Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
File: MSOZsSkM1Bmni9L7MR47x9-fXx8.mft (raw, json)
Hash identifier: WTLBoyt/rYl90I3W3IbHk1+0DWD5+W9inypBAEj3xzU=
Subject key identifier: 6F:6B:C9:7F:F7:86:79:E6:22:39:59:DE:87:32:E3:7D:21:71:02:72
Authority key identifier: 31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
Certificate issuer: /CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Certificate serial: 019922C37815A9B85C8E4569BFB7C97A6A6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
Manifest number: 017F
Signing time: Sun 07 Sep 2025 06:00:59 +0000
Manifest this update: Sun 07 Sep 2025 06:00:59 +0000
Manifest next update: Mon 08 Sep 2025 06:00:59 +0000
Files and hashes: 1: MSOZsSkM1Bmni9L7MR47x9-fXx8.crl (hash: /ti5ACJJqtjFLdsndjhCDrrwXsoIYPmJGfKnr7vg7u0=)
2: _YRrPXeHgAXgMpc2QmNmEMk3D08.roa (hash: rjz45MaRJ7ZN8GT6YntGrX6BstY+oeOQVYxVS/+RMXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:78:15:a9:b8:5c:8e:45:69:bf:b7:c9:7a:6a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Validity
Not Before: Sep 7 06:00:59 2025 GMT
Not After : Sep 8 06:00:59 2025 GMT
Subject: CN=6f6bc97ff78679e6223959de8732e37d21710272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a3:68:e3:bf:78:92:6f:df:d4:96:fa:d4:b4:
cb:9f:cb:f1:35:0f:c5:a8:f5:67:24:9d:53:ee:bf:
c2:8e:4a:c8:7a:47:7a:ae:88:46:14:97:95:70:5b:
8e:f4:2c:79:96:49:a2:37:26:69:b3:d4:04:4c:09:
7b:48:b1:c9:f3:e8:d4:7a:cd:4a:72:bc:61:cd:d6:
69:e4:c2:37:98:8f:f2:bd:4e:eb:30:8a:ae:0f:91:
25:93:8c:b0:fa:ba:a6:9a:9e:26:ec:fa:c3:64:23:
6e:07:58:91:e6:13:52:74:e3:99:d9:16:b4:51:bf:
9e:8c:dc:f4:3e:be:31:89:69:98:7d:06:c3:7b:3a:
e5:1c:89:6d:48:89:6d:d0:de:22:86:70:fd:d0:38:
65:1b:63:09:ba:d7:c3:64:77:a7:d3:96:47:c7:25:
31:0c:0f:a0:5b:8e:15:4f:6f:8c:a4:06:2d:cc:5d:
75:80:9d:30:41:88:17:53:24:b8:25:35:f9:7a:84:
ed:3a:fe:89:08:e8:80:34:bd:c4:5c:af:a8:68:f8:
dc:2b:32:96:7c:0c:e3:27:f2:a0:4a:f7:89:bf:f2:
e5:3f:cf:36:96:eb:4c:a4:cb:c3:5b:1a:11:7d:7c:
80:dc:d9:9b:fc:b0:41:f9:c5:bc:2e:eb:32:d7:d6:
44:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6B:C9:7F:F7:86:79:E6:22:39:59:DE:87:32:E3:7D:21:71:02:72
X509v3 Authority Key Identifier:
keyid:31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8c:d7:a0:38:b7:95:a0:4c:dc:a3:51:4c:32:43:ab:9b:88:
72:6f:db:46:94:e7:ab:6d:ae:2e:3d:8a:3f:e0:6a:81:5e:e7:
5c:d1:d6:25:be:41:32:9b:ce:5d:1a:e9:55:47:02:97:5c:6d:
7b:ec:22:55:5d:c8:87:6a:5d:0c:33:4a:75:10:e4:9b:37:b9:
0f:9d:4c:23:f2:de:c2:53:1c:76:07:94:42:ce:9a:9c:91:bc:
2f:d5:3a:88:bf:37:06:f3:79:f5:6f:e8:27:14:ed:92:12:ef:
96:9e:4b:98:a7:03:64:21:a3:58:d4:8d:8e:ba:5d:c6:b6:14:
4c:04:ee:01:d6:6c:b8:6d:de:b8:77:94:5f:84:26:cc:d5:9e:
73:2b:54:bc:a4:a8:39:16:eb:bd:2b:b0:db:98:16:dd:5d:e4:
a7:60:2f:39:a8:66:5a:1e:e5:c6:83:c2:2b:03:b9:c4:1e:7a:
6d:35:71:14:82:05:07:6c:f6:7d:cd:c1:ab:bf:4e:26:f7:ec:
80:f8:39:38:ad:e0:23:9e:82:e4:41:9d:8a:69:51:20:0b:dc:
d0:ac:14:0c:e6:ea:8f:9d:15:ea:a8:17:2f:8d:09:a3:e9:f0:
70:ac:cb:d9:43:50:2f:b8:4c:e6:10:8c:5d:d8:71:9d:05:7c:
1d:b7:a0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:29:28 2025 by rpki-client