Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
File: MksgMsOPsX9C-IMqTCHh8NXxnuA.mft (raw, json)
Hash identifier: 0fHvoP89L65e7RWPeR9sRs9YG0c59NNqYpZR/JU20G4=
Subject key identifier: 0F:46:AC:88:9A:D2:AB:DE:A0:CF:FD:24:E2:79:A0:8E:FE:44:84:61
Authority key identifier: 32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
Certificate issuer: /CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Certificate serial: 019A714A2182C5D9BBFADA3E483592BD11A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
Manifest number: 03C4
Signing time: Tue 11 Nov 2025 05:01:14 +0000
Manifest this update: Tue 11 Nov 2025 05:01:14 +0000
Manifest next update: Wed 12 Nov 2025 05:01:14 +0000
Files and hashes: 1: 1-5n0KWaGHCDQYhl2aLfMjhVyMRI.roa (hash: KATmxtMp2ikC0o4XIGyQU9bJkWtT8ILR3+Dm38ZRLnA=)
2: MksgMsOPsX9C-IMqTCHh8NXxnuA.crl (hash: qtN+7zLKUoys8zuJ1adKCZ5d2xaAjtSZ8+g5FKC0q7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:21:82:c5:d9:bb:fa:da:3e:48:35:92:bd:11:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Validity
Not Before: Nov 11 05:01:14 2025 GMT
Not After : Nov 12 05:01:14 2025 GMT
Subject: CN=0f46ac889ad2abdea0cffd24e279a08efe448461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ef:7d:3b:86:db:5d:3d:3f:d2:b7:fb:e6:19:
1c:54:f7:8e:b5:61:55:5e:6c:dc:5d:75:50:14:b6:
71:ea:6e:a4:4d:4a:13:18:39:68:81:24:ca:74:07:
1f:15:54:2f:f7:ad:9b:68:2c:bf:95:36:dc:e5:ec:
48:a5:6e:6b:de:73:02:e9:96:4f:92:ef:4a:84:04:
c7:f0:6d:cb:83:eb:99:bd:18:9f:47:53:f5:81:64:
21:67:3d:80:c7:a6:df:ad:04:f3:7d:33:bd:4a:15:
ad:10:ee:f1:fe:8f:62:9f:12:a9:2c:60:21:7d:83:
6c:2c:5f:02:c7:ac:b5:0f:c6:53:28:9d:83:48:a7:
0b:a2:4c:4c:e1:89:5a:e4:c4:4c:9e:b2:41:78:ff:
2a:d3:a5:54:b7:6f:6a:95:cf:02:1e:8b:9a:9b:76:
b0:5c:24:42:15:3e:d6:41:3f:22:8b:cf:6e:27:f0:
9c:a8:b0:3d:c4:81:e9:96:24:cf:74:10:71:0c:ea:
97:a6:d7:9e:5f:81:c8:97:11:53:f9:0c:8b:35:6c:
d3:56:c2:33:8d:d5:f6:40:c7:bc:0d:b9:46:a3:6e:
2b:62:b6:ae:f0:9f:e8:1c:06:13:73:6a:87:a9:a2:
65:f4:01:af:1a:74:9d:fc:84:78:dd:e9:05:6a:58:
48:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:46:AC:88:9A:D2:AB:DE:A0:CF:FD:24:E2:79:A0:8E:FE:44:84:61
X509v3 Authority Key Identifier:
keyid:32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d6:67:9f:ad:68:68:a6:65:4e:1c:1c:ab:b5:14:8a:a3:11:
7d:69:75:2d:62:a9:66:82:13:bc:07:fc:60:28:5b:54:da:7d:
68:07:d1:65:42:9f:af:48:12:3d:30:b8:a9:76:58:0c:13:62:
5d:31:bd:7c:46:c0:04:5a:4a:b3:d8:54:4a:da:36:36:0a:06:
b4:1d:98:36:09:b3:7e:7d:65:5c:95:ae:b5:4b:91:7e:1c:61:
b6:50:69:1b:74:8c:15:65:01:a0:d2:7f:86:43:c9:bc:13:94:
02:6e:78:6f:94:6d:75:ec:41:8c:bf:32:de:54:fd:df:ba:7a:
36:0c:0e:fc:6d:e2:50:2f:73:28:84:ba:da:8f:ad:b4:3d:8d:
a8:7b:a4:4a:09:65:39:30:95:02:20:47:bc:d2:09:ad:61:00:
50:82:1e:9b:89:43:be:06:9b:76:b1:89:4f:d9:bb:23:2f:44:
bb:5a:54:cf:cc:d1:e5:1a:be:b8:d5:84:a7:17:45:de:94:7b:
1b:fe:4a:12:6e:b3:d5:ac:25:5e:fe:23:88:0b:55:3f:99:a1:
20:80:6e:3e:c6:99:03:b3:b6:1f:ce:31:8a:86:5d:65:22:2a:
dc:ff:47:88:5a:5a:66:25:9e:f5:d2:b0:3f:4a:93:3c:13:ea:
0a:cc:99:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:51 2025 by rpki-client