Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
File: mssomVmi7E-KKEGRVELMvTRCSTg.mft (raw, json)
Hash identifier: xoFbqANdldg2M/CoVqHLF/FvMqCTVyIh/iwmrHolJr8=
Subject key identifier: F9:F7:C4:2F:C9:3A:93:A2:F0:BA:F3:4E:9B:45:CD:F6:0D:6B:B9:2D
Authority key identifier: 9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
Certificate issuer: /CN=9acb289959a2ec4f8a2841915442ccbd34424938
Certificate serial: 019A03A4E2BCCFF08D237D536C02B8DC13C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
Manifest number: 0221
Signing time: Mon 20 Oct 2025 22:02:08 +0000
Manifest this update: Mon 20 Oct 2025 22:02:08 +0000
Manifest next update: Tue 21 Oct 2025 22:02:08 +0000
Files and hashes: 1: XTu5vjEexW769xTu81kG0hu1WhA.roa (hash: Ne41d2x1Hfl8GjUz/n/mltRHcHp7ZxByOWAV8Ao4X7o=)
2: mssomVmi7E-KKEGRVELMvTRCSTg.crl (hash: W8uEB5JSVozCpKZHamH9toB7AZ/7bKyh5V5QzLb92wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a4:e2:bc:cf:f0:8d:23:7d:53:6c:02:b8:dc:13:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9acb289959a2ec4f8a2841915442ccbd34424938
Validity
Not Before: Oct 20 22:02:08 2025 GMT
Not After : Oct 21 22:02:08 2025 GMT
Subject: CN=f9f7c42fc93a93a2f0baf34e9b45cdf60d6bb92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:36:0f:1f:dd:3d:0a:8f:33:43:8e:bc:61:51:
c8:91:7a:31:9c:6f:f7:88:53:54:d6:e5:15:c5:3c:
46:72:0f:10:f7:0c:3b:48:9d:ca:08:8f:64:1b:9c:
49:98:90:c8:f6:72:2f:85:0f:4d:75:42:a5:c5:8d:
8c:2b:97:c9:5e:b1:da:e1:b4:59:76:4e:23:1b:0d:
f2:ff:33:c6:72:93:47:df:7c:b2:27:60:b6:3b:56:
5c:d9:08:0d:e4:92:e0:af:83:b6:99:54:cc:d7:dc:
3c:75:3e:7d:7f:8b:1e:4e:b5:70:28:c5:33:4c:6a:
70:f1:c8:37:a3:ec:a8:a3:58:60:13:95:d3:41:d7:
e2:76:0f:e2:e6:e9:b9:d2:3c:a6:a0:b7:b1:81:a3:
d2:5d:ab:15:dd:32:79:53:83:0f:4f:e7:da:4d:08:
d6:f5:db:59:31:d9:4c:fc:52:78:e1:f0:d9:71:99:
9d:54:6f:86:f6:cd:76:a2:75:9f:21:8e:f1:0f:c8:
87:0a:5f:e4:fb:7d:5e:54:41:3a:dd:fa:23:5e:bc:
eb:ee:2f:b2:46:b2:80:e6:74:30:fc:25:f3:8c:7a:
22:49:55:d1:2d:67:f1:c8:0f:8c:10:37:a5:af:2b:
e7:57:9c:61:5a:8a:2d:96:91:76:48:39:48:b3:6f:
46:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F7:C4:2F:C9:3A:93:A2:F0:BA:F3:4E:9B:45:CD:F6:0D:6B:B9:2D
X509v3 Authority Key Identifier:
keyid:9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d9:65:04:8f:3b:ce:99:7b:ca:8a:a5:3b:47:54:ba:cf:ef:
cc:01:73:11:a9:1d:a3:d2:21:83:68:1a:84:cd:e4:21:1f:73:
2a:74:1d:df:82:ee:4c:ce:7f:e3:1f:8e:19:9f:9d:10:b7:cc:
2c:67:0f:f7:50:4a:e7:e0:c5:60:cf:65:62:f7:40:fe:de:2e:
72:87:9f:2e:ce:bf:82:8c:77:10:0a:78:ad:3d:c0:5f:2f:14:
71:d8:df:3a:9c:b2:d8:a7:97:5d:fc:5f:06:d5:41:cd:0a:b9:
ff:d9:72:28:57:a3:20:af:77:d9:4f:43:7f:35:a4:cf:e5:75:
53:54:de:7a:ab:06:0d:d8:89:a7:66:13:f0:f4:a7:93:fb:d5:
fb:5b:f2:10:c1:49:ed:7c:bd:f7:a6:00:6d:3d:61:da:e2:eb:
cf:72:9d:c1:98:0d:6c:68:cd:37:86:d7:9c:4f:60:c1:66:e6:
e6:fd:b9:92:30:af:5c:05:7e:eb:38:d0:1b:ca:04:b1:4e:44:
4b:b1:a9:20:8f:bf:7f:79:31:a0:47:ff:13:8e:98:a2:07:e0:
e7:57:34:35:7c:c9:7b:8d:26:ca:f3:59:d5:03:f4:3e:eb:c4:
8c:24:9f:dc:72:bc:23:a1:bb:2c:77:65:b7:52:79:1d:a7:46:
d3:25:fa:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:11:40 2025 by rpki-client