Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
File: mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft (raw, json)
Hash identifier: X47LiYdug0GbtzNC/8tLNlcOJBnRl7KboOp50FzNH4I=
Subject key identifier: 3A:A3:DB:1C:B0:90:09:2F:EF:D3:1A:3B:7F:23:CC:9E:A2:6A:78:5E
Authority key identifier: 99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
Certificate issuer: /CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Certificate serial: 019930B5D0FA2DD03544701B0E4AC2C8FFCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
Manifest number: 066F
Signing time: Tue 09 Sep 2025 23:00:45 +0000
Manifest this update: Tue 09 Sep 2025 23:00:45 +0000
Manifest next update: Wed 10 Sep 2025 23:00:45 +0000
Files and hashes: 1: Hg9K5nZYj4y2LREbfAkkrFG5Zls.roa (hash: F2au21rdmN5JT8fnaZxO8lAlqsDmX3/SHMl+Sh2h2I8=)
2: PYZw-6nO0E-fCuRk7f6-YtCO0xE.roa (hash: HII+EpmrCTFcWzx501ezrd96ebkYigxDHvPMzn/KKcI=)
3: mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl (hash: Qsa+vwaiR9/qtPI6O55AOXSD6fZNyGKHWYbPmZ5VZxg=)
4: x7qF1swc6KDeUuxg1VrqWurToxo.roa (hash: YrT3FZ1bNCws8FjDrY5Tigrw49fzDr1WY2YjpG9Nkf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:b5:d0:fa:2d:d0:35:44:70:1b:0e:4a:c2:c8:ff:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Validity
Not Before: Sep 9 23:00:45 2025 GMT
Not After : Sep 10 23:00:45 2025 GMT
Subject: CN=3aa3db1cb090092fefd31a3b7f23cc9ea26a785e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:13:9d:d5:16:6e:67:8d:2f:89:5e:6e:16:70:
c6:28:1b:0c:ef:46:4c:92:bd:ae:80:d4:ab:94:97:
aa:6b:8a:7a:18:39:f8:2f:0f:b3:e0:13:bf:fc:87:
74:de:77:8c:ad:6e:7d:a5:ff:5c:af:9c:c6:18:55:
66:41:4a:98:55:d3:8a:f7:f0:e1:5f:85:87:92:2f:
b5:29:91:f8:66:9d:40:6b:cb:83:01:4d:5c:2d:66:
42:57:27:e9:8c:58:4a:e1:1e:a7:75:e3:b2:3b:61:
aa:2b:4b:16:43:14:08:e9:a1:02:a9:05:d3:0c:c2:
b4:14:0f:0b:5e:00:7e:c9:2e:df:84:05:b1:70:2e:
68:82:04:c6:e3:55:10:4c:75:af:32:25:47:8b:f5:
72:82:88:6d:f6:df:4d:01:c6:35:f1:ca:2a:b9:2a:
2e:19:a0:e3:3a:f6:db:6d:52:04:e9:84:67:9e:e4:
3e:3e:9f:8c:a1:31:b7:4b:ac:14:e2:d0:90:04:d8:
9c:3f:45:ca:2a:de:52:fc:13:4f:44:70:f5:76:6b:
06:56:5f:eb:22:08:fe:76:5b:94:48:bf:f9:80:16:
67:ab:94:6c:4d:b4:c8:41:57:31:7f:0d:f5:fd:e1:
5a:f0:5e:4e:7a:a1:3c:dc:32:10:f8:25:69:e3:31:
89:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A3:DB:1C:B0:90:09:2F:EF:D3:1A:3B:7F:23:CC:9E:A2:6A:78:5E
X509v3 Authority Key Identifier:
keyid:99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:90:27:a6:f4:e7:b4:94:8a:43:ee:2a:b7:98:a3:ff:6b:4e:
b3:cb:24:8e:f2:67:e0:db:97:ed:de:88:82:c8:74:d5:75:c5:
1a:69:4a:b6:87:de:d3:f7:61:17:66:c6:60:80:da:57:d4:43:
b4:68:2b:ae:ed:07:f4:8d:27:57:38:42:03:cb:62:f0:99:02:
19:1c:5f:a6:1e:bb:60:af:03:a1:6c:45:91:e4:7e:1f:b5:ad:
5a:06:1f:65:40:7d:8c:16:cb:ca:8e:c0:a3:70:aa:ee:e9:d1:
cd:fa:de:f9:85:25:7d:a3:e8:5b:b5:99:30:7c:a9:2b:b6:69:
70:5d:a4:eb:0c:6b:7a:2a:4a:5a:65:12:6f:ae:f1:ab:5a:0d:
fb:b8:ee:9a:f1:f2:c3:ef:44:a1:2d:db:cd:93:d1:f6:86:0f:
bd:56:ea:ee:d3:e6:a0:da:5b:85:77:3f:ce:03:75:2a:5c:87:
f9:65:3e:1e:de:12:39:f5:bd:6f:7b:6e:a3:92:87:69:b3:05:
88:92:89:55:54:d3:29:7c:6b:bc:c7:8d:14:bb:f7:8a:d4:67:
76:7e:92:d5:61:2a:50:46:5f:60:0f:24:d7:9a:9d:1c:3e:64:
c3:ac:99:8e:7b:2a:31:31:e5:50:f2:ff:1f:65:c5:ff:5e:87:
39:0e:a1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:50:22 2025 by rpki-client