Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
File: mSuGCVzlWNLpYYcopEIoonvpCY8.mft (raw, json)
Hash identifier: lrZnEQgPT6Ul6pmjO0s2D1a5DVGPcTpMB0VIGkxTsVI=
Subject key identifier: FF:70:5B:97:4A:9B:B8:0F:75:A9:3E:7F:5F:BD:21:FE:3E:07:FC:DD
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 019A706E783C44ABC19B396C237BF19413C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
Manifest number: 1746
Signing time: Tue 11 Nov 2025 01:01:19 +0000
Manifest this update: Tue 11 Nov 2025 01:01:19 +0000
Manifest next update: Wed 12 Nov 2025 01:01:19 +0000
Files and hashes: 1: BlYJMM4ls15zJ30iXM_Rv84I-d4.roa (hash: MRyw1DsxxSYF8y5F3ROkLuVWefJpMb00uWwfBxmnsGk=)
2: e2BcAV15shqdiU98OktC9_gXkUU.roa (hash: rZS4+9XjUiv9YzxM45CHUYZIhLrSaA9eZkuie33ePcg=)
3: mSuGCVzlWNLpYYcopEIoonvpCY8.crl (hash: sfjuKk/SH+dFGBxFDQKerUMsZ1tF4V3vCMElBMx5Nio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:78:3c:44:ab:c1:9b:39:6c:23:7b:f1:94:13:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Nov 11 01:01:19 2025 GMT
Not After : Nov 12 01:01:19 2025 GMT
Subject: CN=ff705b974a9bb80f75a93e7f5fbd21fe3e07fcdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:31:7c:d3:a3:da:48:ec:99:1d:81:8d:2b:77:
73:7b:c4:ff:86:7a:15:4a:68:5d:de:d6:dc:1d:34:
92:9d:ac:84:73:cc:b1:3d:ad:75:06:8f:7f:3f:8f:
e3:2d:65:1f:54:c0:d2:ec:25:77:30:6c:00:ab:d2:
3c:c6:82:14:59:12:d3:8c:39:5a:c5:67:33:8e:f2:
be:dd:aa:40:63:0e:56:1c:64:64:46:57:ee:8c:cc:
13:09:da:0f:7f:d6:2b:e7:43:e3:58:4d:dd:f9:d1:
5a:f9:48:5e:d4:b9:1d:ab:13:0b:41:fe:a2:b4:c8:
b9:1d:aa:7a:f4:76:c3:38:ad:55:04:87:2e:1a:ce:
b4:88:6d:31:2e:53:31:50:f3:9c:6f:8b:00:58:dc:
7e:2b:36:26:ac:24:cd:c1:e6:8b:99:6b:fb:01:1e:
54:c7:5a:bc:82:a9:cb:bc:37:38:8a:6c:66:37:53:
fe:fb:1a:1e:54:e8:c3:cf:ab:09:af:71:47:1d:ff:
5f:2d:da:66:35:fd:10:be:97:7e:2f:41:cc:b7:ea:
af:5c:56:9c:fd:77:89:e9:00:c8:c9:de:e6:be:f1:
ff:46:ee:06:17:76:e1:9e:c7:f9:99:95:70:2a:ae:
e4:67:c3:28:e9:c2:0d:3d:95:fd:c3:b5:b6:bc:fa:
d4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:70:5B:97:4A:9B:B8:0F:75:A9:3E:7F:5F:BD:21:FE:3E:07:FC:DD
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:df:6f:f8:01:1a:b8:2b:5c:ce:63:3e:e0:11:d9:e9:91:bb:
ad:e8:7c:7c:cd:e8:64:65:ba:1d:1d:34:16:ea:63:70:20:78:
66:a1:6e:6a:98:36:a3:08:ed:23:be:e1:e1:95:fc:08:68:d6:
79:73:15:17:76:14:43:e1:ca:46:32:66:0b:c1:fe:ac:28:1e:
72:17:47:80:04:dc:e2:b2:39:35:19:d9:1b:ea:db:8b:24:a1:
83:98:f2:72:0e:48:eb:4f:af:fe:da:09:9b:21:17:ed:50:bd:
30:2c:f6:e6:e5:31:dc:5a:f8:74:dd:21:d3:e5:e6:43:4f:c7:
98:ab:27:1d:7d:46:d6:ca:fd:51:f2:5a:51:40:5b:25:8d:22:
2a:e8:4d:43:92:48:24:68:cd:03:7f:94:de:fd:fa:22:d1:f1:
80:6f:1d:5d:9a:87:61:a0:e8:de:cf:64:97:25:2f:6f:97:e1:
f1:72:21:b6:0e:c6:5c:19:d9:90:d7:17:49:10:da:96:11:73:
47:5b:3d:5b:e6:ba:5f:42:a6:05:1b:e7:8c:2d:7a:e2:ae:2d:
87:68:f1:0b:2b:ea:03:f2:21:9f:d1:ea:67:b4:03:0b:41:a7:
d5:b5:b4:40:92:11:eb:3b:e5:4c:7e:c7:66:cc:eb:3a:b5:34:
2f:69:a0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:45 2025 by rpki-client