Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
File: mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft (raw, json)
Hash identifier: u+36WBrPXS0jCFz8rpsasKGVyM08+oCnN3BwKN6YZKM=
Subject key identifier: 20:67:5A:FC:5D:FA:12:AE:6E:A6:28:EC:A4:57:D6:F3:FC:B7:5F:DD
Authority key identifier: 99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
Certificate issuer: /CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Certificate serial: 019A3F13CC09CDEEE31D5C275D6640FCA961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
Manifest number: 06FB
Signing time: Sat 01 Nov 2025 11:00:53 +0000
Manifest this update: Sat 01 Nov 2025 11:00:53 +0000
Manifest next update: Sun 02 Nov 2025 11:00:53 +0000
Files and hashes: 1: Hg9K5nZYj4y2LREbfAkkrFG5Zls.roa (hash: F2au21rdmN5JT8fnaZxO8lAlqsDmX3/SHMl+Sh2h2I8=)
2: PYZw-6nO0E-fCuRk7f6-YtCO0xE.roa (hash: HII+EpmrCTFcWzx501ezrd96ebkYigxDHvPMzn/KKcI=)
3: mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl (hash: BflORSUTaiTVY2LVR8kXzFS9L7k4n13Auw06y+5VDCo=)
4: x7qF1swc6KDeUuxg1VrqWurToxo.roa (hash: YrT3FZ1bNCws8FjDrY5Tigrw49fzDr1WY2YjpG9Nkf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3f:13:cc:09:cd:ee:e3:1d:5c:27:5d:66:40:fc:a9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Validity
Not Before: Nov 1 11:00:53 2025 GMT
Not After : Nov 2 11:00:53 2025 GMT
Subject: CN=20675afc5dfa12ae6ea628eca457d6f3fcb75fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f6:26:b4:41:fe:28:51:f0:f7:ca:24:68:ae:
e2:37:fc:20:92:66:bc:cd:50:80:14:ee:14:cb:59:
49:45:42:bd:8d:b9:1a:60:43:93:74:5c:d7:66:52:
88:fd:b1:f1:12:e4:83:b3:06:b1:fb:15:cb:96:59:
dc:9d:90:3a:cc:74:cc:03:9e:d0:43:f7:18:87:9c:
69:79:d2:4e:df:0f:09:2c:00:4a:0f:44:d4:40:b7:
88:a6:c9:d3:b1:70:e0:b4:00:f2:1b:01:6b:b8:21:
e2:a5:6c:f1:84:08:50:0a:81:e7:4c:26:88:47:3c:
9b:cf:5e:eb:2e:dd:b3:f2:ea:fa:28:63:12:4c:90:
41:f4:9a:b2:a6:ab:03:76:d5:e7:aa:25:41:39:ae:
72:00:b5:4f:ca:70:22:b3:65:8e:a2:ca:50:77:ae:
1c:64:e5:2a:c4:db:cd:0d:b2:4b:5d:2c:4d:51:3f:
ee:ce:98:66:46:46:d0:01:2b:66:81:ee:e4:77:4b:
08:27:b4:65:8f:74:85:ab:d5:69:e8:db:e6:a0:08:
f7:0d:59:b4:f7:4d:9f:7f:38:56:c7:08:eb:cb:8a:
20:3a:69:12:fb:2b:51:56:0d:70:6a:f0:61:bc:38:
4a:bb:e3:1d:6f:21:7b:d1:c6:42:48:36:68:35:06:
06:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:67:5A:FC:5D:FA:12:AE:6E:A6:28:EC:A4:57:D6:F3:FC:B7:5F:DD
X509v3 Authority Key Identifier:
keyid:99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:35:24:a5:6f:8e:a6:af:28:c6:e9:7e:89:d8:4b:ef:a6:aa:
e2:1b:b9:76:7b:f7:b6:2b:8f:94:9f:3e:c0:79:a7:b7:21:d1:
17:68:82:39:e0:21:5a:bf:68:e1:9c:06:d0:16:6a:fb:27:b1:
30:e4:32:4e:de:11:c6:6c:6a:b1:e9:16:77:ad:b1:b0:ca:69:
79:7f:48:0f:ca:9c:70:f3:42:73:a1:07:9a:c5:1a:4f:09:1b:
a6:f1:57:3c:18:1f:1d:f0:16:32:15:b2:76:47:cd:f9:9a:4a:
1a:d2:2f:3f:93:79:96:8e:84:c6:ad:87:93:d5:c2:82:a0:d3:
77:26:69:02:cd:3b:7b:e7:49:3c:7a:a8:a8:fb:3b:7b:3d:04:
12:e2:98:3c:d3:56:f1:2b:c4:29:4a:d3:a3:cb:4c:32:e3:cd:
64:57:ef:c9:89:53:06:9c:35:f9:53:01:ad:9f:2b:c6:07:89:
d4:4b:8d:94:56:e2:e8:37:d6:65:e9:9f:b7:0e:71:31:c1:5d:
1d:27:9c:5f:2d:72:28:a6:a6:83:11:d6:e2:d9:66:80:fc:1c:
9e:cb:9b:61:42:96:c5:7b:bf:6d:30:48:31:ab:ad:a1:78:00:
fb:a7:26:a7:03:e5:be:13:7a:5b:e8:35:3b:cb:c3:d6:ba:f0:
73:9c:35:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 14:04:47 2025 by rpki-client