
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
File: MSOZsSkM1Bmni9L7MR47x9-fXx8.mft (raw, json)
Hash identifier: FsOPQEaRsdGBmo2/0IN7nKcDwjBH6W/FzB6OQnVjzk8=
Subject key identifier: 45:6F:A6:4C:17:EB:56:91:88:76:AC:D9:F8:79:37:DB:50:4D:75:6D
Authority key identifier: 31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
Certificate issuer: /CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Certificate serial: 019762BA5C0A63B12FE8134BC7667F840DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
Manifest number: 97
Signing time: Thu 12 Jun 2025 06:01:09 +0000
Manifest this update: Thu 12 Jun 2025 06:01:09 +0000
Manifest next update: Fri 13 Jun 2025 06:01:09 +0000
Files and hashes: 1: MSOZsSkM1Bmni9L7MR47x9-fXx8.crl (hash: jOw4uWMbDNyYNxK+XHn8BkubeGp9oq3Tg+yHIFNhpnw=)
2: _YRrPXeHgAXgMpc2QmNmEMk3D08.roa (hash: rjz45MaRJ7ZN8GT6YntGrX6BstY+oeOQVYxVS/+RMXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:ba:5c:0a:63:b1:2f:e8:13:4b:c7:66:7f:84:0d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Validity
Not Before: Jun 12 06:01:09 2025 GMT
Not After : Jun 13 06:01:09 2025 GMT
Subject: CN=456fa64c17eb56918876acd9f87937db504d756d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:57:13:76:d9:b0:23:10:ca:6e:77:55:15:c2:
c5:b2:de:dd:a0:c4:76:f9:14:9f:0e:a5:17:a2:69:
d7:e3:55:8c:c7:a4:cf:78:bc:42:2f:c9:2d:9f:a8:
62:58:98:f7:8d:57:a7:51:34:23:ca:a7:3a:e3:9d:
12:b9:f7:ca:f0:cd:40:47:b0:e4:0e:c8:54:c0:4c:
c9:b2:ff:0e:c5:39:30:a8:4e:80:78:29:90:6a:de:
5c:a5:95:22:8a:76:b2:ee:05:7a:3f:98:de:41:d2:
47:aa:a1:e9:c6:fc:23:78:92:17:d3:b7:95:71:24:
d7:96:ce:d1:b6:f6:31:10:80:15:9f:63:5f:2a:13:
74:b6:2b:b9:8a:be:60:7f:7e:90:1f:9f:87:27:c4:
4c:03:e5:8f:d0:19:42:ad:86:a2:0d:5f:d7:a0:54:
57:a7:92:0a:e5:b6:16:bc:f7:df:f7:a5:4a:1a:99:
6b:71:5a:0d:a1:75:bc:4e:29:74:42:75:ac:d0:76:
60:8a:ac:2e:f0:26:72:e3:2f:d5:e1:06:29:86:4e:
9a:54:2f:c9:e4:92:96:3b:59:ac:71:a3:8c:d9:e9:
3b:e0:f4:a0:b4:91:09:13:80:e2:0e:56:68:b9:d9:
06:1c:77:3d:fa:9b:5d:3d:d3:6c:5d:63:a3:97:87:
cd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6F:A6:4C:17:EB:56:91:88:76:AC:D9:F8:79:37:DB:50:4D:75:6D
X509v3 Authority Key Identifier:
keyid:31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:3f:d5:e4:43:18:81:63:97:00:51:94:08:d4:e0:86:b4:a8:
96:db:fd:7e:07:b9:c8:a5:a6:a3:7f:b2:e0:b4:fc:1b:7e:26:
f6:91:c9:53:a1:2c:5d:15:44:ac:9d:4b:d5:e7:73:49:8c:64:
99:d7:52:ba:48:93:71:b0:06:d8:ca:67:f0:33:2d:8d:a2:6a:
7f:56:dd:5f:03:0e:81:cc:03:f4:6a:ca:af:ad:eb:6c:61:ed:
c9:91:65:9a:99:e3:87:af:0b:97:60:89:d2:ac:bb:2e:c1:e0:
45:fe:08:96:ab:fb:42:4b:67:47:9e:ed:68:98:52:aa:8d:59:
ee:76:a7:43:67:de:d5:10:de:1b:36:3b:20:2d:41:bc:11:fd:
37:7d:33:1e:e7:d9:b1:5d:ee:5d:dc:94:bf:66:6f:83:b3:48:
fd:e6:ee:41:73:9b:0a:a2:7c:fe:55:7c:92:89:8f:64:2b:15:
d7:a5:a5:a8:91:02:ae:fc:5c:52:0d:fc:04:28:02:a3:9c:d6:
dd:6c:98:96:64:a6:fb:a4:6d:8b:91:c0:e2:88:44:3c:ed:3a:
06:8c:83:10:26:03:61:1d:61:84:4d:b2:21:a5:29:3a:45:63:
3a:89:a9:44:c5:20:6d:b4:bb:ec:4a:be:f5:14:76:41:d1:17:
64:f1:d0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:55:59 2025 by rpki-client