Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
File: mssomVmi7E-KKEGRVELMvTRCSTg.mft (raw, json)
Hash identifier: KrOh9XRpaoi8utGNZxe4U4TNiiiYLSYbNVGLWmmPZAg=
Subject key identifier: 37:08:1A:73:93:8A:C4:86:A5:D5:AB:5D:02:38:24:53:AD:AF:E6:98
Authority key identifier: 9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
Certificate issuer: /CN=9acb289959a2ec4f8a2841915442ccbd34424938
Certificate serial: 0199350007F9EE49DFE8F158B5576FA6187E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
Manifest number: 01B6
Signing time: Wed 10 Sep 2025 19:00:18 +0000
Manifest this update: Wed 10 Sep 2025 19:00:18 +0000
Manifest next update: Thu 11 Sep 2025 19:00:18 +0000
Files and hashes: 1: XTu5vjEexW769xTu81kG0hu1WhA.roa (hash: Ne41d2x1Hfl8GjUz/n/mltRHcHp7ZxByOWAV8Ao4X7o=)
2: mssomVmi7E-KKEGRVELMvTRCSTg.crl (hash: AmZmAMrVIs+22ThAoiEwiQNIulSPq/XPhpK+AIixTXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:07:f9:ee:49:df:e8:f1:58:b5:57:6f:a6:18:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9acb289959a2ec4f8a2841915442ccbd34424938
Validity
Not Before: Sep 10 19:00:18 2025 GMT
Not After : Sep 11 19:00:18 2025 GMT
Subject: CN=37081a73938ac486a5d5ab5d02382453adafe698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:bb:7d:38:13:89:5e:50:95:a8:dd:3d:36:
90:f7:d6:c1:90:3f:7d:a4:60:03:fa:d7:2c:39:de:
09:30:95:fd:38:8f:ca:09:4a:d2:57:0a:c9:6c:89:
7e:cf:da:64:83:1d:84:bf:0a:f2:cd:4a:bc:bf:b3:
91:a2:c6:9d:00:a3:f0:dd:a4:c1:68:f2:84:2b:62:
a4:fc:b6:b6:01:1d:d7:af:e1:71:98:8c:aa:c9:ff:
50:d4:a5:00:d2:f3:18:be:53:12:d4:4b:f6:44:1e:
ae:86:08:6d:63:4b:30:09:9b:fe:72:ca:66:6a:05:
72:0d:80:ee:ee:ed:25:3b:eb:b1:c0:00:99:a8:7e:
af:f7:75:60:38:cf:17:a6:c4:c3:5e:23:05:1f:e1:
98:1f:db:ed:6e:8c:c8:e6:16:76:4f:8e:d5:38:85:
a5:4d:11:17:f7:1d:76:89:14:23:7d:87:0f:57:43:
7a:79:d1:df:8d:2f:1a:9d:be:6f:0b:20:b7:ae:12:
68:f6:e9:51:c4:b3:6c:a5:1b:bf:8e:a4:8b:8a:7d:
2b:1d:48:1d:64:5d:f3:37:8d:6a:a0:0e:63:57:e5:
78:7f:64:ac:4e:77:d6:9f:90:74:8a:15:cd:c3:c2:
43:c8:34:8d:78:68:8d:84:60:7a:91:b7:36:53:c5:
da:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:08:1A:73:93:8A:C4:86:A5:D5:AB:5D:02:38:24:53:AD:AF:E6:98
X509v3 Authority Key Identifier:
keyid:9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a2:e2:62:fb:a5:ee:fe:a4:55:c3:d7:8e:76:46:33:b5:99:
87:a2:f6:3a:de:1c:9a:ac:c7:5c:b3:65:29:c6:a4:34:8e:0a:
da:32:4e:39:b3:ad:8a:8e:79:03:8f:b4:54:12:d6:ab:bf:cd:
d3:37:a3:33:07:06:68:1a:6c:ec:8e:46:ce:2c:37:f3:0e:15:
1e:0c:44:3b:72:60:3c:61:38:65:42:c6:4e:d5:9b:7a:0b:e7:
c2:59:4a:71:f8:2b:94:14:6e:38:aa:62:4a:a3:ec:fd:79:7c:
f9:e5:e1:01:eb:1f:5a:bf:e6:f3:70:7c:7e:8c:8a:e3:dd:55:
89:8d:93:91:65:7b:c6:6b:23:cb:8c:ed:f4:45:3c:68:6d:78:
da:98:c0:7e:16:bd:07:c9:c4:67:fd:aa:c7:e6:70:8e:76:b3:
56:f9:6b:25:3a:61:e1:52:52:30:6d:b7:7a:98:9c:56:b8:8f:
c4:40:68:70:c0:bf:10:7d:45:e3:86:bb:42:f2:f7:db:46:8e:
e9:95:ab:c5:78:c8:1a:e4:9e:52:da:f9:53:be:de:4c:6e:47:
57:f4:f4:5b:fc:85:86:2a:37:50:2c:ab:91:15:04:59:bb:57:
9f:26:55:5f:45:14:10:a3:47:c6:c4:58:6b:ab:85:b6:de:33:
8c:1a:d0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 03:00:26 2025 by rpki-client