Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
File: mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft (raw, json)
Hash identifier: qU3c9libhxiiHC/NsAl1F8Qrd3zWtLyV0tuGGLetcrg=
Subject key identifier: 72:D7:91:A9:98:F2:03:6E:B4:AD:BD:BE:54:C6:EF:6D:1B:69:F1:3A
Authority key identifier: 99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA
Certificate issuer: /CN=9923d1040c05f099fb4fedb498bb4a14832798fa
Certificate serial: 01984589E73EDD7A59C5AF54EF9F179D2758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
Manifest number: 04FB
Signing time: Sat 26 Jul 2025 07:02:02 +0000
Manifest this update: Sat 26 Jul 2025 07:02:02 +0000
Manifest next update: Sun 27 Jul 2025 07:02:02 +0000
Files and hashes: 1: 6X834B5gcsNjXymrQMfROjTj6Pc.roa (hash: eUjrS9xR0GNckSwbqncq7fyluCC422BD9P+h/ci+z+8=)
2: mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl (hash: zd9q+BTYmw68x7gsnT9QIc1aApyaI+Sfu2m1I/KckAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:e7:3e:dd:7a:59:c5:af:54:ef:9f:17:9d:27:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9923d1040c05f099fb4fedb498bb4a14832798fa
Validity
Not Before: Jul 26 07:02:02 2025 GMT
Not After : Jul 27 07:02:02 2025 GMT
Subject: CN=72d791a998f2036eb4adbdbe54c6ef6d1b69f13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4d:c0:e9:69:7d:3e:78:b0:65:19:fa:69:c3:
b7:dc:c6:5e:59:3a:a9:64:79:af:a0:49:45:bc:7a:
c8:fa:30:07:f4:66:00:f5:9c:12:68:97:b4:20:97:
15:a6:bb:c7:ec:19:f3:21:bd:7e:1c:af:85:f8:97:
6f:37:b1:49:2c:c8:2f:24:a4:a7:fa:74:b1:e0:21:
c0:02:7a:4b:55:88:61:97:a0:f3:a4:e5:41:7c:b0:
0c:46:5e:09:53:b6:7b:a6:71:34:84:50:7f:8b:0f:
24:9e:bd:fc:8b:93:66:a2:af:59:ff:4f:22:aa:63:
c5:e0:73:41:05:38:ae:43:60:07:0d:b0:dc:67:96:
74:88:af:c5:6a:d5:05:3c:19:dd:e2:4d:3c:b0:9d:
47:ca:fc:b1:73:76:34:7c:47:fa:f8:6c:85:eb:9e:
c0:75:53:86:18:57:b1:94:b5:e4:30:6e:7f:42:fa:
d1:0e:d8:b3:19:bd:0a:fe:72:2e:09:90:b2:77:e8:
b7:29:09:39:7c:6c:e2:29:44:18:af:47:a8:0c:1e:
e2:15:21:cb:35:1e:ff:87:28:b7:71:11:41:84:64:
2e:83:9a:47:83:70:a9:a3:c7:5b:08:0c:46:95:5b:
55:6f:29:9d:c9:be:a4:82:fb:de:1b:df:5d:ab:24:
6e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D7:91:A9:98:F2:03:6E:B4:AD:BD:BE:54:C6:EF:6D:1B:69:F1:3A
X509v3 Authority Key Identifier:
keyid:99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b5:ed:41:88:53:bd:ca:1e:b2:d1:ed:b5:09:e5:fa:eb:c1:
