Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
File: mssomVmi7E-KKEGRVELMvTRCSTg.mft (raw, json)
Hash identifier: DZMla9ERG5NGZDKL2dViRMazY41JOmGyzIj4oOHUrBU=
Subject key identifier: 84:89:E6:47:59:3E:84:38:BB:5B:62:A0:E5:0F:8C:3E:E0:36:71:D5
Authority key identifier: 9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
Certificate issuer: /CN=9acb289959a2ec4f8a2841915442ccbd34424938
Certificate serial: 019748553A52E6ED550E0A9CF325C4A27D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
Manifest number: B7
Signing time: Sat 07 Jun 2025 03:00:34 +0000
Manifest this update: Sat 07 Jun 2025 03:00:34 +0000
Manifest next update: Sun 08 Jun 2025 03:00:34 +0000
Files and hashes: 1: XTu5vjEexW769xTu81kG0hu1WhA.roa (hash: Ne41d2x1Hfl8GjUz/n/mltRHcHp7ZxByOWAV8Ao4X7o=)
2: mssomVmi7E-KKEGRVELMvTRCSTg.crl (hash: wsTOcs77Xyi9oOMMARkiHZKR0m3H+TLlJDnicyOk6aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:3a:52:e6:ed:55:0e:0a:9c:f3:25:c4:a2:7d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9acb289959a2ec4f8a2841915442ccbd34424938
Validity
Not Before: Jun 7 03:00:34 2025 GMT
Not After : Jun 8 03:00:34 2025 GMT
Subject: CN=8489e647593e8438bb5b62a0e50f8c3ee03671d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0a:c4:1c:56:e9:dd:7f:99:1b:09:12:40:d8:
8e:ca:34:54:c3:d2:28:5e:93:44:53:2f:6d:16:fa:
54:7f:c9:94:49:ab:74:f9:0d:0b:94:d3:27:ec:a2:
58:47:3c:0c:3f:1b:61:4a:d4:72:a7:8b:49:8d:fd:
7d:6a:53:81:f4:3c:a9:6f:8b:52:33:f7:a1:93:67:
69:15:d6:5c:2f:83:63:5a:8e:e4:7e:e5:22:4b:01:
c6:50:97:83:85:5a:6f:96:9c:de:a1:ce:a4:fb:79:
f5:1a:96:00:92:d6:ae:07:3d:5f:af:6b:0d:22:e7:
5b:ab:0e:50:12:9c:d4:cd:3a:2f:a1:ca:2d:a8:0a:
2b:8c:b8:6d:8f:9d:96:1c:20:f0:dd:71:0d:f5:7b:
9f:30:18:37:2c:6a:59:c5:1e:d9:75:97:b9:cf:fe:
1f:d7:31:0b:97:cb:c3:f2:ae:c0:50:e2:3d:8e:d7:
4f:92:b3:62:12:ad:f4:ec:02:ce:f6:83:71:de:2b:
bd:b7:c7:53:14:f3:f1:ae:88:4c:de:16:6a:a7:6a:
4e:b4:e5:cf:79:e3:a6:19:53:af:26:14:94:e3:6e:
b0:93:07:73:77:77:63:ed:c7:44:2a:fd:17:31:bb:
23:3d:bb:ae:2c:4a:2a:c3:3f:23:ae:e1:84:5f:a5:
98:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:89:E6:47:59:3E:84:38:BB:5B:62:A0:E5:0F:8C:3E:E0:36:71:D5
X509v3 Authority Key Identifier:
keyid:9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:10:ec:f2:f9:4e:54:8b:2a:60:18:2f:72:23:c3:71:ea:84:
88:bc:92:59:3a:15:c0:b4:cb:2f:ee:f6:99:0e:6d:e8:6e:04:
40:8a:df:41:2b:13:25:98:ab:76:c7:43:d6:f0:8b:f9:64:6b:
a4:9b:aa:a7:24:51:a2:b7:62:9c:6f:c0:ad:44:19:7f:79:51:
e7:6a:c6:37:52:a9:f3:4a:05:34:0d:cf:ab:9d:86:91:62:c9:
16:15:0e:d2:ca:eb:54:3e:8d:ac:8f:dc:a1:55:a7:cc:a0:c4:
8d:c6:ec:28:90:4b:99:59:36:b2:64:c7:80:15:2d:86:8e:ae:
56:2a:e0:1a:38:96:79:0d:66:80:3f:86:2e:c9:38:03:7b:b5:
18:0f:4b:3a:34:1b:78:48:0f:3a:80:37:df:54:96:e2:65:fc:
5b:f4:98:10:16:bc:ec:7a:e6:ef:36:15:22:20:3d:43:5c:7a:
12:07:26:7c:50:03:34:af:53:c8:36:05:5d:b8:65:28:47:c3:
16:4f:19:59:c7:96:00:56:e2:ab:86:ec:33:88:9a:ac:bd:1e:
33:c1:32:96:f2:4b:aa:7c:c3:2f:d3:c2:21:49:ea:41:2a:36:
8f:ae:b3:57:81:75:be:68:1b:ae:7b:6a:e3:e1:ca:73:b8:e0:
0a:94:c7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:12:07 2025 by rpki-client