Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
File: mssomVmi7E-KKEGRVELMvTRCSTg.mft (raw, json)
Hash identifier: jL7drrzFR2uZavnCuaEnHinhxx22StcOTRHMZK6jz+0=
Subject key identifier: 78:25:C0:23:2C:A6:26:AF:72:26:C4:C0:B0:58:7B:67:E7:F8:FC:35
Authority key identifier: 9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
Certificate issuer: /CN=9acb289959a2ec4f8a2841915442ccbd34424938
Certificate serial: 019A24792BDC5E6A34275B48210129C7806F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
Manifest number: 0232
Signing time: Mon 27 Oct 2025 07:01:52 +0000
Manifest this update: Mon 27 Oct 2025 07:01:52 +0000
Manifest next update: Tue 28 Oct 2025 07:01:52 +0000
Files and hashes: 1: XTu5vjEexW769xTu81kG0hu1WhA.roa (hash: Ne41d2x1Hfl8GjUz/n/mltRHcHp7ZxByOWAV8Ao4X7o=)
2: mssomVmi7E-KKEGRVELMvTRCSTg.crl (hash: 124vlvxYQqZgY54BZHY113MCtLn/yBt+M3LfMJebb+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:79:2b:dc:5e:6a:34:27:5b:48:21:01:29:c7:80:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9acb289959a2ec4f8a2841915442ccbd34424938
Validity
Not Before: Oct 27 07:01:52 2025 GMT
Not After : Oct 28 07:01:52 2025 GMT
Subject: CN=7825c0232ca626af7226c4c0b0587b67e7f8fc35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:33:00:01:a8:20:4e:48:bf:5f:d0:54:a9:bd:
24:34:ba:ea:71:0e:f2:a4:2d:75:d1:65:aa:0a:31:
e1:f0:d8:72:e8:70:94:6f:47:5a:93:2f:64:ba:dd:
04:ec:d3:14:db:f5:c1:d6:83:01:4e:21:9d:cd:80:
40:71:b8:89:63:81:7f:dc:e2:6c:ce:1e:f2:bc:d6:
c6:5d:ef:df:a1:8f:03:d9:35:5e:71:d7:f2:4c:3e:
45:71:28:bd:44:b3:cd:9a:63:ed:4e:42:79:17:49:
be:49:ee:39:77:09:c9:f7:7d:1e:66:db:36:01:29:
53:c4:3b:83:86:1f:81:2c:af:ad:59:b3:5a:ab:80:
bb:b5:1d:76:cc:e9:7d:3b:49:6d:e1:3a:e3:04:68:
0d:bb:b7:d2:66:99:3a:60:31:0c:2d:35:c6:c2:40:
3f:91:a3:9c:c2:2a:ed:4c:26:e5:5b:bd:30:49:1f:
9f:7d:7a:e0:14:de:f8:2f:ca:e4:66:75:f0:cf:44:
d8:08:a4:37:cc:c8:b4:49:3b:1a:0e:74:64:df:04:
04:d3:ba:09:b9:8c:c1:fb:07:59:96:ba:35:63:2d:
e1:33:3a:ff:cc:d5:0b:b9:01:81:3b:1f:f8:6c:8c:
55:f7:4b:66:d3:49:7d:30:72:f2:51:8f:c9:be:7d:
04:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:25:C0:23:2C:A6:26:AF:72:26:C4:C0:B0:58:7B:67:E7:F8:FC:35
X509v3 Authority Key Identifier:
keyid:9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:bb:da:e5:11:62:53:fa:a1:8d:92:f6:f2:31:2e:dc:b0:31:
66:66:14:80:74:c7:c9:d7:f5:d9:36:90:6e:0b:81:c4:b2:12:
20:dd:5a:1b:82:33:e9:27:cb:ee:a9:0b:03:a7:65:ea:22:67:
48:51:b1:61:92:44:bb:85:74:2c:9f:95:71:5c:54:e2:d1:65:
94:87:48:fb:53:70:f6:b9:75:73:eb:9f:e5:97:a9:67:16:ca:
e6:9f:76:dc:56:b6:f9:e8:79:e9:09:cb:c2:5d:7b:13:b7:c9:
3c:04:d9:a3:e8:e1:fe:2b:36:7f:f7:ff:b2:1b:5b:4b:11:91:
ea:d8:b3:5f:46:a4:90:28:ac:5f:0e:48:9d:b7:b1:15:4b:a0:
49:d9:c4:01:2c:03:81:73:b1:7c:4d:6a:84:ce:12:a7:d3:de:
20:bb:35:04:90:4b:8a:b9:27:3c:03:db:16:35:93:ee:d7:4f:
91:55:1f:18:00:f9:04:63:60:74:a7:7f:49:97:ae:e4:f6:35:
c2:36:94:09:58:a1:dc:52:3f:9e:f8:6b:55:2c:2a:3f:41:3c:
27:7b:5f:68:d3:81:b7:eb:7c:22:8f:65:3e:b3:fb:87:bf:02:
43:10:94:0f:f0:87:4e:82:71:38:9c:ca:9f:e1:82:09:62:1a:
2b:38:c8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:28:45 2025 by rpki-client