Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
File: MSOZsSkM1Bmni9L7MR47x9-fXx8.mft (raw, json)
Hash identifier: evf8peXQMhvS4to2yE+PTlOp6Px/ojhW/G3LV83aDK0=
Subject key identifier: FB:AE:73:66:2C:99:A6:E3:4B:B1:FA:D0:F7:CE:B7:F9:BE:BC:38:2F
Authority key identifier: 31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
Certificate issuer: /CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Certificate serial: 019A61690CF3DCBEC593D436CB205D1B808E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
Manifest number: 0224
Signing time: Sat 08 Nov 2025 03:01:05 +0000
Manifest this update: Sat 08 Nov 2025 03:01:05 +0000
Manifest next update: Sun 09 Nov 2025 03:01:05 +0000
Files and hashes: 1: MSOZsSkM1Bmni9L7MR47x9-fXx8.crl (hash: zM3AVkLf3W3Ho7xlffbfWZXoVOUJx4UYLAb0/PB2aZc=)
2: _YRrPXeHgAXgMpc2QmNmEMk3D08.roa (hash: rjz45MaRJ7ZN8GT6YntGrX6BstY+oeOQVYxVS/+RMXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Nov 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:61:69:0c:f3:dc:be:c5:93:d4:36:cb:20:5d:1b:80:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Validity
Not Before: Nov 8 03:01:05 2025 GMT
Not After : Nov 9 03:01:05 2025 GMT
Subject: CN=fbae73662c99a6e34bb1fad0f7ceb7f9bebc382f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ed:2c:14:4c:42:51:a5:0a:b3:13:a9:7b:68:
13:db:64:e2:59:49:0a:82:2c:88:cc:f0:b2:82:aa:
8f:cb:44:77:12:43:a8:05:23:fa:11:24:85:63:a2:
6b:69:f0:00:98:0a:e6:df:95:7b:e4:0f:b5:d4:a3:
db:50:43:1b:c6:2f:d1:31:f7:ed:e3:40:a5:90:93:
30:a1:9e:e0:aa:87:e3:32:8f:15:c5:8b:56:fb:e6:
2f:98:bb:ec:d2:f5:02:de:20:db:cd:08:41:2e:3d:
2a:c3:c2:72:44:4a:fa:7f:1b:f6:0f:f8:e2:41:61:
13:52:55:06:92:47:1b:e4:94:32:e1:1f:88:7a:f2:
fb:bb:04:67:78:dd:b6:b2:1a:2b:fb:96:ce:3f:69:
8b:4e:bd:4d:9a:24:79:e3:49:61:22:82:54:26:bc:
e0:8f:84:e8:3c:08:63:f0:53:c8:59:89:8c:49:eb:
16:3f:4e:76:15:0b:14:c8:8a:82:e1:a3:cc:01:88:
62:f9:65:c3:e2:57:ce:21:81:5e:63:83:6f:91:eb:
81:6a:ba:11:ab:5e:7b:9e:39:8f:1a:4a:d0:ce:6e:
43:d9:1a:36:a8:c2:e3:9c:b4:a7:32:72:51:c8:a8:
14:82:3b:f0:46:b8:bd:6e:e8:b7:16:d3:3d:ab:f0:
bd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AE:73:66:2C:99:A6:E3:4B:B1:FA:D0:F7:CE:B7:F9:BE:BC:38:2F
X509v3 Authority Key Identifier:
keyid:31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c8:56:02:e3:2a:86:f5:8d:56:99:bd:7a:a7:46:3c:87:ec:
3e:b2:8d:d5:97:34:12:09:f8:2e:c8:a8:02:f1:ee:9f:03:00:
