c9:53:
6e:5b:95:65:bf:c9:c8:b2:fe:7b:b2:d4:2c:5e:c2:
92:40:92:68:3e:59:a3:d3:44:97:20:3c:8a:59:59:
3b:d3:c9:ce:1b:13:77:e1:f3:00:2c:b9:47:2d:3a:
c7:a8:99:93:c0:52:47:a3:93:bc:64:b8:a9:e1:0c:
46:15:e2:3a:07:a1:fa:18:9e:cc:42:4a:03:84:f2:
45:6c:65:cf:2c:61:92:1a:c3:d4:d9:e4:24:b5:40:
2c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C8:B5:73:3C:32:D0:AB:7A:C6:54:AB:C4:0B:D1:D9:20:B2:60:D8
X509v3 Authority Key Identifier:
keyid:9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:de:2d:9e:a5:e1:52:f9:3b:7d:4f:f8:f9:7e:c9:46:d6:4f:
92:d5:1c:e8:b8:f9:62:92:2b:db:77:f9:0a:5f:01:14:9b:d3:
39:4a:3d:89:fb:b0:3c:61:5c:b4:b0:48:13:ee:0d:e9:38:7c:
bb:f2:7e:06:3d:4a:e1:73:c2:40:12:5d:5c:63:03:d2:39:79:
91:47:48:fc:b9:32:92:41:00:80:3a:71:1f:c9:78:55:2a:63:
98:76:d0:86:0d:d6:ec:bd:7d:f4:fe:7c:41:c3:93:52:45:20:
2d:41:a8:12:93:21:7b:95:90:67:bd:d6:1b:51:72:39:31:b6:
56:68:bc:3f:54:f9:bd:0a:24:c0:47:4f:28:22:a7:ea:0f:ec:
cd:eb:af:24:85:47:af:5d:6e:60:42:95:c4:38:8c:b0:ea:e0:
88:0c:21:e1:7d:04:21:aa:8a:2f:a7:b7:dd:a3:34:ed:4f:b9:
ed:30:07:92:a6:1f:1c:e3:62:d8:e7:c0:c3:28:e9:2c:4b:a4:
28:50:ee:bb:39:cd:33:77:42:ab:b4:d9:34:ea:a6:8d:a2:83:
d2:f6:dd:96:71:f4:de:b8:ca:dc:24:67:a0:c3:7d:fb:b9:79:
0e:d7:5f:1f:ad:31:b2:2f:b9:9f:82:65:a3:42:05:fb:59:5e:
de:37:37:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:46:25 2025 by rpki-client