Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
File: mSuGCVzlWNLpYYcopEIoonvpCY8.mft (raw, json)
Hash identifier: MllcpAjKxDxMUUpxvhn0iCWtgwTUcsHgBju6vM73GYk=
Subject key identifier: 0B:AF:C8:41:FD:6C:E3:4A:9C:88:43:3F:29:64:A0:01:C0:35:51:B2
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 01994EC030A63497DC012C531710D034EF08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
Manifest number: 16B0
Signing time: Mon 15 Sep 2025 19:00:42 +0000
Manifest this update: Mon 15 Sep 2025 19:00:42 +0000
Manifest next update: Tue 16 Sep 2025 19:00:42 +0000
Files and hashes: 1: BlYJMM4ls15zJ30iXM_Rv84I-d4.roa (hash: MRyw1DsxxSYF8y5F3ROkLuVWefJpMb00uWwfBxmnsGk=)
2: e2BcAV15shqdiU98OktC9_gXkUU.roa (hash: rZS4+9XjUiv9YzxM45CHUYZIhLrSaA9eZkuie33ePcg=)
3: mSuGCVzlWNLpYYcopEIoonvpCY8.crl (hash: SCuvp8/7CL/XgTFGoO25VQsLKMbbXIOGRwmKsxRf/xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 17:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4e:c0:30:a6:34:97:dc:01:2c:53:17:10:d0:34:ef:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Sep 15 19:00:42 2025 GMT
Not After : Sep 16 19:00:42 2025 GMT
Subject: CN=0bafc841fd6ce34a9c88433f2964a001c03551b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:35:a0:eb:8a:80:2e:6c:8d:f9:f4:74:ad:5e:
2e:39:8f:f1:c8:03:86:ac:70:6a:6f:b7:af:0d:13:
59:31:86:5f:30:cd:f4:6a:7f:7a:fe:51:7d:2c:11:
a4:36:6e:ee:38:b2:bc:96:da:32:02:71:dd:c7:ef:
5b:19:c4:d3:fc:7e:f6:08:2f:ad:f4:29:42:d4:a4:
35:8f:3c:cc:49:04:37:20:90:66:4e:f3:4b:54:0f:
f9:5d:37:05:ce:f6:0e:96:e4:62:24:94:68:83:e2:
54:b5:80:a8:56:2a:b0:63:f1:97:f8:e5:39:35:fb:
d7:24:f8:1a:db:2e:4a:4e:b2:e0:8f:70:d9:28:62:
fc:c1:23:8d:98:40:e8:77:bb:ce:2c:2e:d5:65:c8:
f1:a7:39:38:29:c1:35:d8:df:a6:50:c2:d7:c9:7a:
b3:8d:59:e0:bc:57:a3:c3:4b:64:f2:90:a2:73:29:
c1:0b:75:22:6b:c0:c8:9e:96:fe:a3:fb:74:a2:a7:
72:d8:f5:3f:99:27:8a:91:41:7a:51:35:57:da:57:
0b:1a:72:bb:9c:b6:aa:32:8f:5d:f5:06:be:86:5a:
ea:98:de:3a:ea:a5:4e:7d:69:e8:03:5d:4c:45:55:
ee:1b:b1:29:4d:9d:31:69:62:05:05:9d:71:65:4a:
c9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AF:C8:41:FD:6C:E3:4A:9C:88:43:3F:29:64:A0:01:C0:35:51:B2
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6d:1b:f5:cd:a8:72:13:fc:dc:4d:d5:9b:bf:db:27:99:21:
29:a0:83:99:f0:b9:c3:56:e7:3f:f0:6d:03:1d:4e:88:4f:92:
e6:94:7b:6f:15:88:42:c8:ee:e0:d3:97:e5:e1:70:09:a6:fc:
