Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
File: Mss8BdaixRwv9S3Z3LnitVxASPk.mft (raw, json)
Hash identifier: iyCcWn4IMP5U+wjXxr2iwUx0u1OZRivMP7QPsuYgijU=
Subject key identifier: 2C:F5:CC:10:80:59:EE:1E:04:60:18:E1:4F:A7:13:70:76:53:07:63
Authority key identifier: 32:CB:3C:05:D6:A2:C5:1C:2F:F5:2D:D9:DC:B9:E2:B5:5C:40:48:F9
Certificate issuer: /CN=32cb3c05d6a2c51c2ff52dd9dcb9e2b55c4048f9
Certificate serial: 019A722595D17816F281F079D79E41437E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 09:00:57 +0000
Manifest this update: Tue 11 Nov 2025 09:00:57 +0000
Manifest next update: Wed 12 Nov 2025 09:00:57 +0000
Files and hashes: 1: Mss8BdaixRwv9S3Z3LnitVxASPk.crl (hash: jkktHgiPsAtR3xenMULtjjEJ6Yu8OpI282IblvIvxKE=)
2: pkl1dG1Tn-y8sIzafCzQdaxLGO0.roa (hash: +t+HSalevZKgrBOwo+A1WYwHvxUsDh9dx8CrhAZYnCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:95:d1:78:16:f2:81:f0:79:d7:9e:41:43:7e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32cb3c05d6a2c51c2ff52dd9dcb9e2b55c4048f9
Validity
Not Before: Nov 11 09:00:57 2025 GMT
Not After : Nov 12 09:00:57 2025 GMT
Subject: CN=2cf5cc108059ee1e046018e14fa7137076530763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ea:1e:2c:9e:37:12:9f:57:0f:e0:c3:39:6f:
f1:76:bb:22:32:9a:78:5d:0b:a0:bb:8f:90:8d:77:
3d:5a:af:d2:2f:72:e3:2d:52:d9:8a:c0:a3:0a:9d:
88:2c:33:cf:a4:d2:9a:ca:e2:de:0e:49:ff:0d:7b:
ca:57:58:37:34:49:08:1f:d8:f6:12:a2:ba:1c:f6:
b4:46:f4:71:7d:c5:e8:46:fc:2e:16:82:6d:cf:e7:
8e:cb:b0:0a:28:e7:3a:8d:64:b7:e7:56:67:d6:79:
74:30:99:b7:96:f1:84:7f:5c:88:4c:1c:a6:70:b6:
2c:15:2c:2b:ff:6f:d4:fb:a7:6d:53:6a:8c:34:64:
0a:30:e0:15:a4:a5:6c:64:50:76:97:a6:52:60:0c:
d2:b5:51:95:76:9b:90:d3:29:74:c1:69:28:d7:c2:
79:74:3b:aa:a2:68:67:c2:a8:0d:6e:50:29:de:97:
34:28:d5:9a:fb:89:b4:02:6d:7f:03:dc:ae:be:69:
b3:e2:c3:8d:99:78:36:38:0e:38:b8:1d:c9:75:b6:
6c:84:d0:ae:d1:ca:3e:be:a1:16:0b:c3:f4:1b:d1:
50:1d:91:f3:20:75:70:8a:7d:e5:e6:65:5a:46:e3:
0f:c0:9a:99:d4:d9:5a:e3:51:b3:de:09:40:fe:c8:
b2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F5:CC:10:80:59:EE:1E:04:60:18:E1:4F:A7:13:70:76:53:07:63
X509v3 Authority Key Identifier:
keyid:32:CB:3C:05:D6:A2:C5:1C:2F:F5:2D:D9:DC:B9:E2:B5:5C:40:48:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:fa:ee:ce:2c:81:56:80:0a:5c:4e:7c:e5:b3:8f:83:5c:f4:
5b:7d:77:50:2a:51:e8:94:bc:c2:70:b8:db:0f:44:ac:28:fc:
59:81:8e:6e:bc:8e:ef:b6:fc:46:34:f9:20:15:1f:1c:20:90:
3f:62:c7:fa:a6:6f:62:3a:3c:56:86:e6:74:99:7d:b1:87:53:
bc:ef:3c:12:72:73:73:ef:34:80:cb:f3:cd:39:c5:c4:0a:d3:
06:40:41:a0:24:5f:35:11:25:69:27:37:97:4e:00:52:ab:94:
6e:de:09:5b:f6:cd:e7:0d:c4:db:f5:29:5b:03:ca:25:b5:fa:
7e:ec:a3:d0:dd:6a:ce:a2:7f:16:dc:b7:c0:cc:cc:47:e3:9e:
73:1d:61:2f:1f:a6:02:a5:59:7e:9b:50:65:8f:d4:ba:3b:c7:
54:32:be:d1:87:bc:15:1f:0a:7b:d3:ba:8e:6b:d7:a6:5f:70:
27:0a:eb:55:e1:bc:ec:58:54:7a:09:7b:72:90:b3:c4:3f:86:
5b:51:d7:51:5e:6a:96:42:81:c4:31:db:e8:63:4f:11:49:9f:
f2:35:11:58:62:c3:ac:c3:6e:fd:23:d3:4d:38:d5:62:80:40:
d7:b5:ce:32:ac:62:7b:b7:26:72:b6:c7:9f:d4:56:cb:ae:cd:
51:f1:38:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:24 2025 by rpki-client