Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
File: mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft (raw, json)
Hash identifier: 2BYYvxq7VIIAjV7BGfZnr3RWtssDxOAI+4NOWiu/fv0=
Subject key identifier: 4A:7D:6B:8F:1D:E4:85:09:EB:7F:90:4E:2D:CD:AB:E6:FF:1F:57:E6
Authority key identifier: 99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
Certificate issuer: /CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Certificate serial: 019A7113682F69CF455B8DE79A50A25D7305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 04:01:28 +0000
Manifest this update: Tue 11 Nov 2025 04:01:28 +0000
Manifest next update: Wed 12 Nov 2025 04:01:28 +0000
Files and hashes: 1: djCZyDS3Av-3n9Oi3QzE4yqgYHQ.roa (hash: umRqAsXCH4x+gTRMItrAG7erZAX903krnPo4zn0Ncs0=)
2: kIauAKAEPDGUiqRzZKf1-zzLViU.roa (hash: ajO4l/6tIJY/grZz1/mU3dymnv+IkFvwXNVUf7Kw9ao=)
3: mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl (hash: xuuFcslDO8W1+a7dvRoWdiKo8Cj5B7O3V/7MGpvXF/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:68:2f:69:cf:45:5b:8d:e7:9a:50:a2:5d:73:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Validity
Not Before: Nov 11 04:01:28 2025 GMT
Not After : Nov 12 04:01:28 2025 GMT
Subject: CN=4a7d6b8f1de48509eb7f904e2dcdabe6ff1f57e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:b6:7e:27:78:05:d8:6b:2b:ca:bc:c2:55:
f3:d6:c7:2f:d0:23:52:e1:a8:cc:ba:c8:73:6e:93:
5e:9b:87:b8:fe:ea:bd:bb:5a:90:c1:4a:43:28:ff:
c7:b6:82:68:17:a3:2a:35:17:f9:67:63:36:c0:21:
c0:56:a4:9c:23:1f:2d:8f:b8:01:d7:1f:89:3e:eb:
31:31:27:d5:2f:bd:2d:be:8e:d2:b4:a0:75:4e:42:
94:df:17:36:53:fe:bc:57:df:c2:64:8f:f4:c0:08:
4c:cc:c8:d6:15:ea:eb:8e:34:ab:38:3e:18:a9:32:
0e:62:e2:8a:70:4e:8d:3d:f2:2f:24:33:3a:59:da:
c6:dd:7b:81:a1:25:b3:d1:eb:97:02:cc:09:a5:3c:
98:1f:a7:e6:6f:49:5c:3c:ad:e4:77:51:87:a0:c2:
ea:77:fc:79:09:6e:f6:f2:b4:d2:32:16:64:53:18:
62:f0:a3:6b:13:6a:a7:be:92:2e:cb:7d:47:40:3c:
c5:b6:29:03:32:2c:09:c2:1d:92:18:24:a7:3c:f9:
08:2f:5d:08:cf:45:dc:47:12:d3:33:d8:b9:69:4e:
01:38:3f:e4:d5:7d:90:43:b1:15:70:a1:c9:97:d6:
98:22:76:a9:3f:fc:9d:5b:78:05:7a:f0:21:6e:a4:
16:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7D:6B:8F:1D:E4:85:09:EB:7F:90:4E:2D:CD:AB:E6:FF:1F:57:E6
X509v3 Authority Key Identifier:
keyid:99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:29:df:a6:61:cf:f9:1c:2c:80:93:b8:a7:26:5a:7c:cb:9f:
d8:72:5a:9f:e9:45:f8:05:b3:20:0e:7f:87:59:3d:3b:e3:69:
ca:68:c8:68:64:80:88:94:1a:1b:d9:b4:35:aa:db:32:a7:f8:
1b:82:41:89:9b:b6:5b:99:55:3f:50:14:31:e8:13:df:8e:d5:
dc:74:12:d8:2d:16:07:3a:50:2f:7d:bc:0e:d8:17:60:8c:2e:
9e:3a:55:d1:0d:62:75:a7:ba:00:10:6c:36:d0:e3:0e:48:89:
f8:21:1b:8d:cd:8c:2c:e2:77:33:fc:1f:8a:02:a0:e9:ab:76:
7a:06:64:47:42:ba:75:40:2e:ee:99:4e:a6:79:88:a9:1e:8a:
4e:e1:2f:1f:14:01:bd:46:4e:b0:3f:ac:d6:db:d5:34:6f:42:
31:3d:7e:56:27:bc:0d:d5:2b:c6:3f:e7:e3:d7:82:76:a7:0a:
d8:55:af:bb:c2:81:16:27:92:f5:7f:5d:b7:25:04:b9:3d:68:
7a:ca:ed:0a:51:95:36:34:fb:64:ff:bf:f7:1e:98:38:21:ac:
5f:49:c8:d7:49:d1:d2:39:a6:a1:df:e3:90:a7:5e:1b:51:4a:
95:54:40:27:df:f0:3d:ab:81:38:f2:91:f3:c8:b8:a4:35:15:
a4:cb:95:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:49 2025 by rpki-client