9c:9f:a4:75:7e:89:b5:b7:a5:08:ed:b0:f7:12:47:b1:4d:26:
37:5a:7f:15:13:a5:f1:ae:e0:fc:43:f5:8d:3e:45:69:9d:67:
94:e4:c0:c5:43:79:5e:69:4e:0b:a0:01:20:1b:fa:e3:df:58:
52:c2:87:5c:cc:00:cd:8d:d3:fd:90:12:43:7e:a1:da:41:49:
46:6d:1d:8b:4c:32:cb:8a:1f:d9:47:40:de:5a:88:32:e7:f4:
37:0d:df:eb:9e:3d:37:ab:60:3b:fa:4a:e3:56:8a:fc:24:07:
41:88:23:7e:39:22:b7:46:b3:c8:8d:1b:e4:9b:e7:56:3d:a3:
e7:d1:3c:c5:6a:48:78:b2:fd:80:75:bc:a4:9a:3f:24:29:93:
ad:52:11:00:83:80:11:36:a3:7e:d0:2c:28:04:c2:8b:65:e7:
20:8a:fb:15:25:29:62:c9:be:5d:f2:b5:e9:a9:c3:a6:d4:75:
aa:c0:0a:86:49:6c:34:6e:35:55:70:06:b7:f9:cb:f4:a0:94:
75:ce:00:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlOwDCmNJfcASxTFxDQNO8IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MmI4NjA5NWNlNTU4ZDJlOTYxODcyOGE0NDIyOGEyN2Jl
OTA5OGYwHhcNMjUwOTE1MTkwMDQyWhcNMjUwOTE2MTkwMDQyWjAzMTEwLwYDVQQD
EygwYmFmYzg0MWZkNmNlMzRhOWM4ODQzM2YyOTY0YTAwMWMwMzU1MWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjWg64qALmyN+fR0rV4uOY/xyAOG
rHBqb7evDRNZMYZfMM30an96/lF9LBGkNm7uOLK8ltoyAnHdx+9bGcTT/H72CC+t
9ClC1KQ1jzzMSQQ3IJBmTvNLVA/5XTcFzvYOluRiJJRog+JUtYCoViqwY/GX+OU5
NfvXJPga2y5KTrLgj3DZKGL8wSONmEDod7vOLC7VZcjxpzk4KcE12N+mUMLXyXqz
jVngvFejw0tk8pCicynBC3Uia8DInpb+o/t0oqdy2PU/mSeKkUF6UTVX2lcLGnK7
nLaqMo9d9Qa+hlrqmN466qVOfWnoA11MRVXuG7EpTZ0xaWIFBZ1xZUrJ2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuvyEH9bONKnIhDPylkoAHANVGyMB8GA1UdIwQY
MBaAFJkrhglc5VjS6WGHKKRCKKJ76QmPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVN1R0NWemxXTkxwWVljb3BFSW9vbnZwQ1k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS84ZWE5YjktM2I2ZS00ZmRmLWI1ZDEt
ZjA0ZmRjYzA5ZTUxLzEvbVN1R0NWemxXTkxwWVljb3BFSW9vbnZwQ1k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS84ZWE5YjktM2I2ZS00ZmRmLWI1ZDEtZjA0ZmRjYzA5ZTUx
LzEvbVN1R0NWemxXTkxwWVljb3BFSW9vbnZwQ1k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi20b9c2o
chP83E3Vm7/bJ5khKaCDmfC5w1bnP/BtAx1OiE+S5pR7bxWIQsju4NOX5eFwCab8
nJ+kdX6JtbelCO2w9xJHsU0mN1p/FROl8a7g/EP1jT5FaZ1nlOTAxUN5XmlOC6AB
IBv6499YUsKHXMwAzY3T/ZASQ36h2kFJRm0di0wyy4of2UdA3lqIMuf0Nw3f6549
N6tgO/pK41aK/CQHQYgjfjkit0azyI0b5JvnVj2j59E8xWpIeLL9gHW8pJo/JCmT
rVIRAIOAETajftAsKATCi2XnIIr7FSUpYsm+XfK16anDptR1qsAKhklsNG41VXAG
t/nL9KCUdc4A0Q==
-----END CERTIFICATE-----
Generated at Mon Sep 15 23:26:06 2025 by rpki-client