Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
File: mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft (raw, json)
Hash identifier: RAEYHPjimC6XxzpvNwnQpvYBsKPdHh+L64JF5NwYbMM=
Subject key identifier: 58:F4:7C:65:BD:DA:38:89:5B:5C:B9:8B:95:31:C9:CE:6C:DC:90:19
Authority key identifier: 99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA
Certificate issuer: /CN=9923d1040c05f099fb4fedb498bb4a14832798fa
Certificate serial: 0199616C71BF619490AC64095E6E6F7D26CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
Manifest number: 058E
Signing time: Fri 19 Sep 2025 10:02:00 +0000
Manifest this update: Fri 19 Sep 2025 10:02:00 +0000
Manifest next update: Sat 20 Sep 2025 10:02:00 +0000
Files and hashes: 1: 6X834B5gcsNjXymrQMfROjTj6Pc.roa (hash: eUjrS9xR0GNckSwbqncq7fyluCC422BD9P+h/ci+z+8=)
2: mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl (hash: Ad7149Ly/Y+D7daNZZwiZMABvvYD99+YGpNyX0UYKaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:61:6c:71:bf:61:94:90:ac:64:09:5e:6e:6f:7d:26:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9923d1040c05f099fb4fedb498bb4a14832798fa
Validity
Not Before: Sep 19 10:02:00 2025 GMT
Not After : Sep 20 10:02:00 2025 GMT
Subject: CN=58f47c65bdda38895b5cb98b9531c9ce6cdc9019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:03:b8:b0:f4:dc:34:8e:2c:b7:51:98:8e:0f:
1a:17:93:bd:af:85:6a:60:42:aa:b4:b0:ac:aa:83:
ae:86:13:44:01:ae:2e:12:ad:ab:5f:13:95:4b:22:
85:7a:e5:30:41:c2:f0:aa:dd:83:c3:20:36:ab:46:
71:f6:99:0c:40:9e:af:63:6a:2c:b8:48:30:2e:71:
7d:86:82:82:b8:a1:85:80:ec:88:7d:13:e3:39:79:
6b:cc:a7:e3:fe:e3:96:bf:80:0b:a2:ce:3d:93:4d:
f3:58:1c:c3:ea:93:13:18:30:0e:13:94:e4:62:a0:
c2:ac:73:fd:a3:45:a6:4b:17:f8:37:72:eb:cc:c5:
97:b6:3d:14:6b:c3:0d:8c:24:9d:32:e1:b1:69:ef:
fe:a5:d9:99:d2:82:e6:d4:79:35:6f:f8:61:3c:75:
8e:bb:0c:e4:0a:92:08:95:ba:b0:99:c0:d5:38:94:
83:4a:f8:1f:aa:02:2d:f6:98:97:12:30:a5:15:68:
a5:8f:01:44:94:5a:2a:0c:9b:41:1c:fe:88:8e:9a:
99:a3:11:e7:6f:20:ce:a2:fe:c4:f5:78:05:66:74:
62:43:6b:c5:db:1c:48:9b:82:97:1b:db:80:a8:3f:
1f:2b:64:65:3a:c9:a7:be:ce:87:a5:be:1a:28:2a:
e8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F4:7C:65:BD:DA:38:89:5B:5C:B9:8B:95:31:C9:CE:6C:DC:90:19
X509v3 Authority Key Identifier:
keyid:99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:6d:eb:57:6c:a3:c6:bd:e9:9e:bb:97:e8:82:89:92:95:dd:
cc:29:4d:e5:28:84:ea:f5:41:8d:9f:22:e9:e1:be:8a:3b:33:
9b:5a:36:15:52:b6:d9:35:5a:9f:b7:02:94:26:15:87:8a:55:
49:91:93:57:25:6f:49:4d:b7:a6:18:5e:3d:72:40:27:23:ea:
76:e2:c7:fe:9f:55:a6:a6:fa:1c:80:81:64:b5:05:00:d5:2e:
0c:95:dc:37:71:44:bc:4c:6d:ec:6d:cd:42:57:b3:95:81:a9:
cf:32:2c:e9:8a:1d:ab:27:09:0b:53:fa:88:8b:f0:a6:02:25:
3c:19:e5:0f:ef:a6:e6:04:c0:e5:75:a1:ae:6b:8a:ec:bc:28:
b3:a0:c3:e4:aa:2a:fc:cc:d7:22:69:6d:4c:ab:81:fe:ce:92:
fb:8d:7c:8f:92:72:4a:8c:e6:63:c6:e2:5c:05:84:55:12:ce:
e1:b4:94:39:0a:9a:d0:36:54:09:b5:42:4e:0f:ae:f3:3a:fa:
43:1c:42:f0:60:65:ab:79:bb:92:4a:94:d7:b1:e8:80:f0:d7:
45:81:65:1d:25:23:f3:fb:97:af:92:0f:8e:9c:82:0b:7b:08:
dd:54:5e:69:ce:a2:cd:20:f2:9f:7a:e9:89:69:38:61:c9:8f:
2d:cd:a9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 16:57:23 2025 by rpki-client