ba:52:4b:55:18:17:4c:93:8d:86:33:b1:ab:fa:36:09:69:cc:
2b:c0:0e:c0:37:a9:57:86:7b:02:da:c8:db:91:f3:b1:7b:82:
8d:77:ba:ad:1d:fe:13:9b:47:e2:25:48:ec:a4:93:61:00:a8:
28:56:89:95:e9:89:7a:dc:2c:53:e1:95:48:ec:08:fb:bc:8d:
aa:ef:d9:7f:18:1f:ad:dd:9a:fa:ad:2b:e1:26:f2:72:5e:a9:
68:2b:51:1c:31:a9:65:9c:5d:de:d2:76:25:15:93:88:e4:32:
0a:e8:9e:fe:03:08:98:9a:9d:4b:81:46:0d:80:83:a4:36:dd:
6b:bd:39:7a:d1:d0:62:13:4c:bd:04:11:83:bd:56:91:c1:e8:
98:bf:12:72:68:2c:6c:36:82:4e:0e:21:d6:96:1d:c4:5d:17:
c2:7b:f6:be:c9:0e:a0:83:9b:70:ce:d3:10:9b:8d:d8:80:56:
28:15:a8:39:0a:fa:36:ee:09:e5:9b:19:cb:68:6c:7b:49:1c:
b0:e7:8e:7a:ed:7c:fa:1f:98:68:8e:36:62:b7:c2:51:6e:ed:
cc:bd:f5:88:45:15:0b:9e:16:e6:46:a0:b3:18:6c:9e:76:0f:
f9:d5:6f:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFiec+3XpZxa9U758XnSdYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MjNkMTA0MGMwNWYwOTlmYjRmZWRiNDk4YmI0YTE0ODMy
Nzk4ZmEwHhcNMjUwNzI2MDcwMjAyWhcNMjUwNzI3MDcwMjAyWjAzMTEwLwYDVQQD
Eyg3MmQ3OTFhOTk4ZjIwMzZlYjRhZGJkYmU1NGM2ZWY2ZDFiNjlmMTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE3A6Wl9PniwZRn6acO33MZeWTqp
ZHmvoElFvHrI+jAH9GYA9ZwSaJe0IJcVprvH7BnzIb1+HK+F+JdvN7FJLMgvJKSn
+nSx4CHAAnpLVYhhl6DzpOVBfLAMRl4JU7Z7pnE0hFB/iw8knr38i5Nmoq9Z/08i
qmPF4HNBBTiuQ2AHDbDcZ5Z0iK/FatUFPBnd4k08sJ1Hyvyxc3Y0fEf6+GyF657A
dVOGGFexlLXkMG5/QvrRDtizGb0K/nIuCZCyd+i3KQk5fGziKUQYr0eoDB7iFSHL
NR7/hyi3cRFBhGQug5pHg3Cpo8dbCAxGlVtVbymdyb6kgvveG99dqyRubQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLXkamY8gNutK29vlTG720bafE6MB8GA1UdIwQY
MBaAFJkj0QQMBfCZ+0/ttJi7ShSDJ5j6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVNQUkJBd0Y4Sm43VC0yMG1MdEtGSU1ubVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy80ZDA1Y2YtNjNiMC00NmFmLTllMmMt
MjA2ZTgyMzM2Y2RlLzEvbVNQUkJBd0Y4Sm43VC0yMG1MdEtGSU1ubVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy80ZDA1Y2YtNjNiMC00NmFmLTllMmMtMjA2ZTgyMzM2Y2Rl
LzEvbVNQUkJBd0Y4Sm43VC0yMG1MdEtGSU1ubVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl7XtQYhT
vcoestHttQnl+uvBulJLVRgXTJONhjOxq/o2CWnMK8AOwDepV4Z7AtrI25HzsXuC
jXe6rR3+E5tH4iVI7KSTYQCoKFaJlemJetwsU+GVSOwI+7yNqu/Zfxgfrd2a+q0r
4Sbycl6paCtRHDGpZZxd3tJ2JRWTiOQyCuie/gMImJqdS4FGDYCDpDbda705etHQ
YhNMvQQRg71WkcHomL8ScmgsbDaCTg4h1pYdxF0Xwnv2vskOoIObcM7TEJuN2IBW
KBWoOQr6Nu4J5ZsZy2hse0kcsOeOeu18+h+YaI42YrfCUW7tzL31iEUVC54W5kag
sxhsnnYP+dVvZw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:30:10 2025 by rpki-client