Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
File: mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft (raw, json)
Hash identifier: NBw2nG+R3l1ozJednOatxax7xhvmD6kYVCeRzOQTLaQ=
Subject key identifier: A7:32:11:7A:4B:99:E4:E1:40:7E:27:4F:C5:97:8F:35:E2:76:C1:CE
Authority key identifier: 99:25:2F:F7:F4:DC:F6:22:34:D2:2F:86:A1:13:5B:34:49:23:DA:AB
Certificate issuer: /CN=99252ff7f4dcf62234d22f86a1135b344923daab
Certificate serial: 019A7225F9D11DB7ECAE9FC5D9F594401576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
Manifest number: 09D6
Signing time: Tue 11 Nov 2025 09:01:22 +0000
Manifest this update: Tue 11 Nov 2025 09:01:22 +0000
Manifest next update: Wed 12 Nov 2025 09:01:22 +0000
Files and hashes: 1: 7qi71OAs6leux75HGJJKxd48zLc.roa (hash: z9Iokxbw9AVC6K3SxkWdhXBi3p5Bja4hYfL/NkWRSQw=)
2: mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl (hash: I37DZqqSaxPuM8wkBoqY/sXgSyEnLANrTKpa+9f3b7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f9:d1:1d:b7:ec:ae:9f:c5:d9:f5:94:40:15:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99252ff7f4dcf62234d22f86a1135b344923daab
Validity
Not Before: Nov 11 09:01:22 2025 GMT
Not After : Nov 12 09:01:22 2025 GMT
Subject: CN=a732117a4b99e4e1407e274fc5978f35e276c1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e7:3e:51:a4:1e:89:5d:3e:d5:87:aa:1a:bf:
5b:d5:d1:56:ed:01:92:44:ff:1c:58:13:12:3f:5a:
73:a2:ab:df:39:ea:6d:63:7a:a2:24:8e:14:da:11:
c9:f3:d3:4e:7d:ff:94:16:9a:c8:31:0f:73:9e:cb:
f8:51:68:13:91:22:7b:7a:17:7d:1c:bb:3e:d3:62:
25:da:64:d8:77:47:d0:10:d1:0a:c8:ca:9b:0b:96:
72:8a:91:5b:70:7f:a9:01:cc:a1:4b:f7:b7:06:65:
0b:3c:ba:0d:4a:b0:d5:53:f9:22:7b:d3:79:8d:88:
8a:f6:cd:14:73:25:87:a9:bd:ba:c0:fa:2c:1b:82:
dd:31:93:fa:81:40:15:eb:59:27:7d:a2:89:1d:80:
1e:f3:4c:01:e3:f0:7d:8e:af:5c:cc:63:dd:8c:df:
58:91:17:1c:81:e0:d3:d7:57:b4:de:1c:47:73:69:
8e:f9:1e:43:33:25:57:d1:7f:4f:bb:f3:66:8c:67:
f5:03:70:3d:63:b9:2d:13:cf:08:c8:c1:9c:57:ea:
fd:12:19:37:7d:4d:5d:91:b7:5e:1b:c1:9f:ed:0b:
b8:d6:a3:d3:b8:a9:7e:d0:6b:61:57:2d:56:5f:b3:
3c:e7:71:74:f1:52:6b:65:6e:b1:71:ff:74:4b:fe:
ca:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:32:11:7A:4B:99:E4:E1:40:7E:27:4F:C5:97:8F:35:E2:76:C1:CE
X509v3 Authority Key Identifier:
keyid:99:25:2F:F7:F4:DC:F6:22:34:D2:2F:86:A1:13:5B:34:49:23:DA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a1:fa:d3:8c:68:96:36:e1:eb:4d:db:da:66:27:f4:fe:82:
21:b3:04:86:32:17:22:c1:77:73:d7:d8:73:89:51:9c:ea:7e:
e9:69:32:b2:89:8b:41:58:89:89:36:ed:86:b8:3a:3b:55:34:
8f:07:4b:2e:0e:24:b0:18:79:ed:49:19:31:61:67:63:1f:5d:
09:4f:34:d3:7e:67:4f:64:80:79:4b:2d:08:57:f0:2b:14:af:
ad:eb:94:da:1f:34:b3:55:b2:b4:7e:1f:88:5e:ee:2e:d9:e6:
dc:77:d3:52:6d:5f:11:f1:ed:fa:0b:29:20:b1:b5:8a:eb:25:
eb:f9:88:5d:3a:b3:69:51:e8:4a:c0:4c:56:51:57:92:84:0c:
46:72:87:45:88:bc:e2:76:00:8c:bc:98:c9:ce:63:bf:4e:79:
19:77:6f:39:f8:26:dc:c9:88:e7:59:db:0d:58:27:3e:53:30:
d4:d2:be:d8:18:80:e5:bf:cc:63:e4:94:ff:4f:81:72:fc:2b:
dc:01:e8:01:07:02:dd:8b:20:c0:fe:74:41:ae:43:33:65:7c:
fc:22:95:0c:e6:82:bf:46:70:08:12:c8:80:75:54:23:38:a3:
0d:ae:85:d7:9b:26:30:35:b0:5a:97:49:eb:82:69:17:11:83:
7d:65:95:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:09 2025 by rpki-client