Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
File: 1-msoRBterQGEZTXq8gv9B1LgdkU.mft (raw, json)
Hash identifier: aSrSYyrmFwtOoyHsrHGkSoBsODP5sRlu+7gkp4BSjmg=
Subject key identifier: D6:49:C2:96:A2:8D:42:D6:FC:A1:FB:06:C3:71:B2:79:A7:62:7C:BF
Authority key identifier: FA:6B:28:44:1B:5E:AD:01:84:65:35:EA:F2:0B:FD:07:52:E0:76:45
Certificate issuer: /CN=fa6b28441b5ead01846535eaf20bfd0752e07645
Certificate serial: 019A61693331BEA4980BD85298205570AA27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
Manifest number: 5C
Signing time: Sat 08 Nov 2025 03:01:15 +0000
Manifest this update: Sat 08 Nov 2025 03:01:15 +0000
Manifest next update: Sun 09 Nov 2025 03:01:15 +0000
Files and hashes: 1: 1-msoRBterQGEZTXq8gv9B1LgdkU.crl (hash: IA4no7kCuJ3OHWaDnG/RoxcTOTzWSuvyzZG9fK87CgA=)
2: vBOQCuTyEfYV4gQKe7qCxZbiu9I.roa (hash: YzgNFzACvcQVNgde31Xeo9Tat9fZP3Es1rC5dljFCQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 21:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:61:69:33:31:be:a4:98:0b:d8:52:98:20:55:70:aa:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa6b28441b5ead01846535eaf20bfd0752e07645
Validity
Not Before: Nov 8 03:01:15 2025 GMT
Not After : Nov 9 03:01:15 2025 GMT
Subject: CN=d649c296a28d42d6fca1fb06c371b279a7627cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:db:52:0b:41:9a:40:cf:07:56:db:20:da:86:
96:aa:86:51:18:d4:1c:c0:c8:b0:40:4c:a6:bb:f6:
d5:b6:29:35:1d:23:1e:b9:44:90:8e:d2:92:0c:ca:
c2:1b:4c:a1:f7:41:73:69:ff:7d:49:07:10:6d:f0:
7d:ea:44:0e:03:18:db:63:3a:1e:ad:96:a9:b7:95:
12:93:05:44:e4:43:44:d9:9e:a1:c5:10:0a:ed:05:
0e:d1:e9:11:16:3e:da:3b:61:f4:18:c0:56:de:63:
d3:40:68:18:75:d0:73:a1:9f:6f:61:2e:5c:b4:81:
6d:68:00:c6:2f:30:ef:5b:d1:4f:cd:35:2f:b0:78:
1a:77:91:81:f6:2a:15:4c:8d:97:e2:0f:79:ae:19:
f1:8a:5c:b8:02:56:bb:53:0c:ef:fd:40:71:1c:f0:
84:73:3b:58:04:12:24:bf:b4:35:3c:97:34:6b:17:
ce:0b:a3:49:06:7e:3d:f7:3d:36:77:76:73:a5:c6:
1b:f4:81:cf:24:3a:13:62:d6:56:92:2d:99:28:dd:
a2:16:c0:0c:74:cd:67:3b:aa:b6:df:8a:0d:22:fb:
c3:c9:cd:62:cf:15:50:b3:cd:72:df:83:88:94:ff:
bd:64:03:ea:84:03:35:27:26:41:bd:b3:1b:7d:12:
fa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:49:C2:96:A2:8D:42:D6:FC:A1:FB:06:C3:71:B2:79:A7:62:7C:BF
X509v3 Authority Key Identifier:
keyid:FA:6B:28:44:1B:5E:AD:01:84:65:35:EA:F2:0B:FD:07:52:E0:76:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:67:b8:f0:b0:17:de:e4:58:ca:77:d6:fa:99:e8:c0:a6:39:
8a:30:10:55:9e:99:41:b5:d4:e1:a3:04:46:a6:f0:55:b8:b7:
cf:f6:4b:69:52:8b:3a:37:23:f9:1f:e6:a4:49:b6:5c:dd:f6:
52:8e:ef:b1:4d:86:fc:b0:c1:36:11:ac:15:e4:79:1d:59:a5:
b8:57:50:8c:49:9b:09:8d:4c:ec:0d:4a:7a:71:89:fe:7e:c9:
7f:94:e0:23:8a:fc:07:fd:5e:15:96:dc:d5:9d:b4:97:d7:83:
3f:61:78:75:bb:e9:85:c2:73:d4:c5:59:85:f1:fa:e0:e2:2e:
e2:d8:d0:99:28:7f:7d:23:ea:4f:a4:a2:23:00:97:da:6d:b9:
26:c9:fe:77:7d:1b:f4:84:92:c4:11:43:5a:6a:94:c9:52:73:
e5:33:89:45:05:71:27:90:bf:4e:1f:78:7d:75:2a:11:3a:73:
9e:8a:99:8f:8a:24:61:04:03:67:8d:19:65:0c:4d:03:e1:50:
e6:ae:3e:65:f2:54:b7:e2:df:28:a5:bd:31:0c:0b:d0:fd:b9:
89:49:08:70:b5:53:1c:8e:1d:8f:f0:53:81:73:71:5e:8b:6b:
9b:18:f7:90:e1:51:87:16:10:e7:42:1c:7a:0a:fc:f0:0b:9d:
f0:58:d6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 8 07:28:53 2025 by rpki-client