18:90:28:c8:7b:fa:40:40:f5:bd:56:61:e7:d2:94:a9:81:d2:
f4:f0:dd:47:e2:13:e2:db:c8:c5:a3:3f:de:29:98:33:4a:08:
d8:e5:e9:94:cc:77:e5:e8:ea:ca:6d:ca:ef:f6:8c:e1:4b:95:
28:f4:15:7a:fd:4e:76:1d:43:a9:31:6a:f6:4a:42:de:b0:3d:
e1:f1:bf:45:a9:d8:24:c0:8d:f0:df:3b:d1:f5:db:4b:76:82:
ef:19:7c:74:d2:aa:51:34:b3:0e:fd:00:81:b3:8e:96:d5:ad:
48:a9:78:a4:b7:48:ec:aa:e8:e5:53:62:0d:25:d7:43:03:d8:
0a:32:b1:9e:41:b8:65:f9:7c:4e:84:8e:df:84:05:c0:4f:74:
fc:8e:26:3e:a5:90:67:7b:39:aa:68:7d:75:b3:61:a4:de:c7:
3f:fc:c9:53:f8:f5:be:3e:1a:d4:b0:d4:5e:9b:35:e1:30:49:
db:61:5b:c7:74:ac:08:1d:8e:34:19:3f:e5:6c:47:a5:a7:ae:
2e:1a:2e:dc:11:ce:03:4e:ef:14:f9:3d:52:22:1d:19:45:09:
80:9e:b7:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZphaQzz3L7Fk9Q2yyBdG4COMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMjM5OWIxMjkwY2Q0MTlhNzhiZDJmYjMxMWUzYmM3ZGY5
ZjVmMWYwHhcNMjUxMTA4MDMwMTA1WhcNMjUxMTA5MDMwMTA1WjAzMTEwLwYDVQQD
EyhmYmFlNzM2NjJjOTlhNmUzNGJiMWZhZDBmN2NlYjdmOWJlYmMzODJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO0sFExCUaUKsxOpe2gT22TiWUkK
giyIzPCygqqPy0R3EkOoBSP6ESSFY6JrafAAmArm35V75A+11KPbUEMbxi/RMfft
40ClkJMwoZ7gqofjMo8VxYtW++YvmLvs0vUC3iDbzQhBLj0qw8JyREr6fxv2D/ji
QWETUlUGkkcb5JQy4R+IevL7uwRneN22shor+5bOP2mLTr1NmiR540lhIoJUJrzg
j4ToPAhj8FPIWYmMSesWP052FQsUyIqC4aPMAYhi+WXD4lfOIYFeY4NvkeuBaroR
q157njmPGkrQzm5D2Ro2qMLjnLSnMnJRyKgUgjvwRri9bui3FtM9q/C9/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPuuc2YsmabjS7H60PfOt/m+vDgvMB8GA1UdIwQY
MBaAFDEjmbEpDNQZp4vS+zEeO8ffn18fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVNPWnNTa00xQm1uaTlMN01SNDd4OS1mWHg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82NzY0OTktOTE0My00ODc3LTlkZmYt
Mjg4NDEwMzc3NmM4LzEvTVNPWnNTa00xQm1uaTlMN01SNDd4OS1mWHg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS82NzY0OTktOTE0My00ODc3LTlkZmYtMjg4NDEwMzc3NmM4
LzEvTVNPWnNTa00xQm1uaTlMN01SNDd4OS1mWHg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbchWAuMq
hvWNVpm9eqdGPIfsPrKN1Zc0Egn4LsioAvHunwMAGJAoyHv6QED1vVZh59KUqYHS
9PDdR+IT4tvIxaM/3imYM0oI2OXplMx35ejqym3K7/aM4UuVKPQVev1Odh1DqTFq
9kpC3rA94fG/RanYJMCN8N870fXbS3aC7xl8dNKqUTSzDv0AgbOOltWtSKl4pLdI
7Kro5VNiDSXXQwPYCjKxnkG4Zfl8ToSO34QFwE90/I4mPqWQZ3s5qmh9dbNhpN7H
P/zJU/j1vj4a1LDUXps14TBJ22Fbx3SsCB2ONBk/5WxHpaeuLhou3BHOA07vFPk9
UiIdGUUJgJ63kw==
-----END CERTIFICATE-----
Generated at Sat Nov 8 09:09:22 2025 by rpki-client